{
  "more": false,
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "name": "SwiftIOC",
      "identity_class": "system"
    },
    {
      "type": "marking-definition",
      "spec_version": "2.1",
      "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9",
      "created": "2017-01-20T00:00:00.000Z",
      "definition_type": "tlp",
      "name": "TLP:WHITE",
      "definition": {
        "tlp": "white"
      }
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--0def3e24-c8f8-5cc5-a9a2-5c40b11d3c34",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-114625",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-114625"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--fee12076-2c0c-55f5-a591-c40154e7e895",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-110447",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-110447"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--799838d3-d3d9-532a-8d02-d1b0ae19f159",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-96656",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-96656"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--4b8af201-6eb6-539b-a58c-36213ad43bac",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-96655",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-96655"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f0e8f0ec-0c8d-548e-bb4c-a24624ec7699",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-96654",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-96654"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f725d2d7-b647-5066-99cd-9cfb9ecd9935",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-96652",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-96652"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--38d4df6d-1ba7-588a-8116-7d7310eef408",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-110936",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-110936"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--98637371-27c6-538f-9036-4f851b49cfa5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-106931",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-106931"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6bc28bd3-887f-55d0-9324-064d41c3c252",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-102764",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-102764"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a9c91d91-1219-539a-9cf6-4c0a14570777",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-61624",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-61624"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "medium",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--3c95ae4c-2d7a-5fc5-b10e-966a5cc964f5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-21589",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-21589"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--87035f1a-464f-5572-a816-e7d15aaf73a1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-76519",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-76519"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--226f1875-aa39-59cb-a6fc-0c320f1d09c5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-0322",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-0322"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--4a171fd7-92f7-5806-be5f-69b9f2a89c9d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-105134",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-105134"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--9b79484d-9c4d-51a9-9749-bf2523a382d6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-105133",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-105133"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f9c95572-217a-561c-a8d7-02becf4e817c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-96951",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-96951"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--0b54849a-2ef7-507d-91c6-305adf6a40be",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-104935",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-104935"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--11f9b4e1-c1cb-5194-95b5-6f984cfc74f4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-22894",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-22894"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "medium",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ce4a1b01-013f-5fe0-944e-482e6ddd980b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-3199",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-3199"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--34e117f2-3387-5262-9d71-b94fd14025b7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-3081",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-3081"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--0658facf-1835-5335-9fc2-990875df74a2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2015-5477",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2015-5477"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--edecd7bb-0116-59a6-acb3-f903134f7257",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2015-3306",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2015-3306"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ead1a4ca-27fc-5a91-9ca1-2dcb245c03e6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-88779",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-88779"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--9fcf3d83-e15f-567c-b6c1-95d5e0ddd0d0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-102490",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-102490"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--46736baa-297b-5903-9ddf-9e9fb46b48b4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-102489",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-102489"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--165ec1a4-0496-5c87-b2a3-7d3266af4d57",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-104286",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-104286"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b51af897-1f21-5c6d-ba95-7bc1364b0cb1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-76504",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-76504"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b7e1ebdd-d792-577c-bed3-1375bfeeb10c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-86950",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-86950"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--eff08ab9-6045-50c6-810f-2b3c05771c66",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-88772",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-88772"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--228ebc22-5328-54cf-8195-d92bd9081dea",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-88771",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-88771"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--47680f3a-f38c-5acb-ac12-b679f68feea6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-87902",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-87902"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--2dab20d7-4aa8-5b01-ad41-6113bcd9d499",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-67279",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-67279"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "medium",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--25db34a6-b37a-54df-b51d-c3993bd36a63",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-65660",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-65660"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d9e2d918-c04b-54ea-84fe-fafa5b3ff417",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-71362",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-71362"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5ac825c9-f15c-524a-a8d0-77b4c4d9ea09",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-5430",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-5430"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--07d17513-22e0-5756-96b5-f90097c129ba",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-94127",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-94127"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--309f4ab8-4100-59b3-b0de-e0d6e68b434b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-93952",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-93952"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--00cc0901-52a2-563d-922c-ca07e072124c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-93616",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-93616"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--18ae8129-7ced-5aea-9024-53241c8270b3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-85102",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-85102"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--9da1695e-47d9-5803-b4bb-81bdaca002a6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-7273",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-7273"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--dceaa2b3-65ca-5cf7-9ada-06e1afe5dcb3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-53266",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-53266"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--24440aff-8a2a-5924-b6fb-a7b5f781471a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-39964",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-39964"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--907d331b-7d2b-548a-9cd4-d5133f52bfc1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-39682",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-39682"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c92a1239-514d-5d50-b145-3777fb72fee4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-87886",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-87886"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--11dd0fdf-8187-5de5-a167-9c10bfcd662b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-76460",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-76460"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--515cedae-67a4-5c5a-8fbf-604946226ebe",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-58704",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-58704"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--3e9b927b-8c5a-5ba6-8df1-0507454f7f8a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-76461",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-76461"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--57c79f1a-f6d8-5303-a215-01f035ec4b85",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-85706",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-85706"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--bfab93a8-f80b-5daa-a91f-e4a343cb937a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-84869",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-84869"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5b2391b3-f883-5338-a754-6220a8230b9a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-42018",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-42018"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--fe5672e2-f882-5cef-8d8b-47db183e1200",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-42016",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-42016"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f00756e8-eb9a-58d4-bcec-11497f304594",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-86060",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-86060"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--737082a3-51da-5597-88a3-2e4c2e264088",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-67277",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-67277"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--22e8a7da-ec26-533c-9e15-15f9a9b72b10",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-87491",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-87491"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--7695b3a2-96ba-5369-b9fe-19314fa23275",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-19490",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-19490"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--0d0096b3-69b4-5c7d-94df-43a375135fbd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-20079",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-20079"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6b2095fb-5a9d-5d0c-a055-62b831aee0b4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-25249",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-25249"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--24319869-62c5-52df-8b0e-962d01b9919e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-85880",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-85880"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--18e1d9e0-2a40-56b6-816b-d9fac67de31d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-81963",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-81963"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--8a0f8724-2fbb-583e-8a31-804d3646c841",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-75650",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-75650"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--8d7ce288-b0eb-5509-9fb9-56ab1e617ba8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-86218",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-86218"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--856fba81-0b65-53ff-918e-1f68ef026dbd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-85046",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-85046"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f4c12abb-e690-5b7a-b517-65f61d0a6642",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-49869",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-49869"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--574dbd06-e491-512a-ac1f-99c5c2e7aec1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-83549",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-83549"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--bcc24e06-ade3-538a-b375-c1b56bb42556",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-9586",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-9586"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a36cc9d2-c7b8-577b-90dd-ed0db67e4224",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-59822",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-59822"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--59ea7e3e-561e-5d3e-96f6-31249a3612fd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-48710",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-48710"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "medium",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--3c546bc7-c5d7-5104-8fa5-d21bd16f7f35",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-83548",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-83548"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d9a5e35a-1316-5918-8813-17e7b391e8b1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-82329",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-82329"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--4fc93ef0-6297-5fce-b11a-de71759779cc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-82078",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-82078"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f9e3831f-b20b-5baf-b729-f5e8af60e525",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-81578",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-81578"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5b4ac45a-4de0-5363-b6f4-47d89625258f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-49105",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-49105"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--53e9e075-cdc6-5cd6-98e0-cd6e705d4b81",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-66384",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-66384"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "medium",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ad01d393-efd1-504f-83a4-ea7cb4b903f1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-53362",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-53362"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--8aa49541-7a87-53f2-baf8-eb2c9685eb48",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-0995",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-0995"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f83a49a4-99b8-5375-a484-425535e2e472",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-23758",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-23758"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--085b9ae4-4b5b-5751-8ccc-2353247870b8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2015-5287",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2015-5287"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--aed430ce-6681-5a4d-bf09-bfb0e8b6e2d6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-1068",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-1068"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c60f29fc-ae0a-5c3e-87e1-4f2416c8ea21",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2015-3246",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2015-3246"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "medium",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--746758c3-36df-5182-9001-7c4e8920ffeb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-8452",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-8452"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e61d7b22-0d24-5ba1-949f-bc88ff1ea912",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-60004",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-60004"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--618f8777-460c-543a-b059-6b464545375e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-21962",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-21962"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--61e29d4e-d40c-5a98-a8ff-773bdd0a0585",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-73570",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-73570"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d3774530-3bdc-5162-a49e-4f06f8348b14",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-72530",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-72530"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--8dc5b603-3c65-5f60-8fe9-77608bd731cb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-72529",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-72529"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e74d1d4b-d241-5d1d-aafd-b6552a802f77",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-64849",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-64849"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--69b1fdc3-e3fa-5715-8895-413b9883ac5e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-65400",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-65400"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a62fdb6f-a864-5ed4-8d37-d245f64a76f5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-33824",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-33824"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--84554516-a958-5494-9274-4584aa8038ae",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-59310",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-59310"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--065d1e30-5c57-55a8-9a68-3f72a5e1981b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-55040",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-55040"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--45679c4d-b55c-5820-9b82-dcdf07ae385d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-62593",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-62593"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--15ab6252-efe0-554c-88ba-08bffb213a83",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-20349",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-20349"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--0b084eb2-5178-519b-bf8b-d59a1efc4f94",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-72898",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-72898"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b9badacb-1aaf-554a-9f4f-5d37ede3e9d2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-68820",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-68820"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b83632ae-2f09-5cad-a218-0494c3b4f6c6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-8037",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-8037"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--12c5a336-6b07-5ca4-b0d6-13c1787b39ae",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-63077",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-63077"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--bacca8a3-853b-58c2-8ad5-fcfcb94772f4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-18556",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-18556"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--0962f36e-011f-5e90-90b7-7f173346be6c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-9198",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-9198"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e2f462e0-3125-5211-a3ab-f4eefdc1b167",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-34486",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-34486"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6c97ebd4-b0c6-5a0b-a447-8036beff0392",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-18577",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-18577"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--693db8cc-330e-5406-a2b0-cec65205874c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-20316",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-20316"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "medium",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--43413bdc-0667-5f55-b4b5-96a96714363a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-16812",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-16812"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--024e7e33-16c6-5a1d-832f-692e867c599b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-68686",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-68686"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "medium",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b03356f7-87bd-56ce-8f3b-e8e42698f26d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-16232",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-16232"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--50c34844-2de3-5216-9644-b76fba592ca0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-50522",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-50522"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c348eaf8-c00a-51e7-b60d-13b375a44745",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-0770",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-0770"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b460d3ff-b3f7-5c5c-aa0d-75dd21bf2761",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-63030",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-63030"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--314ec8de-f14d-5f75-bc70-4ca59f16e316",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-60137",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-60137"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "medium",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--0079e252-7a7d-5d08-9166-f8dd38c16275",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-27137",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-27137"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--21284158-db61-57a4-abc7-0e7ddae0d475",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-58644",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-58644"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f5a94cf0-12bc-5a8d-b9bb-f9d32471af24",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-39808",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-39808"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--1814f3cb-bd1e-5699-a833-2cfc77e95e56",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-25089",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-25089"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--439c364e-62e0-5044-89fa-164152834c14",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-46817",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-46817"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--1a14c7f9-a861-5028-98fe-f8634403121d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-4346",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-4346"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--3217793d-4a59-5b23-9be4-93c5dc17d3e2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-15410",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-15410"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ac03c047-7834-542a-9653-2cc67eccdef4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-15409",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-15409"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--4467e3de-7aa1-5157-85ad-8d43d3f93285",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-56164",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-56164"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5853888d-c170-561a-a516-2b04993ace6c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-56155",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-56155"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f73bf383-ce63-52b9-9650-1b2f32f32ea3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2008-4128",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2008-4128"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--7cd2f435-93f2-56a6-a789-21176abbe919",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-56291",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-56291"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--47eaec5d-42d6-546b-a8b4-aad312d30aa8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-48939",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-48939"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--0869ca94-9b4e-5cad-a369-828dd80e1a66",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-48282",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-48282"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--18ae1a19-0189-5853-92d2-e7907817a240",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-56290",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-56290"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--66a7a408-bdee-5d01-b7dc-88189d5297a8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-55255",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-55255"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--704862b2-da93-5279-91fe-b8c3a7db8e95",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-48908",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-48908"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ff0d05a5-8106-5f76-83c5-7fc6b90a87eb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-45659",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-45659"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--35cb440a-2e4f-568b-a7e6-c73a1ca29b8d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-48558",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-48558"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--15ece561-1c4e-555a-9429-65f67661dfaa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-12569",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-12569"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6c12968c-cb68-5d69-b9d8-a0b453136f80",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-20230",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-20230"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c013ae05-3a4c-5f7c-b137-8f106bd60912",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-67038",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-67038"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--3a80e314-f674-5bbe-9c00-3b3426d62de6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-34910",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-34910"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--41c843b1-91dc-5fdd-aeab-c91bfe4b3eb7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-34909",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-34909"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d1ee4139-fcf3-5585-a99e-bbdf5d6f7861",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-34908",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-34908"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--4c5e233c-a02d-5600-b1c1-bfd958729787",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-20253",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-20253"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--85547a4e-9170-5cca-8332-fc83461223bf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-48907",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-48907"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--486aab03-d829-5243-87b7-135ee9715e37",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-54420",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-54420"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5950e370-402d-5a3e-8e18-4d28460c1f5c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-20262",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-20262"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--03458203-8b90-5c27-b7ed-0c6cb2a12bd2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-35273",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-35273"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e4f99255-f55f-5593-8d3e-7a3e24d144c4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-10520",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-10520"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d41902c3-19cd-5ab2-a1f2-638660855dfb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-7473",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-7473"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "medium",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--01549f9e-f4fd-57c9-bf1d-d46d458cebc5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-20245",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-20245"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--32447d29-32d2-5a4b-8cae-7781f0c77fdc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-11645",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-11645"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--49f37cc8-7082-559d-85a2-de84170fd06d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-50751",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-50751"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--92ec6cec-28b1-515d-9789-b6529b87f14a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-42271",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-42271"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--3d42a62b-43db-54a1-a14a-b30250084d90",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-28318",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-28318"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6a324076-f19b-5a5b-9ae5-914a42e3e6f9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-45247",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-45247"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--1273b6dd-be95-5ae9-9f01-7503ac8736b3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-48595",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-48595"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--9fd382ac-f0c5-55a2-bdf8-3720c1be6725",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-0492",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-0492"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--12db248a-4d66-5a78-9ffa-1e54f0e2c250",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-21182",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-21182"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--32205c84-fddb-56a3-9d6d-0b7a7585cba1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-0257",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-0257"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--1d5514a4-58b3-5963-91a4-d9cba7f5814e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-48027",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-48027"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c4aa99f9-8996-57a4-9982-685e161f89c5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-8398",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-8398"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--8272ec37-8dd1-5bce-ae4f-8ac2c2063154",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-45321",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-45321"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--9136ada3-eb8d-5870-98f1-a243fd518f28",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-48172",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-48172"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--02f7f850-02fe-5625-bf70-e557eca3d42a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-9082",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-9082"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--3c3ca9ac-dd4a-5f26-83d9-c9bdb6c90f29",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-34291",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-34291"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e1a703fe-e70b-59d7-9144-b0d73cd27b07",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-34926",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-34926"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f3c9bd7f-9fa4-5358-aaa1-f18256d6817b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-45498",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-45498"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "medium",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--50e19d95-9712-5bde-96ee-53204cb0226c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-41091",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-41091"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--fa0c22ad-7906-5929-a0f3-6101e7b51ee7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2010-0806",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2010-0806"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e770e240-7a51-5f19-891a-5695fce1db93",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2010-0249",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2010-0249"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f2fd84cd-854d-5c29-9710-451d4ea0a09b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2009-3459",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2009-3459"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ac905e77-c134-578a-a66e-fd5ad2d967ba",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2009-1537",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2009-1537"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--14f12aa2-92a5-54cd-8f61-ea94b386475a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2008-4250",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2008-4250"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--2cf90de0-eaaa-57e7-b8d2-96614d9d071b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-42897",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-42897"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--bbcdf26f-757c-5b2b-9f3c-a070277af8ab",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-20182",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-20182"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--087b02b7-5e03-535d-8f24-b0e170aaddbb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-42208",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-42208"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a3dcd32e-d624-53d7-92f7-249242da554e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-6973",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-6973"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--46ed21a2-0873-5aec-897e-dd8979c5037d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-0300",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-0300"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ac65f4fd-598d-57fe-9657-1fc1300be669",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-31431",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-31431"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--1f36fa1f-cecf-5df0-a6b6-8b046999dbed",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-41940",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-41940"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--07f7607c-1e70-51ee-854f-c9caac785d95",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-32202",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-32202"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "medium",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a9cdfc79-fc0a-52e1-8c00-4cbfd7c25de1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-1708",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-1708"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--eda072fd-ba9e-5308-982c-152b85eb1992",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-7399",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-7399"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--588a312e-6bc7-5c55-8ad2-c1ae6ac6c909",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-29635",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-29635"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--881ce30b-81d3-5f90-abdd-023ea0b9cbf1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-57728",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-57728"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--68d2060e-bc26-5adf-befd-ba84ccdb1f61",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-57726",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-57726"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--75e0f249-4b39-51ca-8a55-04210cef6376",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-39987",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-39987"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5b2c2dd8-1674-55a8-841f-9dc4d980fce7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-33825",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-33825"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d72a4884-fc44-5672-858c-37102b1e748d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-27351",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-27351"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--95d35034-ca97-52de-a2e5-fce6547e5153",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-20133",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-20133"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5403df7a-4de6-5bcd-827f-791147d5fcf7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-20128",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-20128"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--03e5afcb-ecb4-52cc-8f69-83dce9ad1655",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-20122",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-20122"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--df6a0225-23b7-5442-b751-177c9a59f76b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-48700",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-48700"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--2e602e0b-0727-532d-8eac-8b5ea05b6806",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-32975",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-32975"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--75093633-cba2-5ae1-9e29-b51dc16a7b00",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-2749",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-2749"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--aef583f8-2056-5ce2-8641-865c120950fa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-27199",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-27199"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--fa7bd0d4-cc6b-502e-bd67-83eca7e450d2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-34197",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-34197"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--0a9c8373-c030-5c42-a982-3acb4aea21bc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-32201",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-32201"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d39cdde9-b817-5f8d-a6ff-3f7cd743b0da",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2009-0238",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2009-0238"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--2aabbb4c-d392-539b-bbf3-c30bc830b6a0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-34621",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-34621"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6812389a-fe65-5350-9fa2-b0623a9a72dd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-60710",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-60710"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--aae0f6f3-62f8-5f31-93d5-448dee5f7270",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-21643",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-21643"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--31183ee7-0c06-5a07-8df3-7e9009832c66",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-36424",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-36424"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--201ffb4a-d628-5438-b4ba-99df51a0e87c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-21529",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-21529"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ebf627d1-78bd-5ab1-bdfa-dd3bb894e874",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-9715",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-9715"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--1cd3d8a3-5016-500b-9c1c-d2a224669632",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2012-1854",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2012-1854"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--58c956fa-1db4-5b16-8db5-fb7597b50f5d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-1340",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-1340"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6df12594-a13c-5430-b10a-b0179f4bd6d9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-35616",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-35616"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d44ed458-33df-5f0c-bce1-4e7aa919477c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-3502",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-3502"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--90d8321c-8182-5d3f-9e45-9b547835000b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-5281",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-5281"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--60fe3c0d-55e6-53ff-9b2b-ffeeee89fced",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-3055",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-3055"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--beec71ca-8110-5245-8b81-460f34e6adb1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-53521",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-53521"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ed053730-668b-599c-9f3b-23bfe7bf8d7b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-33634",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-33634"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--cba6d2e3-83b8-5643-a6bb-3b13a2367cfc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-33017",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-33017"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--cc97b79a-ed14-58d6-b4aa-845b6f76113d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-43520",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-43520"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "medium",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d9aec3d3-7cf6-5840-8a8d-674e831b5a9e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-43510",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-43510"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--018a39f1-712a-5ec1-8282-7e8d1552737e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-31277",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-31277"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--90a86fd3-6185-5a37-896a-04ea19f07117",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-32432",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-32432"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--617db750-798f-5f63-948b-32da5998e1d8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-54068",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-54068"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f4a2643a-45ac-5fa3-abc4-9fbc1814cca0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-20131",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-20131"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--4e8a192a-813b-586e-995f-0ad0fb486f27",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-66376",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-66376"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--dde84cb1-cd68-5055-b506-8e9c573a217a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-20963",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-20963"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--470b96c5-e408-5187-8855-48f692489be5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-47813",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-47813"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--abd2fa0d-3174-553e-9005-00508eb3c73b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-3910",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-3910"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ae8392c4-c562-570e-96fa-0d5877a91faf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-3909",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-3909"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--66b3f04b-5c1a-5eda-91ee-88545b812193",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-68613",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-68613"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ee701589-e592-5c19-90fe-af7b480025d0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-26399",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-26399"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--4d2d79ce-3e66-5712-b755-4fa39db89803",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-22054",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-22054"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a5c611a5-97d8-56dd-a3f4-2f9f4323d48c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-1603",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-1603"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--658379c3-1657-551a-b96d-f6d81b76aeed",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-43000",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-43000"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--9a004244-5891-5e54-a7db-c531c6152106",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-41974",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-41974"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--bd4bbafe-caba-5db4-b251-33361f0c74ed",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-30952",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-30952"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--50de7c10-5d87-5d40-bb1b-559db66e3fc4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-22681",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-22681"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--4e01ba37-bfdd-5d51-9192-3cfae8f0df2d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-7921",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-7921"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--98cbedb1-e577-5c57-aae4-6df469647614",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-22719",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-22719"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--cedaac71-617b-5218-a1c9-22fcd402a240",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-21385",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-21385"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--572763ef-9943-5526-8794-749a2309d140",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-20127",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-20127"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--75277473-8378-5b2c-948d-8a37b21631da",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-20775",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-20775"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--05c92a34-6533-5a5b-aea8-efbe6826c85c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-25108",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-25108"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--70b6d660-7214-5921-9d64-e1940b25b66a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-68461",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-68461"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b78b39d2-e048-57a2-9b8e-2347cf3d7a99",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-49113",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-49113"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b3415596-577c-5ae7-bb30-9802b146a08a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-22175",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-22175"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "medium",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--0f6980ce-c278-54a2-ad0c-69464eb82d41",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-22769",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-22769"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--4cd80e30-98f5-5304-8dae-93bf80e020b3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-2441",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-2441"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e6908ec9-ff1d-5499-b8ea-7cbdeb7884b5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-7694",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-7694"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--218e042e-6cfd-5b19-af11-87bf8ef8464f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-7796",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-7796"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--07682a8c-1626-5ede-b026-fe7be2f1f3de",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2008-0015",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2008-0015"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--68ceedd9-45f2-57cd-ad7e-383a3c8af3dc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-1731",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-1731"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--1cf01942-9ed8-5200-bb66-73a42fba8d50",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-20700",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-20700"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--7f10d639-e8d7-57d6-af26-963f2ce91573",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-40536",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-40536"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b38dfb6f-ff68-55e6-964f-671004a3b094",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-15556",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-15556"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--040aaa75-4d00-5406-981a-d5e69e22b86f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-43468",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-43468"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--9ca38e3b-92e2-5c8f-a39f-a072709adde2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-21533",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-21533"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--341d215f-0574-5ef8-b30a-6459526e28d1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-21525",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-21525"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--9aa065d5-6dc6-5b6e-9b76-a930a890a5df",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-21519",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-21519"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--302dd9b4-bff3-5a4e-a656-a979f9382cfb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-21514",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-21514"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b9bc0df4-75e7-5453-9e69-84911d32f0a6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-21513",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-21513"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a101c3de-7cc1-5307-bcb6-0f88c7f9517e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-21510",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-21510"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--8f3c3fe4-5de3-51e5-906e-40ff1109c182",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-24423",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-24423"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--acbe8778-29a0-5d07-9a13-455fac108b9b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-11953",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-11953"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c8948404-2739-5a4d-91a9-6bbbdfb9b68a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-64328",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-64328"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6b632b15-bf7d-59c1-82f6-9c947e301c81",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-40551",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-40551"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--1064691e-be8c-5f1b-b3ac-8c10d27cf0c5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-39935",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-39935"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--99d1e489-32f1-5858-9659-4f8082fc484d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-19006",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-19006"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a3c8aa5c-867f-5ca4-9066-ec5cb61a97dd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-1281",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-1281"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5bcbcfb9-a765-5707-9d50-b46c634bf036",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-24858",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-24858"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6fb12375-a94a-533d-80ec-5c8b98d9dd40",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-23760",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-23760"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b2b2ca2c-f9de-5cb4-889d-4a02498b2a0c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-24061",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-24061"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--beccbe52-3074-519c-b0fd-5d2033e30be1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-52691",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-52691"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b11c3c49-12cb-5f5e-a27f-03f5036f60ea",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-21509",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-21509"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--74c761d2-a340-5fe4-83e7-b90c14702456",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-14634",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-14634"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--41eeb84b-2b5f-51bd-8db0-45f31fd20250",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-37079",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-37079"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--15293c4d-bc21-58e2-9516-42ed5dc2291b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-68645",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-68645"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--953f73c6-4276-5b95-aa47-9d4c2db4d63e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-54313",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-54313"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--987077dd-ed6a-589b-8643-4afb697588a0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-34026",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-34026"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--8a97a64d-09b7-5b5f-982e-343b20d12fe8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-31125",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-31125"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--202b0f9e-f231-5cc9-9d0c-a7b0ea335d1e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-20045",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-20045"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--1d214838-d9b1-5615-9354-3e6a35c360d2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2026-20805",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2026-20805"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "medium",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--fe7dec2e-e762-54ac-bcb5-d89b5c24f59e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-8110",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-8110"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--593c42c0-b1ba-5fe3-b35c-04d770a74a32",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-37164",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-37164"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--04165dde-abd2-5b26-9e92-a6650df8f61e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2009-0556",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2009-0556"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d0aa917a-5f88-520e-8b1b-709cf985ca29",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-14847",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-14847"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--322bdf6b-d485-5fa6-b2b4-721bb4f00b01",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-52163",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-52163"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--26882937-2601-520c-915a-c5c282699166",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-14733",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-14733"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6fd2136f-2d0f-5c6c-8e7b-592055e3d311",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-59374",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-59374"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f8698282-c0a4-5312-9c7d-3318c189aec0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-40602",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-40602"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c5813288-09cb-5e3c-8abb-0af502771cee",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-20393",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-20393"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--9f4676ed-fd21-52d0-8ed5-ca71cfee6c80",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-59718",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-59718"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--870c6048-077f-52fd-a5fa-6020a727e227",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-43529",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-43529"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b556ed3d-89b2-5d82-b8ab-ab3b87daaa93",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-14611",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-14611"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--16952859-22d0-5199-a9c1-702a6969d4ad",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-14174",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-14174"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--394c5c51-13f6-5507-bad7-2804dda28f24",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-4063",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-4063"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6d72f04b-1742-50ad-bd93-86786b70d823",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-58360",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-58360"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--1e6b3820-4511-5d2b-91dc-1a15aec28c1f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-62221",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-62221"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--cb3b5a0b-c636-5202-b79a-bf25209ff98e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-6218",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-6218"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ae358cec-4310-5ea6-ba45-ab80c597dd8d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-66644",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-66644"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--7f1c773d-c9d5-58fd-b206-df4ffa2ffc21",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-37055",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-37055"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d80bb83f-7aac-56e3-9d2a-c4bf432215d7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-55182",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-55182"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--7e487649-dea7-5d63-81d1-a90f84ca760f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-26828",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-26828"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--147f1ea0-dc4f-536a-96cc-76207478f04f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-48633",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-48633"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "medium",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--2f4a3300-26a9-50ba-b628-df2b62104fbc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-48572",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-48572"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5551210c-74e6-5c26-89c2-29d540381b74",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-26829",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-26829"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5a00a42d-bdc8-5456-9be4-17c9696af7e9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-61757",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-61757"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--3c13b81b-d83c-5d54-b360-0ece92668ca5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-13223",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-13223"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b9af5c79-3c27-5fd5-8d57-2afd88803e29",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-58034",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-58034"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--3fbb26a0-6642-591d-8cc8-35c00b9203f4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-64446",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-64446"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d88a1c68-9804-57d7-99f3-6e7dbcde215d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-12480",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-12480"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--64fbf85a-30e1-52a5-b23f-a942ca64348e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-9242",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-9242"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--8380ef41-67ff-537d-8aed-2b10af0a954f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-62215",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-62215"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--31198f28-b24b-5b45-997b-cea2df400a90",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-21042",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-21042"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--410a9155-4381-5cdf-be3c-d0f8d99ff519",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-11371",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-11371"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--9d937511-7a73-5703-a1a2-75dd2559903c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-48703",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-48703"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6297e252-c6e9-58d2-b745-593f7af61561",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-41244",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-41244"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c5641840-b3aa-5649-b5fa-dee3f5b182db",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-24893",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-24893"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f16d871b-077d-57f1-8b44-9e4dfce48a58",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-6205",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-6205"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5d5253b6-0618-5c30-bc23-eec01245edcd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-6204",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-6204"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--127c9dac-51fd-52ae-9a5c-d9d0f4381056",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-59287",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-59287"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b79cbc8b-aad9-5127-b144-300feb1364e7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-54236",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-54236"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f50cf193-5225-564e-a6a4-c2ca85c31a66",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-61932",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-61932"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--694a7965-4bbe-5eaf-99ce-9be093c7c1ce",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-61884",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-61884"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--9b13691e-9d97-5558-b0a5-779ee194db2d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-33073",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-33073"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b19637ea-da5e-5af5-8aa8-ec2dbcd2222e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-2747",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-2747"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--43851422-cb0d-5cc3-a775-8128c27dd7aa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-2746",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-2746"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5ec9156b-6e4f-5288-a22e-2fb951820711",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-48503",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-48503"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--de56c2a3-6457-58ca-9206-b219730f376a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-54253",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-54253"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e965b20e-7d32-54b2-ae9a-c21386640517",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-59230",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-59230"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6c40b21c-98b9-5eea-b5dc-7f8f74f28390",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-47827",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-47827"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6d5bfc2c-dad4-544a-9461-9394dbfeaa9c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-24990",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-24990"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b90d42e1-9b32-5124-841e-1961ab2e125c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-7836",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-7836"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--4fd5b70a-ada9-5f16-8d06-42d70dca103a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-43798",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-43798"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--64d26356-9d58-5bb7-87b6-26ee5ec4b818",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-27915",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-27915"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--325e6b86-839e-57d9-9cff-62816a2de6a6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-43226",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-43226"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b4446a67-fedf-5be5-a9cd-e49cae1dbd81",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-61882",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-61882"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--2035374c-55c6-5df5-ae86-dc5bf2d73065",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-22555",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-22555"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--0d6e200e-2925-5493-803e-01278f3b9d8b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2013-3918",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2013-3918"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b6606742-d587-5aff-9ecd-6918e533c9da",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2011-3402",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2011-3402"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--7d474172-e91a-5662-be26-d5ea712c6365",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2010-3962",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2010-3962"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--dc5e93be-a1b6-5708-b327-223e0f28362d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2010-3765",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2010-3765"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--73636518-a25b-5be4-b1e8-f1447ea873ae",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-21043",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-21043"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--416e5841-2f8f-5e68-8208-dc9270885692",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-4008",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-4008"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b04ba469-1403-558f-958e-48a57beda839",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-1000353",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-1000353"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--16b4a732-ff8b-5930-81e5-3e8de58cebde",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2015-7755",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2015-7755"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--30eaa475-c272-541a-ad6d-2da61d340534",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2014-6278",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2014-6278"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--16e040c4-db8b-53b4-a604-1acc610fad2e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-20352",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-20352"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f57a604b-4d5c-5828-adb6-4c166c7bc1a5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-10035",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-10035"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--80e9d2c0-ace2-5b57-a7f5-7155fec9c67e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-59689",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-59689"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--172c775c-dc35-5b9c-9123-64374bd436e5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-32463",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-32463"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--55a7d719-2acf-5d07-b097-a18430b24861",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-21311",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-21311"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--2d961803-d5c7-5a2b-859d-c18ba846d640",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-20362",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-20362"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "medium",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--4f3eff6e-3f2e-5514-af3e-1be37bd564d7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-20333",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-20333"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--436d0c60-b566-503d-a44d-fbbd2568e4da",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-10585",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-10585"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5d36b37d-83b8-5407-9675-4895bfe3a841",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-5086",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-5086"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--af0395e9-916d-5dbc-90e8-75a24cd26892",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-53690",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-53690"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e6793805-0317-5a84-850c-c30491e358f5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-38352",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-38352"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--0bd43ead-ece1-5d2f-ad6e-068aab8a6871",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-48543",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-48543"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c9f2a927-bc42-58c0-9863-1714a602f70f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-50224",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-50224"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "medium",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--79e9d08b-a753-5f30-aa69-a2a88f923d1b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-9377",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-9377"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--4505ee03-95c8-5c4d-a28a-91046ac46815",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-55177",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-55177"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "medium",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e21a0b1f-75bd-5c07-8697-db10eae57939",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-24363",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-24363"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--585e34da-6123-5a8b-be2a-1d607452e8be",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-57819",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-57819"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--dd8205b9-155c-5876-89e6-383c7f663846",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-7775",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-7775"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e2c74ba9-4a4d-55ad-a1e4-075a883857f8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-48384",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-48384"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--92f9fc1a-cc30-5169-8f6d-ae266961e232",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-8069",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-8069"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--de706e2c-397f-53b4-b74d-3c25f937e955",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-8068",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-8068"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--789db52e-c545-56c5-a711-3b0ea4b2bd42",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-43300",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-43300"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--383c32ab-e4a3-52a0-a9fb-634ab1c03c93",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-54948",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-54948"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c49207b2-a02b-5be5-95b7-da409c7f4032",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-8875",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-8875"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ee7ecf0d-bc65-5584-bbe3-dd44507b497b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-8876",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-8876"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--38660ff3-2cac-538b-9a1e-c3569a65ab43",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-8088",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-8088"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--8733b304-ef32-5834-8aeb-28fd6c020caa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2013-3893",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2013-3893"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e699de9e-7454-5ef9-b9ad-a1a02dcf8b12",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2007-0671",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2007-0671"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--50cddae5-e7ae-51dd-a398-7c82b067385d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-40799",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-40799"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e8f22529-3f37-5cd9-bf0a-89d608f46cd7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-25079",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-25079"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--58bd957f-d880-50ad-81fe-dadeb0714a36",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-25078",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-25078"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--8cc51ee7-5892-56f3-ac0e-e8f699ee1442",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-20337",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-20337"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--43a07f27-196b-5de8-986a-2742d331c9ec",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-20281",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-20281"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a8e61864-96b0-567a-a4f5-9c8419a13d09",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-2533",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-2533"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--edf0560a-e204-50bc-8110-e8a8b9b98ee4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-49706",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-49706"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "medium",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--de3a2ada-d9a5-51b1-8954-e532247dea41",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-6558",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-6558"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--37cbe4f2-2a7c-57f2-be14-e44bd223b9ce",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-54309",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-54309"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c781dd32-5db1-5ba2-8709-36726ffffeb8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-49704",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-49704"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--cb00b859-1d26-5d78-bdd4-051a4e977ae0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-2776",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-2776"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--3e408840-a512-54aa-b92d-ee9d3a1fe543",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-2775",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-2775"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--9b084724-587e-5292-bf7b-796cc511aac6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-53770",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-53770"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c8594b60-d820-5b64-bd2e-f5e5ec8de0cf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-25257",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-25257"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--0f7fe639-bd1b-50bb-a1ce-7d4ffde8abdf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-47812",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-47812"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--fe21ca86-93e0-5b46-8143-36c4d960978a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-5777",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-5777"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--9579d204-ee19-5292-abc3-fe6530075648",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-9621",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-9621"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--9b3d1459-cd86-5ad2-811b-c1bcab6ba809",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-5418",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-5418"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b3f6b2b6-806f-5ae4-8c8b-8aed5bcb5707",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-10033",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-10033"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e0f1c68c-6c7c-516f-bfdc-89d289aea5e8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2014-3931",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2014-3931"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--2795f159-fade-570a-b3d6-71ffdcfba839",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-6554",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-6554"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b66fd931-63b7-597a-9d87-35b2dd78d859",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-48928",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-48928"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--84042782-b427-5205-8606-f43d162ec267",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-48927",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-48927"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--8e5042fd-c079-5319-8cae-c81635a1e669",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-6543",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-6543"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--05415cb4-20e8-5abd-b53c-4d86bc86cbaa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-6693",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-6693"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "medium",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ec406520-0666-5717-83d5-39553ea9f770",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-54085",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-54085"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--86005fa3-a804-5775-ad64-596ce890fc07",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-0769",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-0769"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--36d4ccbb-cd04-5beb-94d0-116d6de908d2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-0386",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-0386"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--4ab36dad-b1b7-5756-b4d9-3a6574905c24",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-43200",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-43200"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "medium",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a06d8ff4-bd07-5071-90c9-9539372489d9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-33538",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-33538"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--9149cdd7-9c62-50a9-bdfb-5e3f3a91c2bb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-33053",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-33053"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--402eb1cd-973b-5f92-be35-71f92e1e9971",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-24016",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-24016"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--8aada0fb-0e3c-57ef-adfd-5100970e39fa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-32433",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-32433"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--bc46363b-d220-5054-a1b4-dd1b7d79b707",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-42009",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-42009"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--7373e7f9-c973-570b-bb8a-4226a9654d0a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-5419",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-5419"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b317097c-e1e0-5321-a1e4-9db53af27dc6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-27038",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-27038"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--43635bef-4167-58f1-a81a-23daae95be36",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-21480",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-21480"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--4ee86c3c-0a9e-566c-a64d-6e65d5e66548",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-21479",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-21479"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--aa955bd1-7d2e-5e3b-908b-c8897550eaad",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-3935",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-3935"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--8eecd6ff-d16b-5fd8-89bb-96780b5f2380",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-35939",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-35939"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--4f459880-c416-5cc7-9acd-8c9a89ca8716",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-56145",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-56145"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e3813547-db36-586f-9917-4df737882262",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-39780",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-39780"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--60a75df8-e0ef-58d8-8612-9954f783f09d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-32030",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-32030"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b033d4c9-78a5-5e2c-9a19-4551248c2375",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-4632",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-4632"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--3d1e0517-6bfd-5080-a616-318f877219d3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-4428",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-4428"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b05e8207-9c7d-567a-9211-149551d1cd48",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-4427",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-4427"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a025c180-4c2e-5b2e-ab9e-f057d9bd4e03",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-27920",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-27920"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--4d078c87-3388-582a-ad90-37b861a1f3b6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-27443",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-27443"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--464573cd-31d1-50ef-95c1-830f429d833c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-11182",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-11182"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--91e33813-2bd4-55ef-9be0-64dc63081d87",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-38950",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-38950"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6515e61b-17a3-5273-94e1-cb7bc484bca4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-42999",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-42999"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--56c85141-47c7-58fc-9b19-0295742a23be",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-12987",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-12987"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--4d5445cc-1c2e-5b4c-9f35-d4d55187619b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-32756",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-32756"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--904a3985-2a18-5a26-a292-56b40f6d61b8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-32709",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-32709"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a49436fd-91cb-50f8-b725-9a9dcb334e51",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-32706",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-32706"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--16d92aee-f4e1-5fc8-8dc2-d40e37d74de0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-32701",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-32701"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--0396fce9-696a-581d-a7a9-f0eeb6491aea",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-30400",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-30400"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--8eb89359-12d0-5a94-9e36-1cf4e6f714ec",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-30397",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-30397"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ff08dfb4-bfd3-5176-91fe-6bd7aa196656",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-47729",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-47729"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--1a69b4de-5b7a-54ae-911a-d71587e5fe48",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-6047",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-6047"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--595f8faa-e060-58b0-a342-7dc94f870bee",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-11120",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-11120"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--1b1df426-54ce-544e-b7d7-6c7fdbc4edeb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-27363",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-27363"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e27f837c-062d-5610-9cf4-6ebaeb39f2fb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-3248",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-3248"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e835cfcd-8c32-58d1-9c2f-6a8e08df02f2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-34028",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-34028"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--002052e0-b75e-573b-800b-ec456216d56f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-58136",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-58136"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--2bdf67ee-d2d2-5616-957d-6f60e6e2c06b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-38475",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-38475"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--548fd007-abca-5617-9b6a-77b0c2c0185e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-44221",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-44221"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--593aa6f9-2fc6-5afd-8fc5-4cc8a31a5ede",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-31324",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-31324"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ef44fd20-2e7d-5087-a6ae-eb85ee51dbc2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-3928",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-3928"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--1c17cd95-78bc-5075-a127-1a0cadbb747a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-42599",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-42599"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--94ec763e-23ff-5b87-b234-c4a0634579a0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-1976",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-1976"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--fcfb5b33-e0fa-58a7-b4c8-ad35b636b088",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-31201",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-31201"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--29b24e3b-d1f5-5742-9462-1e6d8a7f1aa1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-31200",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-31200"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--33945b74-3b57-57da-8d18-e4e002eb7c5b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-24054",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-24054"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d5a5ad7a-ba9d-5d71-aaf8-53d11e623630",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-20035",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-20035"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--1160c1f6-b2eb-5aba-8348-de92a18fa1b6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-53197",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-53197"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--038cb5b4-f1f4-5da6-972f-92f4e7098461",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-53150",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-53150"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--9257ab08-297d-5769-9d80-7ccee9fb82ec",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-30406",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-30406"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a01745b0-e945-5a18-b63c-01bcd3c122c5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-29824",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-29824"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f0f95505-e74e-5fd1-bd25-ec21deb5952c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-31161",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-31161"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--fbe6f882-69ec-56fa-b2bd-da62d0b350aa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-22457",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-22457"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--aac07009-c3d6-5d2c-9d04-ee74acedc4d3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-24813",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-24813"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a64e9150-2415-5c34-a181-1ddab714fd18",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-20439",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-20439"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--56dcd9bf-2fb0-5003-9e4a-a62bf3767b4e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-2783",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-2783"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5df1d869-adc1-5ccb-8781-52a63074c051",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-9875",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-9875"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b93bac91-e813-5d7c-a4c6-7358edc3151b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-9874",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-9874"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--9e072873-8ab3-557c-807f-0ab04b5197ef",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-30154",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-30154"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5159b9b5-8b9d-5368-9d4e-e9895d1dd908",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-48248",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-48248"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a9a011ba-015a-5b7f-a93a-6c978e1b6431",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-1316",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-1316"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--aaf4365c-16d1-513d-bdee-f8952320d88e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-12637",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-12637"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--67a51c50-7aed-570c-93d9-199a950db9d4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-24472",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-24472"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--cfd06f03-c32d-59ad-828f-db930d25d569",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-30066",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-30066"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--545be2bf-3725-5b01-a6e2-c9bdd237e73c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-21590",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-21590"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "medium",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ed9969cd-3225-5d7a-83b1-0347dd295dd5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-24201",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-24201"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--937394cc-68d7-548e-bddc-40d576333d89",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-26633",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-26633"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--32611106-f912-5ce0-a7fa-206b1545ceb5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-24993",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-24993"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b339ce17-f04c-5677-b352-5b2c44cbde49",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-24991",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-24991"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6ccccdff-a840-54e5-8f38-5fb9c2bd591b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-24985",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-24985"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6cb4a857-ee11-58de-a8a2-16498932825c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-24984",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-24984"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--493b7e2f-4e49-51ea-9fdc-fb1f50f640d1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-24983",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-24983"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--0de0fecd-92d3-5671-b299-069e189339dc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-25181",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-25181"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ab98102d-88da-5915-802d-647206836339",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-57968",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-57968"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d060a51e-a2a0-5195-9a79-248628f0d5a7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-13161",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-13161"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a1e62da7-952b-5683-9b70-ca1d3b12a3eb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-13160",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-13160"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--18dd425b-96a8-55e8-9431-f6347e7d00e3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-13159",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-13159"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5e286073-bc2b-507e-a784-5ffb090064b4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-22225",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-22225"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--940c1183-48d9-5439-8231-bd8a8522afc1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-50302",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-50302"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "medium",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f7a93551-b35d-5805-9777-3dc8fea83a23",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-22226",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-22226"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6a13fa84-c8b2-585a-bd94-e6e3ff0b58c5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-22224",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-22224"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b1a32232-8255-533c-bec0-02aac5b64349",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-4885",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-4885"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--bd07bd25-43f7-59d6-aa44-947d8522fba1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-20118",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-20118"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--9dd47b8c-2ba9-5548-889e-9032aa82e819",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-43939",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-43939"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--63c6d0b0-f100-5dec-a2f6-6b19f22ad919",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-43769",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-43769"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f5f32cb8-182d-5835-b4e3-e127c46c7f26",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-8639",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-8639"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--4b05ef33-d3dd-56fc-b77f-f18eab58d0c7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-49035",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-49035"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a0912746-b71f-53de-8391-7dfe15eb1455",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-34192",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-34192"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--00cc3a13-57bb-5102-b49d-fb917c8faf7f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-20953",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-20953"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a8c124dd-42d0-5661-b6b4-e232b3e86fdc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-3066",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-3066"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--cf787053-d6c9-5e32-a497-24ebf330460c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-24989",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-24989"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--68999597-e244-5540-8a8f-e2f8721d3f6a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-23209",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-23209"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--04a6db01-9f4a-514f-b6e3-a1b5cdbda5dc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-0111",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-0111"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--148f422b-3f69-5c74-b500-a2ca7af829df",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-53704",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-53704"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e39ac537-4a09-5007-9d78-99718e11605e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-0108",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-0108"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--fe9e3d77-3b3d-5f0c-83f3-f2393babd508",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-57727",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-57727"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f49bebe7-055a-5ba2-aac9-05b90d687669",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-24200",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-24200"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ff34d047-978b-54f5-859c-71026d0e625a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-41710",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-41710"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--67d45e43-e574-5382-b2b9-8ae48edccaaf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-21391",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-21391"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--1f9dc11a-340a-52b0-8e74-ec8f2025ec09",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-21418",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-21418"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--bcdb799f-d89b-58f5-bdee-2865ac696fdd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-40891",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-40891"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--134521bd-8832-5982-b247-41b5af71019f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-40890",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-40890"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--9b479cf5-3d00-53f9-963e-67ca4f5e82c3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-0994",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-0994"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--77b52e11-e2cd-5d3e-8bea-63f8b6fe18a7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-29574",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-29574"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ea5157d4-0cca-564b-b0bf-f26de953dbcc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-0411",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-0411"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--3ff1d292-4d8d-54e8-b558-d881a12d1a7e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-21413",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-21413"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--70864999-37f8-5fb0-82db-cd4cd1e2f6ab",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-23748",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-23748"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e5e001c2-bc44-57cd-bc32-18ed1a7c25bf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-15069",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-15069"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--05c49863-baa9-5d9e-94ec-6751bd65bb1d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-53104",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-53104"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6d49064b-9dde-5d85-b5cc-de3ceb618c2f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-45195",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-45195"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--45fd0a2b-cd4f-5692-8a28-cc2e0cd2a6ee",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-29059",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-29059"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--8b705266-860c-55c8-8317-262489a68611",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-9276",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-9276"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ad7f5516-5c09-5ea3-a218-92027f9947ab",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-19410",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-19410"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--86a8a419-30d3-574c-a905-affca8f32332",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-24085",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-24085"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--3829f2bc-799f-5ab8-a3e3-8b510176e872",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-23006",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-23006"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--2335adf9-5bda-56ad-baee-e5f3179a9eb9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-11023",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-11023"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f276f4bf-1eca-5347-bdea-896288a9733c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-50603",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-50603"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b5bb1653-f4d8-5938-a249-fe741cb2be6c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-21335",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-21335"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--019fde1e-985c-5ec0-b408-f874105b7be7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-55591",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-55591"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c76619c1-833c-5390-9a81-8463c7ef34c3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-21334",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-21334"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--13d82e11-9247-50d7-9d9d-7989e25c293b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-21333",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-21333"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a5cdd375-521e-5782-843a-7ad7a43de911",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-12686",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-12686"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e03ebeb9-0d32-524c-a1a6-8ed4951cd995",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-48365",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-48365"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--1a2dc05e-44c2-5d3a-a30e-82614eb51eaa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2025-0282",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2025-0282"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--1811abe1-76b1-5c82-9489-ce4cb30434ec",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-55550",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-55550"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "low",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--74392595-32fb-5dbf-a38d-457fbb12b56c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-41713",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-41713"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--086dae87-2a41-5375-8ede-7f876f3c9ae2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-2883",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-2883"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ce4e7cff-882d-5b31-8c38-b0aef4500099",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-3393",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-3393"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--bb331471-a5b2-52ab-8655-74830d5a61db",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-44207",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-44207"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--7d06bbb4-4d98-533d-a9c0-c93a615ebb65",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-12356",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-12356"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--63f20b30-3e6d-5edf-a54a-25ff0d8cb76d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-23227",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-23227"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--717ad4bd-dd46-5517-8191-0a73764c97c4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-40407",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-40407"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a47a6f9a-b4ae-59f0-9088-a6c9b6b00198",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-11001",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-11001"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b15621bc-6a47-5854-b38a-d8d67bb1efe6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-14933",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-14933"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--cd24958b-f81b-5f4c-9e44-cac0d2bed128",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-55956",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-55956"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--1e6c0cd3-83ab-5b76-80cb-7a3beafa1085",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-35250",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-35250"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--4e98cc5f-9ece-5748-89e9-d594d5161e59",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-20767",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-20767"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--319fdcef-532a-58d0-9fb6-4f26224a7349",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-50623",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-50623"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--63d436ff-60be-5513-85c4-608a3e8b9a8a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-49138",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-49138"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--4518c34f-537b-5b17-a62a-4eac38d79e28",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-51378",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-51378"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--49b607f4-8a22-5b2c-b399-57e841611f81",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-11667",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-11667"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--06814336-eead-549c-be90-814b3c9c4f09",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-11680",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-11680"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--2364d47c-d966-5ef3-ad5c-8e6959702340",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-45727",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-45727"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d73b9fb6-c992-59ea-9d73-77738cde93ed",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-28461",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-28461"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c7ed5213-42bc-5b29-9d55-859637644c8b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-44309",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-44309"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e6031804-338e-5284-9b18-f4f3b8cf0fa3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-44308",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-44308"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c6bbab58-fd7c-5dbb-879c-261076130a17",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-21287",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-21287"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e786c77b-0c0b-58d9-8631-ece8c5c19183",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-38813",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-38813"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--850b9180-9ff6-52c8-887e-601a9b0d5d29",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-38812",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-38812"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--784a9326-7fd0-5f8a-96ac-b160efc9f56e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-9474",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-9474"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--fa27fdc7-b613-54bd-8a7e-ecb54e924651",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-0012",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-0012"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--321ad80f-7d76-5e4b-823b-cdebbb44058c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-1212",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-1212"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--2e5a18a9-75df-5d28-aa0a-b44e8299b837",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-9465",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-9465"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c2440b81-3073-58fd-a489-b1e341bf7089",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-9463",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-9463"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ea69bb5e-55ad-5ea6-9294-abdb3d92903d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-49039",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-49039"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--0241335e-2cac-555c-a7fc-60a31ea7377a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-41277",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-41277"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--81578020-8b4a-5b1b-98e7-b6ccbdecc651",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-43451",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-43451"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a281cabd-493c-59bd-aca4-42d72f347fae",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-26086",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-26086"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--48884d13-20aa-548c-a385-9d0f36286023",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2014-2120",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2014-2120"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ebc4c5a0-4d53-57e9-b04e-5cd6443a1976",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-51567",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-51567"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--8369c20e-c10b-5d3d-b05e-dbe008af0fa5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-5910",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-5910"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--8fec1daf-61f9-55e8-a09f-f4512327d0a0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-43093",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-43093"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--db3bd23e-1d62-585f-ae91-b606d7d537a7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-16278",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-16278"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--76a85c4d-fd9b-5a02-b37a-c0a4f26a6f25",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-8957",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-8957"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e91c02e8-9d16-57a1-ba5d-397e520694e7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-8956",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-8956"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--4ca0f1a5-b512-572f-995a-09040036ced2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-37383",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-37383"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--25ad1a0a-e36b-5b9f-a60d-a3dd74d5595e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-20481",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-20481"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--32e16595-e78a-582a-a1dd-4bc24ae1c78c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-47575",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-47575"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a410b945-5503-5103-82ee-15149f1ee562",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-38094",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-38094"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--48194ea7-452e-506f-9974-6df74348de79",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-9537",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-9537"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ffb5291c-acfd-514a-a5e1-9e447e73ce26",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-40711",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-40711"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--dd86fc3f-e570-593f-8723-3b5d2c05c603",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-9680",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-9680"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--11ad3590-45c9-54d2-8363-f491a3a8b61f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-30088",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-30088"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--97d72d4f-abe1-54c8-b7c3-d23299456817",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-28987",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-28987"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f87a2afa-7efa-5382-a586-82fcde46ea6a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-9379",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-9379"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "medium",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--933fc70e-6f07-581f-a033-e20342dd7f0c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-9380",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-9380"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e5abad58-35f6-5ca0-a8cf-9f747f5d2a99",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-23113",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-23113"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c8be2b80-8af3-530e-bb17-427028d86d6d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-43573",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-43573"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--bc597673-57e4-533c-8873-718f76b2071d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-43572",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-43572"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--447e72a9-b725-5e49-a9c4-11438e19eb0b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-43047",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-43047"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--02bdaafa-bbf5-5ea8-948a-238a7a6186e5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-45519",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-45519"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5de89ef9-9034-5b8b-ac29-b5c25f0663f2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-29824",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-29824"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--247ce76d-910e-550a-9669-1d1566b9d9b3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-25280",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-25280"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--46a477c2-4138-56bd-a933-de3b1446c6be",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-15415",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-15415"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--29304407-c494-5cd8-95c3-cfd4f67d2b53",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-0344",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-0344"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e67108f8-ca33-58c7-82eb-ef330220178f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-7593",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-7593"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a348bae6-9ac6-5e65-907b-7c976f6a7cd3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-8963",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-8963"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--493eeb04-331c-5b9d-bf04-d8344fbaac55",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-0618",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-0618"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--742c60dd-fa9e-5dc5-9cac-27318c96bf5a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-27348",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-27348"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--8587e728-4160-5f14-b7be-1b64c31ddab2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-21445",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-21445"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--42435f1a-e45c-5404-be6f-ad345a39b37d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-14644",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-14644"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b7b64a77-54bd-59bd-993f-2580716068e4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2014-0502",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2014-0502"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--92d3035b-b069-5094-afdb-7aabc1568713",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2014-0497",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2014-0497"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6ce9499e-0823-5879-99ba-56cd242df999",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2013-0648",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2013-0648"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b9378a0b-5b2d-5371-95ea-7511d360ad8f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2013-0643",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2013-0643"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f1ef7e02-a121-5eb8-96e0-735a97a81df1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-6670",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-6670"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--62aef6d3-6f7c-5aea-a536-a6cd348d563c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-43461",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-43461"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6e1e3db8-5660-501c-925e-3d1a2f37869e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-8190",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-8190"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--48f3b693-60e1-5e3a-b747-96a93ec03745",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-38226",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-38226"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--3a17057d-9ed8-525d-9c45-4615afbcd7f8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-38217",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-38217"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--9e3ee7b5-2c7c-5e7c-8fd2-c6439825486d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-38014",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-38014"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--83d8a0e7-5f84-553c-9a9a-17a57d1e0009",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-40766",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-40766"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5d22c00b-0f77-5418-a7a0-824badc4cb6f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-1000253",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-1000253"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f57795ea-d23f-5f2b-8f08-499a7bd6a486",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-3714",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-3714"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--3d9aa5c4-7a0a-5d3d-8916-34d38c66a4b1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-7262",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-7262"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f71f9d44-48c4-506c-88e6-7e1cd93d14d6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-20124",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-20124"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--4e24aa72-98ce-59ac-b86e-fa40d5cba8ab",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-20123",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-20123"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--69fa8898-a8a8-5623-931d-6f26b6640c97",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-7965",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-7965"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--cd8ecc1f-9823-5900-9c4f-e4c4e4ebf3fd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-38856",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-38856"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--07f94f80-b82c-5407-93d8-0575082ae868",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-7971",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-7971"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5db6b6c2-e138-5511-bc38-10b8ca32550f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-39717",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-39717"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6c4b4a45-aa46-59a0-a8a0-ca5f3dc82bce",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-31196",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-31196"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--93e4a0a6-e927-5d36-a401-0e49d4a216da",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-0185",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-0185"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--4ac94bda-f756-54a6-9bf5-fa8fef61927b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-33045",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-33045"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--64a548e1-eec3-557b-b26c-cb187449cdf0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-33044",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-33044"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--06eb2caf-202a-52aa-aaef-e2d20a3c4d25",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-23897",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-23897"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--978b7bc3-fb32-5371-9117-de5da3fd1280",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-28986",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-28986"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--0130c31c-ea99-516f-8c1d-87807daf5a01",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-38213",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-38213"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--099fe014-8a0d-5c1c-8839-186ab5d8e8ec",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-38193",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-38193"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--02b45b89-c5db-5403-94cd-5e17f4ecbd86",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-38189",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-38189"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f97f24d9-98c1-5bb9-bec8-07f002a0585e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-38178",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-38178"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5bbe3a5b-e3f6-5a78-91ce-017c7aeaf7f5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-38107",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-38107"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--655f8f01-cb35-5970-b76a-7ec2120f1694",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-38106",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-38106"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d6452885-ed3f-5103-88d9-80d16ee53195",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-36971",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-36971"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5b4d1638-7253-50f5-9da8-947f9ceb8291",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-32113",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-32113"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--eac593d6-1503-5e5f-b25e-2fa1d44c6986",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-0824",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-0824"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--7f494611-916d-54e3-b630-6e067eeeb82a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-37085",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-37085"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--299837df-49f7-5ba5-9873-5a08d3984dbc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-5217",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-5217"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--467bbc28-1a01-5d44-af0e-2d80dc1cec81",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-4879",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-4879"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--cf9f88b5-bf32-5e61-a853-0375ca318737",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-45249",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-45249"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--1af9948f-c66c-5b31-abc1-ff90cc0c81be",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-39891",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-39891"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--84672182-2154-5300-9bef-652463f7699c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2012-4792",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2012-4792"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--656d6c47-6690-5331-88b3-a301adf6e9e3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-34102",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-34102"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--00e75f00-184f-5bba-aea3-0c793709f49f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-28995",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-28995"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--06a234b6-740d-5e0d-bef0-32777d429500",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-22948",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-22948"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d93a108f-85bb-56b0-aa8b-2aaaed016b13",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-36401",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-36401"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a9d8e773-bf5f-5dcc-8ff8-4fe35132f5b8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-38112",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-38112"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--aece29aa-5d6d-5b85-9dcc-af00d36b8efe",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-38080",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-38080"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--975eb6e4-15a4-5b10-8e84-726763b108ac",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-23692",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-23692"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5a2eeb27-11a8-528a-86b6-82f875e116a4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-20399",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-20399"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d0334bb1-fbef-5df7-8602-2d63e801bf5a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-2586",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-2586"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "medium",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--84d9ff54-4340-561a-9cdd-af4362cf0e9b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-24816",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-24816"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b0f6c708-1f8e-5dc8-a66a-a174134e14d1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-13965",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-13965"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--4decddea-727a-58c9-8bbf-5551647322e5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-4358",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-4358"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--3fe881c3-1c99-5c55-9d77-dfc84a14ff70",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-32896",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-32896"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5861ff3c-ee9e-5b1c-8206-dfb27d69e090",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-26169",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-26169"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--3c7e1a96-195d-5c8c-a1ae-8e815363bfe7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-4610",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-4610"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6bbc0b4f-ccba-5e65-b407-6587ef9f8cf3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-4577",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-4577"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--557414c2-36aa-5473-a4b8-8356e9063e07",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-3506",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-3506"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--2fa8d2e6-865f-5a77-95f0-7244e1a2d0ff",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-24919",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-24919"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e2247ef1-7fa9-5c43-b033-956b931ef61c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-1086",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-1086"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--154fd22c-d357-5712-bad7-6d2e7825a217",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-4978",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-4978"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--91d358c1-eb68-556a-81ac-49bcf79209a1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-5274",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-5274"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5cf56249-c515-5d31-ae25-9719279782c4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-17519",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-17519"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d1bbda2c-bff1-5cbb-b858-73acc82b76b3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-4947",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-4947"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b02cdd17-b0bf-5fc2-9042-3f8b0dedb5ac",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-43208",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-43208"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--145c6ae7-20c8-5b3a-865f-a69e0143319a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-4761",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-4761"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--bbaeaf84-65c7-5512-9d30-df3bddc1b49d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-40655",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-40655"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c1a2d9ea-b1df-5345-87a1-03659ea4bb51",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2014-100005",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2014-100005"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--4bcc57fb-00e2-5c7a-8774-5536aa1ab45e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-30051",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-30051"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a813e97f-c6cb-556d-b2ef-19b2a5445c75",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-30040",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-30040"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--4d817583-3fa8-516a-9aec-5248b9a2b408",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-4671",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-4671"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--23a87ea5-a3c0-5c4e-b4a7-09e7ef53eacc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-7028",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-7028"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--712e6a18-b10b-5917-addb-5b285db71928",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-29988",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-29988"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--897520e0-52bb-5374-a991-a0053eae07c7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-4040",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-4040"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ddeb7aff-8f89-5cff-a3f8-742432f3c182",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-20359",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-20359"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e60307e7-74fd-5668-ae3f-6a1f06442e38",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-20353",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-20353"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--31abdf74-9a93-55db-b903-4b56c8c3bc52",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-38028",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-38028"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--969874da-d50e-505f-830a-a492dda1038e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-3400",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-3400"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6590cec2-5848-580f-9997-3481c9a85cd7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-3273",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-3273"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--9767c637-bfff-57c6-9311-2fbb8712d799",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-3272",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-3272"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--7b497dab-382c-5507-8392-b43cde63a988",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-29748",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-29748"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--fb18b38d-4ce5-52d0-a71b-14879b58d8a2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-29745",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-29745"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e3909248-e425-5c73-831a-e2d7e45b8bbc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-24955",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-24955"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--773a5fc8-3049-5fcc-b591-1282369d3069",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-44529",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-44529"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--92eb0050-d093-5f41-bb23-04bd7c0e537b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-48788",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-48788"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--54d4b37c-0e8a-5ad3-8407-ee1161ef8e46",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-7256",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-7256"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--febf2f3c-4ce1-5a2f-9bd9-723c79a07699",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-27198",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-27198"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--8a84fdf0-b24f-5459-a203-1eb844c56b92",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-23296",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-23296"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d5809251-fd62-5598-bca2-9535ff402157",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-23225",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-23225"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c71c1534-31dd-5b87-8489-17d2990fa1ab",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-21237",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-21237"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--1c1dff0b-2297-5f1f-bbca-4a7d3e003132",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-36380",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-36380"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e1917d41-66f0-5f52-9353-4d106a9097d9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-21338",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-21338"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--49933cb5-665c-56ad-a5e9-37ebda5ebe83",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-29360",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-29360"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--0b9768bc-c5e5-5dbb-8ac0-601dc9ecaa4e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-1709",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-1709"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d2e812aa-71c5-50c9-a5f2-74b441424602",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-3259",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-3259"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--884dc671-0a99-5728-99b8-bac44306039b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-21410",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-21410"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--96577808-2b61-5ba7-8de3-5f5b1c419209",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-21412",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-21412"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5c5ff16b-4bd5-5f82-b633-5501634a8fa3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-21351",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-21351"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--fb46511a-18b9-5daa-a124-1149f9cf1804",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-43770",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-43770"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--28e84cf5-4d48-5c4d-b4fb-b2cea2700fc6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-21762",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-21762"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--528fb70b-df2f-5a3e-8a0b-5e99731af7a0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-4762",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-4762"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ce44dca1-356a-57fa-9367-d77b566cbd36",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-21893",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-21893"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--8276d2f6-3156-562c-9756-50e7d5fa53f0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-48618",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-48618"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e08aa0e1-06aa-538f-8d7d-aa0774405040",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-22527",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-22527"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6c2f33fc-9c2f-599a-afa6-81e88e1ac403",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-23222",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-23222"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ae5bb85b-47d7-5a36-b4e3-f6909f4a8363",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-34048",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-34048"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--849f980b-f19d-5420-9f57-a573af8cad55",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-35082",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-35082"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--81110c27-4727-55b1-9dd1-7e344990913d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-0519",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-0519"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--0b9df578-4a7f-5bfd-b025-53994413e739",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-6549",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-6549"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a6e4b6dc-0b53-5972-9be6-7bd797fd09c3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-6548",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-6548"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c0756f84-5a97-5036-b663-4a0008d56bf9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-15133",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-15133"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--8227c044-a6a5-53ec-991a-95cee388e582",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2024-21887",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2024-21887"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--9fd1c464-015a-58c4-a0e2-5d92cfbbd436",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-46805",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-46805"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e9164481-21ef-593c-a064-3ed96a8370f8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-29357",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-29357"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--4a80c91f-2624-5a4f-bf25-878679f6c855",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-41990",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-41990"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--864988c0-637a-5747-8be1-9effaff9391a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-38203",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-38203"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--3dfd7cd8-1068-589b-874f-1489963d69f6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-29300",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-29300"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--0877a067-3ba2-5e46-9b46-05963091ba02",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-27524",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-27524"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--134b9cb7-a656-5f85-bc30-4a76c10a1aaf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-23752",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-23752"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--0b762efb-b357-5195-81a6-12022105ae08",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-20017",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-20017"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6dc456f1-db6e-5da8-a0b4-4916e9e23323",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-7101",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-7101"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ab05037b-53f2-5914-9b97-fcc9ff59e922",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-7024",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-7024"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--27adb1fe-9327-5e59-8b9a-592b446bb92a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-49897",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-49897"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--218cc97e-6b4d-5e4f-aac0-af1eef145462",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-47565",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-47565"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--7094a105-37f5-5336-8c2c-025f2f1c84d2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-6448",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-6448"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--55e3e9fb-2ad9-594a-8ef5-b98f2658b752",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-41266",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-41266"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ab91a005-3356-5a25-b88f-8ad4db060282",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-41265",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-41265"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--467bcd17-f723-5970-a421-efe7974b200f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-33107",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-33107"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e38191cc-cd55-5058-8d81-f6f02779eb14",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-33106",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-33106"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--0298503a-b5c4-504c-ac83-24b3833d351a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-33063",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-33063"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--dc9b2400-1b1d-51ba-8006-ddf815c5f3be",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-22071",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-22071"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--52c0e9e2-6555-5b54-a730-f02df0f45973",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-42917",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-42917"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e7f02da2-300e-5975-b457-8af634a5d841",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-42916",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-42916"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e82ab0a9-4d48-58a4-aff5-990d004fecb9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-6345",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-6345"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--2fffad0e-c2f5-5b5b-a66f-bbf91b11f330",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-49103",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-49103"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5abf56c6-c3ce-5bbb-875e-c582e6eb37e8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-4911",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-4911"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e4aac6a5-effb-53a6-809a-1065b2f6c489",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-36584",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-36584"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--400c5f28-6d3a-54db-a0d8-57c660507aaa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-1671",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-1671"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--79e59d64-92b7-5f23-b19d-46843c46e33c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-2551",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-2551"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--7cca6db1-59bb-59d9-9986-cde6b9396242",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-36036",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-36036"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6e864b70-f927-599e-8a3a-99a18fd551a6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-36033",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-36033"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--55d61124-2428-5d5e-af4d-81b10e422499",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-36025",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-36025"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--405e063a-9c90-5bcb-86c3-ef2de273e650",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-47246",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-47246"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--1f1712cc-c53c-58e3-a815-07b121fcface",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-36851",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-36851"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--9a3e3396-4586-5557-9958-fbd92aef17fa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-36847",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-36847"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--75f1f9cb-33fd-59ee-a353-e61bfd523548",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-36846",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-36846"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--8cafaa2e-5c70-58f4-a37f-658133e8bbd5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-36845",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-36845"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--12ea0364-2ce6-5d7b-9316-79d1c0f718ef",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-36844",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-36844"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--2be62db3-bec9-5644-b78d-c6dd8567a344",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-29552",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-29552"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--0a6326bc-c5d9-5e12-9445-ad7ce44ff1ea",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-22518",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-22518"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--21db9db5-b21b-506a-bd63-a92ebb066031",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-46604",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-46604"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--eb798d9b-97cf-5d07-abf6-17d5ddd988af",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-46748",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-46748"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--2a1a2110-de0f-537c-9329-66281ebf86ee",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-46747",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-46747"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ba26d3bb-b1da-59b5-b487-bb046addde84",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-5631",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-5631"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--7d606213-9e2c-5242-a1fc-cc8530033c64",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-20273",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-20273"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c9968ad6-22fc-5d26-b0c8-bb15d3dabed6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-4966",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-4966"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--13cf4bd6-6af3-5be2-a186-6dcd8eb46518",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-20198",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-20198"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ce676388-c92f-5ffa-acd3-6f23577d3bce",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-44487",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-44487"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--dcf76342-136a-523a-ab83-48084a8a7858",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-41763",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-41763"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--31c2bef8-c811-530f-a156-cab15c16b5bc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-36563",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-36563"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ac1a4a48-9479-5f7a-ac89-6bc68c9021df",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-21608",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-21608"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--637bc254-dc09-5e69-bd7c-212a5a83c5e0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-20109",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-20109"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--9ec02918-1fc8-5f19-ba4d-713103b70243",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-42824",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-42824"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--9d6533b0-a42f-5d16-bfbb-e4f2bd983755",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-40044",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-40044"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c4db27a3-aaa5-5faa-a862-1c66d218436b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-22515",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-22515"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--fc8f8a06-5eae-52d2-8b54-ba4a0940adf8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-42793",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-42793"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--57b14094-c872-5f94-b481-ea6c30121a98",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-28229",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-28229"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--01e23394-3032-52ab-8c97-d1e8237e926f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-4211",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-4211"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--fed2e879-2644-5daa-b6a5-3e5b564ce2b0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-5217",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-5217"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--cadf9ea6-601c-5eee-8887-ef395954e832",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-14667",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-14667"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--270e246a-89c5-58f7-a0b1-5d0ec4be1052",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-41993",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-41993"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--01d15585-f972-59c2-81d4-82fa725385c9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-41992",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-41992"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b6782426-c09d-5a08-9685-bfef5944f893",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-41991",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-41991"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--77a357ea-8ef5-5eb4-ac13-276c52e6c7b3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-41179",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-41179"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--9ec55111-8d49-5a21-abff-2f8ac4174766",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-28434",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-28434"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5fe943e9-b745-5704-800d-fc42d221cde9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-6884",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-6884"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--fd62ec02-0287-5a7e-ae22-fdc5dbd76423",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-22265",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-22265"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5293abf2-2873-5314-8795-58e441bb9c19",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-3129",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-3129"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--79a74e33-9990-5239-ad4d-40e1aad2a2d1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2014-8361",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2014-8361"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--0c51f89e-560b-5367-8522-c1d28c0e8bd7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-26369",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-26369"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--4bfbfa60-aceb-5bb1-8d14-3a95f05f24c6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-20269",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-20269"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "medium",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--2c5b8b07-4646-5e41-9f89-c0909ff63cee",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-4863",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-4863"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c384a263-8514-5e4a-8e74-765c34f8b1d8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-35674",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-35674"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--df77e372-11ae-5aef-a2a9-725eda821e32",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-36802",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-36802"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--84a9c630-a9bf-5811-8c7c-28e7b4fb195b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-36761",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-36761"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6581f25e-c344-52a0-b53e-32c128fd828d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-41064",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-41064"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--24158fde-6781-5a26-8107-6140f973cf2f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-41061",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-41061"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ff197212-e015-552b-9073-fb428f7859b3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-33246",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-33246"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--bcd14ccc-d44d-50ef-ba29-9f9c27eb054a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-38831",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-38831"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5fab3d9d-3f29-5799-976a-58b50cd09c4e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-32315",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-32315"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--1af08b49-07de-5776-a82e-c5fa50ba23c7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-38035",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-38035"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--8e7ad694-f23e-5757-ab04-8cfdee6b1095",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-27532",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-27532"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--0af0160e-d098-52b1-b25a-31f9532e0a0e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-26359",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-26359"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--fa2c047c-3807-554e-b874-96441c8cbd6a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-24489",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-24489"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ae5767c2-b134-51f9-beeb-fd8983a350d9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-38180",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-38180"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--cccb4159-9bb4-5d64-99eb-5a9c6fed8d21",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-18368",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-18368"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--effd06a6-f483-561b-aac5-92c2542707ab",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-35081",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-35081"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c39115ac-5029-5585-9635-a0063b2744a4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-37580",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-37580"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c88dc89b-fd23-54e9-8eb7-cf6714d1c5c7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-38606",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-38606"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--29512c73-505e-55b8-98c5-44e29b9ef9a0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-35078",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-35078"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--53c9e00b-04cf-5f6a-9e61-d1656805a0ff",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-38205",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-38205"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6edf0525-d7f1-5850-8323-cee12f20fcf6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-29298",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-29298"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f8faa194-cc6a-5fb1-8a10-aa88adbba732",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-3519",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-3519"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d0e4a3bc-5a5c-5b34-bc87-0449ecd0e7cc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-36884",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-36884"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f6f434fb-a717-5d37-ad03-c1385c2f08f2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-37450",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-37450"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b78bf8d6-6fd0-59a4-b675-0d4cefb11103",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-29303",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-29303"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6a9c4a4c-1ca2-52f9-b0c1-e5201bef234d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-35311",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-35311"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--3eac9128-bcc8-5e6c-8dcd-0bfc9537ba1e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-36874",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-36874"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--2c489aca-af3d-5e8f-b1ef-316ac0114163",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-32049",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-32049"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--acaff3a4-1cd4-596f-9e8c-bd8db20c5652",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-32046",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-32046"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--7dad8156-abc2-53f3-bdf7-6df3a059f17e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-31199",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-31199"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f247679a-4743-56c6-a5d8-e22cafbec67a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-29256",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-29256"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e069d0ea-5eac-5977-8439-56325635f2d8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-25489",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-25489"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5cfa5883-0cd0-5bfb-a98e-7b81ce6ff20a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-25487",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-25487"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f47fe681-bcd5-518e-8040-d0fa9f771de0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-25395",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-25395"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--7ecdfdc9-3778-54b5-9f99-b6e01d9b9a32",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-25394",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-25394"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b2647de1-bc01-5e8f-a6f7-f9b5118a11c9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-25372",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-25372"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--9d5c0bcc-ed42-58b5-91f4-0b07d471f31e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-25371",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-25371"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d601a4ce-8151-5917-91cc-6f1015885299",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-20500",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-20500"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a7c4d32f-e75f-5638-8e2f-ec03918fc3b8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-17621",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-17621"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c1a964ec-5c51-532c-ab2f-d31e03cdce9f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-32439",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-32439"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--69f2778b-02dc-546d-8262-f0f7e228368c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-32435",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-32435"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--af9fe769-baba-5057-9c66-870ee0ec39f0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-32434",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-32434"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--8177cb9e-fd64-5559-ad5d-ddb8beab6443",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-27992",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-27992"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--279e1cfc-e7e7-5879-b3b6-22eb668c092d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-20867",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-20867"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--2cd04b7d-122b-5e05-9193-956bd78152d3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-20887",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-20887"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--fe0e755d-8b4f-5fec-81ff-af357e1d34c5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-44026",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-44026"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--21dd35e5-566b-514f-b3b5-a5ec741b8d56",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-35730",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-35730"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--27d63891-3aae-50c0-a0c5-45ce321c84bf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-12641",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-12641"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--81ce6cd1-e104-5482-8485-3bbed1a0a24f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-9079",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-9079"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--9b06b81d-93ef-5f3d-8eb1-e020bc103dd6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-0165",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-0165"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--593c4a44-86c9-5001-83a6-841218bb163d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-27997",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-27997"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f0011fe5-f56e-528c-981c-4e50bce42b8b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-3079",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-3079"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--be121638-bda3-5b87-a2f5-bd39a13843ac",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-33010",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-33010"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b2ae747d-694b-59d5-98fc-a64a23cb0410",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-33009",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-33009"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--43f62210-2939-5966-95d8-0433d5c93581",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-34362",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-34362"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6fea9012-d4f3-5af5-ac8d-976e985044f8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-28771",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-28771"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c8823f8a-01f1-5368-bd18-d2ddbfb05220",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-2868",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-2868"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--3552aeb2-972f-559c-8acd-c24c25993d27",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-32409",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-32409"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--0dc38ab0-437b-54c5-a350-27f62636b095",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-32373",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-32373"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--91f72c41-c84f-513e-a863-fc9bfed39f92",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-28204",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-28204"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5d16984b-c6f7-542a-b235-341f44e22304",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-21492",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-21492"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b98db685-8ddf-566b-a89e-e3c603723c1d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-6415",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-6415"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5770b420-a273-5fe3-ab61-751bd579a0c6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2004-1464",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2004-1464"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a464f1c6-6526-5d46-86c2-31aa3ee9ed80",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-8735",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-8735"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--089f8dc2-f771-5938-b00e-17d3247b4015",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-25717",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-25717"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5b52b279-7774-5533-bcbd-f9e0fb4154ae",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-3560",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-3560"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ea4a37df-5789-5f5b-a72d-aaa322b46217",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-3427",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-3427"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d3a6f30b-9a52-5ee7-b0d2-04bb61389e18",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2015-5317",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2015-5317"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--cc9e28ad-d277-5259-ac9f-ed46225ae5f8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2014-0196",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2014-0196"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e829924e-dac5-5447-abaf-836cf38d1aec",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2010-3904",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2010-3904"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d34844e4-1514-5f66-8286-f5c8ed89ddeb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-29336",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-29336"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--bf3fb289-192a-55a4-9e7a-d65c1e3d9f21",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-21839",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-21839"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--9bbc4c7a-0d09-58ac-b033-74f1b9d9473d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-1389",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-1389"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--90c8d74d-66f3-5ac3-a2d7-558c9a111f38",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-45046",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-45046"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--790598bb-eaa3-5bf4-b1b8-332215e066d1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-28432",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-28432"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--36f85c93-c754-5710-a303-c9e092e59523",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-27350",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-27350"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ecc315da-0cf5-5505-944c-829cdc2d8e42",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-2136",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-2136"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--fa803cec-4d57-5c14-a625-ab1f1ac79b3b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-6742",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-6742"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--76f63021-b604-5ed7-808a-023b425b2a35",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-2033",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-2033"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c6bbc04f-0ebc-5392-8fbf-2d308c8fe114",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-8526",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-8526"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--8d84cd16-4a8d-575d-86e4-7c394bf7f99a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-29492",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-29492"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ef6a2826-b14e-5745-b1e2-16cb1d43dc27",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-20963",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-20963"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--01a7b89a-1b86-5599-a473-63452e707cee",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-28252",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-28252"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--9661d658-a441-5fb5-8a0a-5bbe9d21ea02",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-28206",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-28206"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--47972db3-62d9-5065-84a9-f83fbd519bf9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-28205",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-28205"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f721f577-9ec4-5995-b83a-ae3323bb3305",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-26083",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-26083"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--412dadc8-9bdd-5048-b13b-fcc5f0d2cf7e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-27878",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-27878"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a46beb95-3286-51eb-bdaf-0c22db5e5fbf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-27877",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-27877"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--da0b64ac-fdae-5795-8bc5-93e85268de94",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-27876",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-27876"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f0853df7-23f9-5c98-b1b8-ccc12c99e868",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-1388",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-1388"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--93e5e291-2452-50d3-b8c9-0cb2ef0883ba",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-27926",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-27926"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--1d58432a-843d-55d5-8b60-b8251ee5e8bc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-0266",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-0266"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--2b2f2000-2c03-5306-bdc8-a06b021f14b6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-42948",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-42948"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--1b736b35-7800-5591-97b8-783145478534",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-39197",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-39197"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--71c04a07-2ce0-5d6b-86f3-e32eb44f906f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-38181",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-38181"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--3f1019b7-3ad2-564a-bcf9-730e5dc76621",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-3038",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-3038"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--fad015ae-531c-575d-aadb-0a220d18e975",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-22706",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-22706"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--4d3e6b6b-4e7a-5b45-bc43-cacba2f5b6bf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-30900",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-30900"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--4b324716-413b-5fe9-b611-662db2171712",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-7494",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-7494"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--13109f92-a964-50b9-ab7f-3d54d5fc601e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2013-3163",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2013-3163"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a32294d4-e21d-5110-8b03-5f7ab51a3ad6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-26360",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-26360"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--2c239043-3aaf-5bfb-b23a-147ffd3acf67",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-24880",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-24880"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f79cee94-0d98-5561-8548-e70970859969",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-23397",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-23397"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--149586f2-86e6-5d4d-a2b6-828d725d1790",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-41328",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-41328"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--231a35f8-5090-5d89-97cc-bda03260a712",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-39144",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-39144"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--606339f6-1b92-58eb-ac48-493cb191b2d2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-5741",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-5741"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--84080d5b-8d26-53c2-b279-224cbd524e40",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-35914",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-35914"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a00dce22-fe5b-5dc2-bb18-ab264774a388",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-33891",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-33891"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--4ba26c76-59e9-5a2c-ba31-f8ec38b24169",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-28810",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-28810"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5d2b9f68-5e10-5cdd-be7c-d2b89caa2660",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-36537",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-36537"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d2846469-6d1a-584c-80d0-7600155da62b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-47986",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-47986"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--bada42b0-049f-53e3-beb5-d07fa4d8767e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-41223",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-41223"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--503e670d-e038-5703-a475-0fc1df1b7d79",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-40765",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-40765"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--63fab416-b808-5c0a-a703-8c58444a04b3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-46169",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-46169"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--61f6be4b-6607-57a0-bfaa-028bc83e6697",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-23376",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-23376"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--358ef6f1-fc84-5f60-819a-d9abda8c7afd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-23529",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-23529"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--4d7a2483-c73e-5d2e-bc2f-7cbbec0e8b3e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-21823",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-21823"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--36533fdd-5142-533f-86ca-6c3c7260a9de",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-21715",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-21715"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--20ec6956-12f9-5119-895e-918b22f1e78d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-0669",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-0669"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--8e366972-d7ed-5484-8630-c0873f8f9a7c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2015-2291",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2015-2291"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--7036ce0e-66bd-5242-8eb8-be5b10794731",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-24990",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-24990"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--1395d10c-1435-5a13-aa34-beed6d6b7722",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-22952",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-22952"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d9b6af1b-a43d-594c-bcad-390a8b923803",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-21587",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-21587"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--943add48-1efe-525d-ba1e-ff58077fe5f3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-11357",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-11357"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--33bdb531-1614-59b9-aa38-15ace0c31b2b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-47966",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-47966"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--7ed3a0ae-9ee5-56ae-bed5-77c7806962f5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-44877",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-44877"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ff31d420-bd22-5169-b736-bebc7864626e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2023-21674",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2023-21674"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--9e8e629f-fd3a-5781-a0d8-d9d2d3b0cc6d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-41080",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-41080"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--2bfd1d99-cf92-5265-b740-9c065536a957",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-5430",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-5430"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a4c197ad-14cd-59ce-906e-5422ad89647f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-18809",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-18809"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--1eb2fe67-e8c7-5175-9c35-5a47b9830070",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-42856",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-42856"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--af7312d5-4f3d-50dc-9faa-8dd9e42feba1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-44698",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-44698"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--78eef66f-8139-5de8-b349-48c9bff2043f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-42475",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-42475"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--0e71b978-317a-5fcf-9378-b3165e313ce3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-27518",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-27518"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--cddcf9d9-f941-524d-9a9b-ce12a4b3515b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-26501",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-26501"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a7e9bf74-daa0-59f0-87ab-828a13f7c4d5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-26500",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-26500"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--1352cb6a-8975-5106-9879-d1f5a4acf708",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-4262",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-4262"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--62067f2b-387e-555a-98f5-0ef6e9626834",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-4135",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-4135"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--8256b829-fc73-5d31-8fe8-938a1fb6f6ec",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-35587",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-35587"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--48db77d3-0ec2-5670-ab36-0f94fe28e343",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-41049",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-41049"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--86e38492-7b1f-57d5-9807-474418004822",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-41128",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-41128"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f9b3fce3-d6ca-5b01-a24c-054f5984856c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-41125",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-41125"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--abd98216-6225-5b75-b6e4-b709b833dd90",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-41091",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-41091"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--fc381de6-46bc-5a6a-9a0e-9094b00f9a5f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-41073",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-41073"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--179c4ff3-e2b3-58fc-9a18-e580307b462e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-25370",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-25370"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e61da82e-7ee0-5a50-961d-d3e60bc82767",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-25369",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-25369"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--aa1b67c4-0ff2-593a-a98e-9365d3adfdc6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-25337",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-25337"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e1df4bca-8809-507d-aeea-cfa026aa4d3f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-3723",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-3723"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--000b2d32-d713-54f9-affc-d86ea0edd439",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-42827",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-42827"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--31cb892c-5ec0-56b9-b8b1-d88ce4932e9a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-3433",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-3433"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--0550765b-f317-5776-944d-a506e82d3ea1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-3153",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-3153"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "medium",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d934dfe5-3944-50b7-b969-d10f0232cf52",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-19322",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-19322"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5642d76d-bc81-567d-a4b7-db7eabf58e53",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-19321",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-19321"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6d070b0e-952e-5f7a-b99b-55e7eb447000",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-19320",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-19320"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--bd20174a-d5b5-59dd-878b-6dd6a6de7780",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-19323",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-19323"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a0cce153-018a-54a2-8c6c-5fd4f66b3f0b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-41352",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-41352"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--96fc8427-18ff-50ee-832d-47e08b8d80f1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-3493",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-3493"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--64162721-43aa-59d9-8953-98c99f207086",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-40684",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-40684"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--8e0f6157-6787-5127-9629-114a711713bf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-41033",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-41033"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--7cdb5a3d-2a2e-5c80-be89-019ff3d463e2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-41082",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-41082"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6b6d533b-cd15-55f6-a354-0e3c41a60330",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-41040",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-41040"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--2a04ac77-10c5-5488-9322-bcd8bc231b43",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-36804",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-36804"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5712aa7a-b8ea-59c0-ad53-afde37b20c18",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-3236",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-3236"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--fab101c3-fbd9-54c3-8eeb-2fb4c0edd410",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-35405",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-35405"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--8b1b3b9a-5904-5dec-9eaa-4f04ac1ee655",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-40139",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-40139"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--2a4ede36-bb58-5a0c-b6e3-3fccf2bc7995",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2013-6282",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2013-6282"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d45b8348-8bef-5010-8d97-042276364968",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2013-2597",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2013-2597"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a3a572ec-6fb8-5b99-b0dc-9fedb6023d1b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2013-2596",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2013-2596"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--aae89975-20a6-5721-9fcd-5d519d77ab5d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2013-2094",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2013-2094"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c726a7b0-133b-5fb2-8269-df049ca3847e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2010-2568",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2010-2568"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ecb2192d-69e7-587f-ab5b-4cf0058ad999",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-37969",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-37969"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a68c249d-b21f-53ce-bcaf-41f5e2986013",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-32917",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-32917"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--9220ab7b-4d23-52b5-a558-df1a96bda56a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-13374",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-13374"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "medium",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5333544c-4e5f-5eb6-b03b-35bec0e082dd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-3075",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-3075"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ed83757f-7325-54fe-ad5d-5f8ba372a529",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-27593",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-27593"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--53a6f718-b24b-5df3-b6d8-424d83604831",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-26258",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-26258"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--1b650d04-f622-569f-a04e-ba1e5e24417a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-9934",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-9934"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--7566ab0e-50f1-5785-ab14-e3097bb3f3ef",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-7445",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-7445"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--bd3ef6d8-28cc-5ae0-8cf7-caec1cba32a3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-6530",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-6530"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--1fa3bde6-3ce5-512f-84ad-320c0640b4a9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-2628",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-2628"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--675f9e17-3da6-5e72-ae7b-ed7ee0f996a3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-5521",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-5521"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--de684f4c-7aa6-5af6-91b1-c7e326853300",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2011-4723",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2011-4723"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--acc57a98-9195-5cfb-bcf4-73f40f90b063",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2011-1823",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2011-1823"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ccecdb67-21d8-5748-aa77-c86a16938b05",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-2294",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-2294"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--48a0325e-5204-5561-842c-3d00ba4307ec",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-26352",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-26352"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--50fd232f-a2d4-598f-bd4c-d43746c01d38",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-24706",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-24706"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--380056fe-cfc7-5a09-ab76-b84762e8ccff",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-24112",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-24112"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--3ae90396-b549-592f-9138-7a45c717d399",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-22963",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-22963"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c14a748c-493a-5caa-915c-b268a2ae6403",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-39226",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-39226"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6d9ae009-abd1-5dff-a5a0-ab51a42d3acd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-38406",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-38406"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--0c85fcb7-a3a0-58ca-a101-3cf4bc0f3039",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-31010",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-31010"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--52453ee7-959d-5b18-ad71-45476dacd778",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-36193",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-36193"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--9d60b99e-0e0a-5d81-b51a-d5c605c412cb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-28949",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-28949"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--672cc3d1-65f1-5733-8f81-d54bd10d9133",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-0028",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-0028"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--cbcc68dd-11f3-5fd7-9d2b-10f924c13a86",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-32894",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-32894"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d0a77f7a-6ba7-5703-9490-cc41c56b3f4c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-32893",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-32893"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--836e1a57-81a6-5307-b090-917a43f73f86",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-2856",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-2856"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--1fa8919c-1f7a-5003-a20d-822e19c15f4b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-26923",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-26923"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--0d4e7b85-e48f-5940-b25e-4a219a3f3dca",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-22536",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-22536"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6e6dd8fd-d224-5847-8e64-e215007d26c9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-21971",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-21971"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--2aa92cc6-2712-5dfe-9908-0a072c0e3b53",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-15944",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-15944"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f9fb9b9d-cac3-5133-bc8b-60b78b6b78a9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-37042",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-37042"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d3888d20-00b5-502a-b54a-f38184c1810a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-27925",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-27925"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--259b582e-ad28-50f4-bab9-323e15bb1f62",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-30333",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-30333"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--66e1ae41-5077-5c93-8f12-bb9ad544fee7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-34713",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-34713"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f8507b76-3587-59b9-823e-c969d757592a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-27924",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-27924"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--98e22150-5d52-56af-9bc8-482baf920c63",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-26138",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-26138"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--05fa88a2-746e-5abe-8b83-c9db71844b63",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-22047",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-22047"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ae7943a2-b879-5d31-acba-0585ebbd7469",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-26925",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-26925"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e751c267-9981-5073-b202-b7854a366157",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-29499",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-29499"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--205def3f-9555-592e-9aab-ae1851f877df",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-4034",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-4034"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d74ed0a8-91e7-58be-b2d7-57ae772b15ca",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-30983",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-30983"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--699e71a4-4645-5e1b-baa8-9c4beb35fd6d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-30533",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-30533"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c37a616d-b412-50ce-9662-d67ea32746db",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-9907",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-9907"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--60140d8f-c4e8-5986-a05c-bae81b59b2c5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-3837",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-3837"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ce43cfbd-ca1f-53dd-b8d3-62424b74bda7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-8605",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-8605"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--457dc96f-489d-57f3-ad92-f6d83f046942",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-4344",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-4344"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--8f8c6a38-ea28-568d-b83e-9cc8735cfa9d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-30190",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-30190"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d6ec04cb-74f9-5403-97e0-f7d7f4feba49",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-38163",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-38163"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--85770eac-73ab-5513-a8c7-4c926763560a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-2388",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-2388"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a7dccef1-f4e9-5ea6-9389-0ca8c5b1f887",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-2386",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-2386"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--2746003a-385f-51f1-8d73-737d77272e59",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-7195",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-7195"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--4778f51d-b2b1-5ce0-8590-95054aaac078",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-7194",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-7194"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--bc7a8880-5e3d-5585-a939-52e8224f465d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-7193",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-7193"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e37999ce-5bca-5ead-adee-4f6a4e998d28",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-7192",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-7192"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f204bf6a-45b4-5384-a222-e876dca40c3b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-5825",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-5825"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--8bc3fa41-0721-5996-b6ed-0b9c9952655b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-15271",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-15271"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--93396b03-ca9f-5a34-a070-3cfe4587ca47",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-6065",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-6065"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--2c678789-ce8f-539b-97a6-08e82855f2cb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-4990",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-4990"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f9686ee3-e255-5ee3-9d38-b236cce97343",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-17480",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-17480"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--cb9900a8-cac5-519c-ab2c-60fa5f1cfb14",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-17463",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-17463"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6fb807fa-da5d-510b-9e50-072fe89d15f0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-6862",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-6862"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--2a4f9746-8fc9-51b5-8c98-29fe8c9ca8f1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-5070",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-5070"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--23720331-96e4-58fa-b80b-e5d326135132",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-5030",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-5030"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d40b49d6-9ba6-55e8-8f3d-b7a609e43b80",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-5198",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-5198"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a4318934-318f-5fad-a9ff-62ceae51447c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-1646",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-1646"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b09c9cc2-0f7a-5125-91dd-5ce66f82e2ba",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2013-1331",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2013-1331"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--7117caed-528e-5d8c-ba98-9ce22f7fa963",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2012-5054",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2012-5054"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b2524efc-8dee-5e05-87bd-352d4468086b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2012-4969",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2012-4969"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d99622fb-6963-575c-a9ba-6f1695692ab9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2012-1889",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2012-1889"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e671a762-2831-501c-ade8-bd45f9a6be47",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2012-0767",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2012-0767"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ff39121c-16e2-5c3a-96f9-71199665c063",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2012-0754",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2012-0754"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--9aca8f6a-b216-510f-9eb7-81e0d4bf1a3a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2012-0151",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2012-0151"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c0d99de0-bf8d-5450-852f-7db5d2523462",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2011-2462",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2011-2462"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--350e40cf-ab6d-527c-8add-81803c716ea7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2011-0609",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2011-0609"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5cffc2a4-2ce3-5260-b28a-528223343099",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2010-2883",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2010-2883"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--77d39e78-464d-574f-9215-6d00ce299e4d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2010-2572",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2010-2572"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c0012140-ba26-56fa-910b-26f078cf0054",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2010-1297",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2010-1297"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c5888d33-852e-584e-b213-e74aa71ec54e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2009-4324",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2009-4324"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--0800c70c-9e5d-5324-9228-9ace32af9ddc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2009-3953",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2009-3953"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--7f1008fc-bf73-56fa-91bc-f1e1f12da0f0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2009-1862",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2009-1862"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--2eaace45-87e1-5a01-8d06-3a8809a861b8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2009-0563",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2009-0563"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d4e2758c-27f3-5c15-be9f-02f26a63fde5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2009-0557",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2009-0557"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ce53f0c7-4a3a-5a04-83d1-e54efc60d073",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2008-0655",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2008-0655"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--019533d0-b893-5076-84a1-e0a502426f81",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2007-5659",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2007-5659"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ec0f96ba-0a6a-58b7-8416-bf0357a0cef3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2006-2492",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2006-2492"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--309fabcd-3235-5d88-867b-a4bb3f73086d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-26134",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-26134"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--8ae91234-4e80-588e-b708-753feef7c7df",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-0034",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-0034"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--7a05eca6-4fec-56af-9ec1-d2e04518aed1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2013-0074",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2013-0074"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a2f36d60-8596-5c08-818c-e0f88071e802",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2013-0431",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2013-0431"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "low",
        "medium",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6f4dc06d-efe6-5073-ace4-d8f5630a5269",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2012-1710",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2012-1710"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--8c9dbe46-1759-5bbf-b1e4-6b79594e01a4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2010-1428",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2010-1428"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--2f759ff2-14ff-5f2c-af90-b76abe2582a0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2010-0738",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2010-0738"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "medium",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--1d343cae-081e-5e87-ad6c-d66b45d36b63",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-3010",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-3010"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--3383d420-ce01-5bf1-a035-4f3a98070f06",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-7256",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-7256"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--2e3cc692-3d18-5543-a74b-5103e3297a60",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-3393",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-3393"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--8a3393fa-9852-555b-85d4-26a6837e07e6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-1010",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-1010"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--20ce074a-1e26-55b9-89fb-16fe69db1ec0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-0984",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-0984"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--73423105-3e39-5982-b04c-936668581fa5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2015-8651",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2015-8651"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--4f9255af-117c-5fc9-bc9b-35983a8117b6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2015-6175",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2015-6175"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--58393384-355e-5941-a233-69186d523666",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2015-4495",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2015-4495"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--8fd22d1c-95fc-5fbd-9ad2-7f7febf7616c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2015-2425",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2015-2425"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f6a00ea6-3df5-598d-80bf-23ecf1be657e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2015-2360",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2015-2360"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--0a2ea015-e711-5dca-b81c-88ba7e7470dc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2015-1769",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2015-1769"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--54fbd384-d173-5a19-ade8-5d8778afa5a0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2015-1671",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2015-1671"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f8fc5119-6e28-58f2-a13f-ef62137ca0cf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2015-0310",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2015-0310"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--44b7f571-56cc-519c-9510-a8a33a722362",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2015-0071",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2015-0071"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f4862151-ae34-5876-9ea6-c69e93d89edb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2015-0016",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2015-0016"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6763efc4-9a69-570d-8ed3-f5b1d6632b05",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2014-8439",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2014-8439"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--79763c67-b4ed-5b35-bf3b-7815780b3ffe",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2014-4148",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2014-4148"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e6382594-c646-536e-9e4c-b7d0c3854c69",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2014-4123",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2014-4123"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--942754fb-7cf9-5ad1-aa08-fff82c9a0ba8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2014-4077",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2014-4077"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--7cc239f2-c869-5a32-9da8-22a216695e80",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2014-3153",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2014-3153"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--bccea915-74f6-5a9d-88c0-61a18256a4e4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2014-2817",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2014-2817"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--2a51a6c7-658c-51e2-a8d0-f4772b72df86",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2014-0546",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2014-0546"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--da81d950-3da2-53c0-8da7-a35b1f756a31",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2013-7331",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2013-7331"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d3979ac3-0788-567b-b343-18946de30c1c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2013-3993",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2013-3993"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--9aed5069-9968-5ab8-97f6-9ad7b9726137",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2013-3896",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2013-3896"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5448bfc1-4413-5804-b49b-5bc94032cba1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2013-2423",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2013-2423"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--0e3270e5-1e02-55c6-8c93-63efc38f17a9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2013-0422",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2013-0422"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--045ae96e-5ea4-5c5b-8dfd-a1ede57ce826",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2010-0840",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2010-0840"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--de9f9f07-c03d-505f-960c-277936118af9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-19943",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-19943"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c59ef05d-0273-5282-9f1b-f4fe9f8d537b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-18362",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-18362"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e040ab70-bfa9-5771-ac9c-795c0b6b8b16",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-3351",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-3351"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "medium",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--2c3a608b-17ad-5354-8a91-91498fa402af",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-19953",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-19953"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "medium",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--560f3e24-82c8-5f39-9c19-25f087739776",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-19949",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-19949"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--3579720e-2e94-5569-af45-635581424807",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-8611",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-8611"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e7a7b51a-75f8-56cc-a74d-41f68b4862d3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-8543",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-8543"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a87e38f5-0008-5c25-b5aa-009876b4e921",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-8291",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-8291"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f5cd7c8e-8670-5aec-8b6b-4eb71c6fe70c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-0210",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-0210"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--17b31d2a-646c-54f8-b8b3-ed08a57034d6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-0149",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-0149"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--eb45d2eb-e110-5fa1-bc85-091335b350fb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-0147",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-0147"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--1c23c8b6-8243-522d-9f98-e183ea3e6822",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-0022",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-0022"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--9e6edea7-0231-5426-9d88-1094932b4b7e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-0005",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-0005"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--1b108b4f-9982-5010-8a1d-1fa7f7adb354",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-6367",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-6367"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c918200b-c338-50ca-9009-e31f1c84f271",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-6366",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-6366"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--57edf544-2ba7-5eb9-9232-c765b2f525a9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-4657",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-4657"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--0059d11e-eb3f-5a84-b7de-e9b1553e592d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-4656",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-4656"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5f80dc24-5870-5ff3-acc6-fc9fc282ba0f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-4655",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-4655"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f1ed3f93-8c0b-5dfe-b2db-df7bac082422",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-3298",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-3298"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f6b0c291-cc7c-581b-9614-43c1a04b6ad1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-0162",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-0162"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--53ae6636-cfcf-5fb0-aa06-f2148dcdd646",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-0638",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-0638"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--78b63060-d0e8-5db6-bb8b-e7e82f40ea0f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-8720",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-8720"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ba7ef1b0-29ce-5fc2-a962-52acb9ab338e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-1385",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-1385"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5f820099-e257-5c78-8f90-583d789cf9d0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-1130",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-1130"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--fa4b0f62-a0b7-5755-bf6b-f3f7d6adc27a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-20821",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-20821"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--584ebcd6-ba29-5b7d-8823-429eed6d7f7a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-30883",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-30883"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d7bd005c-dbdc-54a2-be4c-b9472e34abce",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-1048",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-1048"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d796ca39-25c2-5e59-abb2-ede9314d4b39",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-0920",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-0920"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6afef46e-8248-5212-a8f6-d257efe4d449",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-1027",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-1027"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ce8a76be-e074-59b0-bb79-2f16519cd06b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-7287",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-7287"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d79ab31f-d24c-524d-9450-2f53c60be7ce",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-7286",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-7286"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--1a5695e6-ec5e-5253-86ba-02a44db81635",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-5786",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-5786"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ef0c6aed-8001-5ef7-966d-899985c90057",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-18426",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-18426"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a98aca28-4a33-579a-9e7f-5f9c90fe785c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-13720",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-13720"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--9b8df240-53b6-5b93-9863-a7ffaab49589",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-11708",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-11708"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c9c89efd-79aa-5d00-8be5-d101b9ef25ed",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-11707",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-11707"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f9d93e04-23d3-58dd-a12d-33fdb14faf0e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-0880",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-0880"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--db35125e-2aa7-5bfa-832a-9aa1d7ab940c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-0703",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-0703"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6c9db8f7-c17c-5e10-8ebc-4998e2638b35",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-0676",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-0676"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--64b08d5f-8799-594b-b9c9-4f193b8bda50",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-8589",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-8589"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--eb603535-5743-53a0-b099-9be82917c891",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-5002",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-5002"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--2cf8e343-3651-5e7e-957d-0065647d2f5c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-30525",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-30525"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c60dea94-0c9d-5f7e-bb0e-a84941600a5a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-22947",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-22947"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--90eabb6a-dd13-57a4-95cf-de28af6d058e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-1388",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-1388"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--33a54a5a-ac9c-5f3f-8ae2-5e66acbc952f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-1789",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-1789"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--0f4a1f3e-1df5-583f-b191-0f32a63be31a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-8506",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-8506"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--368536fc-ca7e-5cd2-8fdf-677f3034f8e9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2014-4113",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2014-4113"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--73f7f6b5-367a-5c98-9837-c9f14980cafe",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2014-0322",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2014-0322"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--792a8d32-0049-5d2b-b5fe-98d3dd5fb97f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2014-0160",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2014-0160"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--7ae639fa-2f86-5b20-a9d8-246750cd49c3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-29464",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-29464"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b4b95aef-7b74-5c38-b5d0-121ccbb417a3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-26904",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-26904"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--9fa26b63-ee43-50f5-a340-313d299b906a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-21919",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-21919"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--15e7c25e-fb79-5a83-b780-a6ab3f8b2282",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-0847",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-0847"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--cd0d4bcd-565a-5452-8ba8-cfaab1231b45",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-41357",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-41357"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d3e2660a-e588-5a59-9c32-acba69bb6925",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-40450",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-40450"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--dba0280f-0a67-52fd-999e-59e95d959194",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-1003029",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-1003029"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--44cfbae3-6c7b-57dc-b76e-fc0f037483a5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-6882",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-6882"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "medium",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--1084d761-605b-54cc-acbf-e0aa5722f091",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-22718",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-22718"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--967af9bf-ff33-508f-bb73-d61cf1ff87f7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-3568",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-3568"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--99d0bcbc-df5c-5efd-b862-ab6d72b07368",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-22960",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-22960"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--297e71eb-f096-5374-a040-baa6e6529f5d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-1364",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-1364"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5efe6f2e-7665-5eb0-8834-8cd1a17579e4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-3929",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-3929"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--1f133224-d9d4-5d6f-beb8-2ac374c70fb3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-16057",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-16057"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--634ecd6a-45df-5d77-9247-74606d1454e4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-7841",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-7841"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e2460628-1f3d-5bed-a1cf-6fc7700d99c7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-4523",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-4523"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a4df6e6f-abe9-51ae-8942-23236812f55e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2014-0780",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2014-0780"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--0190a247-c4c2-5911-a1db-5ab7c5ca7375",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2010-5330",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2010-5330"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f154d5ba-3dd6-5183-afed-1d4d2338c66e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2007-3010",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2007-3010"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6431b05f-828d-5da0-bf0c-17e3344a663e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-22954",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-22954"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--318d5a92-9f8c-51c2-a7d5-b15b05caeb08",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-20753",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-20753"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f47b86ef-c409-57e4-ae22-f9096bcbdff4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-7602",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-7602"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--81ffb1ae-44e7-5da7-bce1-62ce13424d1e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-24521",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-24521"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--262114a3-1cd4-59f9-af44-a98bd87efdf5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2015-5123",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2015-5123"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--3b781697-6646-5545-a7b2-ddbcae3d13d7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2015-5122",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2015-5122"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--90878b4e-f8c6-5f73-9273-f461a68247d4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2015-3113",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2015-3113"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d05616e1-3732-5543-91e9-0922abf48ace",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2015-2502",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2015-2502"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--831174b9-972a-5f83-af12-497b36e66c2f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2015-0313",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2015-0313"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e3822ce7-3381-5d57-8c20-a039bac72221",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2015-0311",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2015-0311"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--973be8be-7f04-5885-aae7-c9cb74f61d4d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2014-9163",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2014-9163"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--fefcd151-3932-5265-b730-cf47b2dfe526",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-42287",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-42287"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--fa68844a-c736-5d66-bd95-86787dd84742",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-42278",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-42278"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--972bc153-7a17-5cef-b5ce-269418b7d79e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-23176",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-23176"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b7e03666-fecb-54cc-9003-e564d513329c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-39793",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-39793"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--fc7ed671-4dc0-5e56-8958-923c9b2fbdc3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-27852",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-27852"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--3bb906d5-879b-565e-bf2b-0f108cb32047",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-22600",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-22600"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--39d84cba-6c0c-5705-ab60-0b0fabb85cd3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-2509",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-2509"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--4c3793ed-2694-50c0-934c-3dd570e2e1dd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-11317",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-11317"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--1b530918-33dc-5926-b033-7f64d71bc7eb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-3156",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-3156"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--bfd9bc31-21e9-5754-91b8-7a774f592a17",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-31166",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-31166"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a881288e-7c8a-583e-8d2d-a8c12d7ebe8d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-0148",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-0148"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--4fb88cb1-27e0-5a88-9107-174867ac1f15",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-22965",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-22965"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a926c591-6dc6-5909-918e-14126bf2a7c6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-22675",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-22675"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--3ebf7a22-b7f5-5803-a545-d1aba7196e74",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-22674",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-22674"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b7de5c77-8e15-58f2-9abf-3e75d3816d7d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-45382",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-45382"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--938c1049-4ff6-56d5-9a67-3425475fa490",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-34484",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-34484"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--0aa30159-f398-57a0-90e7-f357fae4353f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-26871",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-26871"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--3ad6afe7-dc66-5874-9ba3-7ab2958b5a7f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-1040",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-1040"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5884803a-e85f-5dae-9976-bfa949cb43e5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-28799",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-28799"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f11cebe3-6c2d-51be-8828-4b84b538eca1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-21551",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-21551"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--4d237290-01e2-5e79-ab90-731fb0d4a873",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-10562",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-10562"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c0374abb-8208-5d5d-90b6-9200947d7eca",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-10561",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-10561"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--048bebea-dbc2-5836-8ff2-369f135d46da",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-38646",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-38646"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6b698152-1f3d-5b65-9c09-9fe5bfa1d6ee",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-34486",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-34486"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--99dfd903-2741-5033-9e37-89f1e4ed53b4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-1096",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-1096"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b183e54c-2e87-546a-bbca-ccd182faeb88",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-0543",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-0543"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--69f81616-784a-542e-b990-e81c12ddfc28",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-26085",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-26085"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ac091617-2674-54a7-b44c-758bd903293d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-20028",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-20028"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--3fb4d46d-c2ae-56c7-8877-9e03c23a56f4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-7483",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-7483"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d9f61345-ce86-5254-8094-2bcd9ca18f55",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-8440",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-8440"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c1fb3d67-1f43-5501-80ff-f07f5de32aca",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-8406",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-8406"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c8e8e228-21e0-5f98-b6be-bb7c558fed28",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-8405",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-8405"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a05726cd-5c09-5cf1-8df2-fafa11fe5c28",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-0213",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-0213"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--1618be4c-1983-55ef-8b25-e35e8c0a62f2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-0059",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-0059"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--cdc3f348-33c7-585f-8854-0f85eb6b3cb1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-0037",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-0037"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6d123350-0e93-51a9-af66-6a1b2631fdcf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-7201",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-7201"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b9a57942-af0d-5c7d-9533-07745b0e5b40",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-7200",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-7200"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--477fef23-7912-5902-ba56-8e474f14f118",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-0189",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-0189"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--55662e46-27aa-58b7-95df-db4196bb81b5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-0151",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-0151"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--17aaee36-072b-57a6-97ee-b7ecbc969479",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-0040",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-0040"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ad39bdcc-c42a-5e7c-88e6-5550c4ee3097",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2015-2426",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2015-2426"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--946d9180-f597-579b-a9e4-eb8023526eb3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2015-2419",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2015-2419"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e854f395-6b18-5e4f-9df0-e5218b063ce9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2015-1770",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2015-1770"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b38a9827-e767-53e4-9cf3-a84c307b43df",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2013-3660",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2013-3660"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--8716d7b1-087f-5c0c-b112-c4d8e3322de3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2013-2729",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2013-2729"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--39d5c0be-2efb-5b7e-a873-ebf9b6ed3f09",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2013-2551",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2013-2551"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e5333844-390f-5017-9c6a-926463050ecd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2013-2465",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2013-2465"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a89b9427-bea3-514e-b6b5-866ca06e386a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2013-1690",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2013-1690"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e4e930ed-f728-5dc9-b4ff-0e87a8337d04",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2012-5076",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2012-5076"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d5aeb060-86b0-5980-9513-c8ba48fe31dc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2012-2539",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2012-2539"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--0a79c8ba-bbd7-56cf-a93f-7585ca2636a3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2012-2034",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2012-2034"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--cda6790c-05ed-50d7-9862-4c7187d4c67b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2012-0518",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2012-0518"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--3674a40f-4d17-552d-b803-e9fd4b2cfba5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2011-2005",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2011-2005"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ba46703f-36d4-59ad-887a-ddf13a5d8c27",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2010-4398",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2010-4398"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b39c1852-4fb4-524a-8321-fb9b7731e6ab",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-15107",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-15107"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--027f2c9c-968c-599a-af02-24e6f76ce11a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-1273",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-1273"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--26da9525-63bc-591c-8d9b-18e0676e0e52",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-11138",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-11138"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--12e3f2f3-e015-5298-a599-c5501be87fb0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-12617",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-12617"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--48d1bf86-738b-5898-a60b-23f62fb2f851",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-12615",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-12615"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f5a86245-3cdf-56ec-9d22-5d65ced2e811",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-9054",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-9054"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--294a83bd-a4dd-529e-be23-7a2486cd9cfb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2010-2861",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2010-2861"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--af76d820-2137-5995-8968-8ac9ad38a72e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-26318",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-26318"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c79b6d86-6742-5826-88b0-1b674a1edf1f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-26143",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-26143"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d6ba2a62-1c65-5466-95ff-ca7489ac3652",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-21999",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-21999"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--0d52d79c-0498-5dd2-98b4-709ef6c02682",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-42237",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-42237"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--73d77cce-158b-5d5b-bf43-98ce69677342",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-22941",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-22941"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b1187cbc-a2e7-5869-a73c-9a92cdc0b427",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-9377",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-9377"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--17deafce-77fc-5a84-9a21-85ba9d2d950d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-7247",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-7247"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e8072184-40e6-5552-b35d-4b6bbb589724",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-5410",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-5410"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b0d91c29-40dc-5060-8367-f12535cbc5bf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-25223",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-25223"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--8fe436aa-759b-5de0-ae00-c7e9eb62a083",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-2506",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-2506"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ba3f8f09-6465-5600-99ee-7492c570c9df",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-2021",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-2021"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--39308fdb-cd86-56b7-a41d-8566157685e8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-1956",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-1956"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--8187b4da-2e04-588e-881f-39241f960a8c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-1631",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-1631"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--571ba911-b7b5-5fa5-8a90-e45a75350662",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-6340",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-6340"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--2cfaa3da-664c-55f8-9e95-4579bab5c2c8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-2616",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-2616"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--eadf0729-be85-584b-8e61-c82e8abebefd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-16920",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-16920"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--1b3dd3c7-da44-5c69-b47a-57c3bb6894a8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-12991",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-12991"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--8a4d0fb8-c678-5c35-aff9-e9d718ec892d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-12989",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-12989"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--7a8cef0a-6ea2-5fb5-964d-8a9a0eab8376",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-11043",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-11043"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d361212a-f2c7-5478-ade8-ec79bdb28575",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-10068",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-10068"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--41c707ad-94b2-590b-ba18-d549edc5214c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-1003030",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-1003030"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--511b3cf9-74e2-57b0-884d-070251baea9a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-0903",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-0903"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6803860d-f5b5-546b-a874-ad0ac1c5f483",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-8414",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-8414"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--15099d6c-bc1e-54c2-9a13-9a86ead99a72",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-8373",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-8373"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--2151c294-a5a7-5c05-8d57-987f55bda6b3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-6961",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-6961"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--47692411-d941-5c26-953f-ff5794b7d7e0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-14839",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-14839"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e99df4f9-e9c7-53f1-b1b7-8e4527b67a3a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-0147",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-0147"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--063d476e-2a11-53c5-8388-20294060d72a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-0125",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-0125"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5b39a3e8-cb37-57bf-b72a-3f52c357340a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-6334",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-6334"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--1cdf6788-68e4-5ee6-819c-d184b0f664a1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-6316",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-6316"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--8740d2a0-7089-51e6-9aa5-de2571944a13",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-3881",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-3881"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--3e388264-1344-57b7-a9be-b989e18db72f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-0146",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-0146"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ee22d9b6-3917-54c2-b47c-209abc4007f2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-7892",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-7892"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--02baf4ab-0498-5799-89b7-7199cdf51341",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-4171",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-4171"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--49b5f62f-8953-53ca-9640-8a6ebb30d835",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-1555",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-1555"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6fdb6a54-f707-5dd8-8de6-f540abd23cff",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-11021",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-11021"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--1d2d4524-f02d-5f57-b2a3-6f24f5635cb7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-10174",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-10174"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ec7c47f1-1b46-51f3-b395-b91ae1087388",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-0752",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-0752"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--098fd022-676f-531e-9652-1bef10a0da17",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2015-4068",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2015-4068"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--54a78b4f-06d9-5281-85af-bfd96e18b0ee",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2015-3035",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2015-3035"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--654a41ba-5f8e-509e-902e-4b19e90fc123",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2015-1427",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2015-1427"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--4d632d45-aff5-5ea1-a0df-a75112245cb2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2015-1187",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2015-1187"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--70e1525c-eb51-5dcf-9300-f2e2e9b3eb74",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2015-0666",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2015-0666"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b609b7d2-b248-5458-9415-305b18218033",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2014-6332",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2014-6332"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e4f13a81-e32f-5680-9286-84ef4e85e0cf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2014-6324",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2014-6324"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f13d075d-c738-5e24-972d-0ae4bfaf013c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2014-6287",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2014-6287"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--df9953f6-7bc8-500b-99ec-35e2569a1934",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2014-3120",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2014-3120"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5ac732f5-9b92-52b9-a990-3ec16b566698",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2014-0130",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2014-0130"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ac116579-dc62-5e24-8375-941437253483",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2013-5223",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2013-5223"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6db89836-f475-5b60-bebf-7c11f93a6f3c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2013-4810",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2013-4810"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d9c37c1f-b972-5d89-a0f0-0b11f302a0b7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2013-2251",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2013-2251"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--00f5d4d3-0104-5426-bcc5-42bb315dd105",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2012-1823",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2012-1823"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--9e341e77-72ed-5b60-aa32-ee7d0db53e35",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2010-4345",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2010-4345"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a30119b6-13ec-5242-96f3-daedbc1876ba",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2010-4344",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2010-4344"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6fa2ae36-fdcc-5f7e-9bc5-7ec9d5c58b40",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2010-3035",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2010-3035"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--edfd5d0c-defd-5e87-a161-173ed3e2b580",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2009-2055",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2009-2055"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--9c549201-aefa-504d-8996-07f35af1c53e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2009-1151",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2009-1151"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--bc7bac1b-7822-5eb4-8b67-89f6ddf6d8a0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2009-0927",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2009-0927"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--beb1723f-56c2-5bfc-97ec-73d673acdbeb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2005-2773",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2005-2773"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--57582f2a-a8e4-5889-a883-f83e21c54e32",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-1405",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-1405"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--1f430a88-e50c-5e2e-97a6-d353543dc1ac",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-1069",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-1069"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ba444a88-c7d1-5d77-ae2a-e7f9bb6d302a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-8120",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-8120"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--245c5b3e-4f4a-59e3-a91f-d697d088e393",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2015-2546",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2015-2546"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--11733c06-0442-5b2f-9dde-52f44fb0bbf6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-5135",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-5135"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d384d69c-0bdf-594b-9e87-8423214b7025",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-1322",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-1322"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6be74b33-8b4e-5852-878c-fa7af927e8c0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-1315",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-1315"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a2769cf3-43af-570c-9409-d24573d36cca",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-1253",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-1253"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--37473584-7981-522d-8673-9b4433e77859",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-1132",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-1132"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d88eae0b-e8d9-571f-a0e2-284d791d4edc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-1129",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-1129"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a64efc28-a5d0-57b7-8184-a01148f9d30f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-1064",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-1064"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--24ad504f-ebf5-5f9e-8456-e61c39dd050f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-0841",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-0841"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--27970419-3097-5952-adbc-37d7a4e4267f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-0543",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-0543"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--12150af9-b467-554f-b011-64b5942c3742",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-0101",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-0101"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--4dbf740e-26cd-5977-b459-ba7f48149092",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-3309",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-3309"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--9a6c82c8-ffc2-506d-8b28-5b2d0d6a34d7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-26486",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-26486"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--02921368-1eaa-50bb-b7aa-f1b1e5e7c4ac",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-26485",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-26485"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5205387b-2ef5-5653-9cd7-7cde8bb566d7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2009-3960",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2009-3960"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "medium",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--20579d4b-4aab-5aca-a2a4-7391f040031e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-21973",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-21973"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b1b29e08-b7b1-5738-8912-0fe59bb0b477",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-8218",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-8218"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--1c6b606f-00e5-5aa8-a2ab-3721d3762df8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-11581",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-11581"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--bc2183c7-8403-5c34-918b-c5fad228207d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-6077",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-6077"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6ed9f03d-df54-584a-b2df-e9175bcf9718",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-6277",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-6277"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--03e8eff3-1d10-54f2-9841-a5a1ecdcb70b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2013-0631",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2013-0631"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6393a0c2-35b0-5df1-8718-f1d109fcb7cb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2013-0629",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2013-0629"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--8637c188-83e7-57f1-9ca4-6a754eda53b8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2013-0625",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2013-0625"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5aece42e-6f26-5608-9720-78fd29230f30",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-1938",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-1938"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--97490fa6-ca89-581a-854d-b7ab3f383274",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2015-1701",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2015-1701"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--964b0677-2fdf-5389-8e6c-3243922ad876",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2012-4681",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2012-4681"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c6c402fb-57ab-53c3-a340-2789e77fc8b1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2012-1723",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2012-1723"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--fbf41093-7c38-5f14-9f2b-44e09c7ae766",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2012-0507",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2012-0507"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--57ddbed7-bec4-5668-adea-a7d7ad1a90bc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2010-0188",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2010-0188"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--af43f65e-c203-566d-a9df-40395c534d13",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-4117",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-4117"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6e0a2be1-83fe-5cf2-88ce-5f23fe61e0d6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-1019",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-1019"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--516add15-5196-59b8-bbf3-0492a53dd009",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-20708",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-20708"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a4adf0ee-2e1b-54ce-80fc-f23af07c9fa6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-20703",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-20703"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--0e82aca8-4ae6-5af0-9fd8-9bd1a290ebd6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-20701",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-20701"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c1511909-e571-55e7-b740-b90105b73611",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-20700",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-20700"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--08f524ae-7720-50be-9d42-faad767a3ee8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-20699",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-20699"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--7f0558f6-b812-583a-8ffe-8380829f210d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-41379",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-41379"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--946c944b-e6a8-5294-88fb-0d7f0c712476",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-11899",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-11899"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--29e8b667-87eb-5217-98d4-2d20dd84b350",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-16928",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-16928"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e889f8ad-b82a-50c5-9702-80ef4ae5961c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-1652",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-1652"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--596747d9-8070-5929-bd33-f1187c643fa0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-1297",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-1297"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--05cd8e75-7483-5884-8928-5d961728c0f1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-8581",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-8581"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--7fa500cd-1463-5d28-aa69-b495bf73454e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-8298",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-8298"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--06d737dd-57ea-5a10-92ae-853b1d2c536f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-0180",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-0180"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--12c4db21-1f62-576c-9150-fc94e7bdeb89",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-0179",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-0179"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d4e0aecb-a767-52f5-aaf3-068b8aa56913",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-0175",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-0175"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--cf651277-8656-5493-9363-0fdef42e2f21",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-0174",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-0174"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--08b0de4a-97aa-556c-85d7-896118af2b59",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-0173",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-0173"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--821446f4-5055-5f80-abeb-c4922f728148",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-0172",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-0172"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--86b7bc36-e13c-5b52-856d-ac6c993bd053",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-0167",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-0167"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--9130d5a1-b661-5579-88a6-97b72118d004",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-0161",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-0161"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--170638c4-9088-5c78-b15f-f9dc9ea28fa6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-0159",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-0159"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--1ef6c733-e5d1-5502-9365-0bd7415ff5ec",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-0158",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-0158"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--90864357-e1c6-5614-a3b2-e84cc5812fa1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-0156",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-0156"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--3a7cebd1-9b62-5963-ab77-0f102690dd4a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-0155",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-0155"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f03ebb51-0bf5-55a6-a01b-1472c621457c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-0154",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-0154"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--0b5ac60e-0fcd-5b03-96e0-186a111fa70f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-0151",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-0151"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--618f0dd8-848c-53de-8e2f-d64048aa75d9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-8540",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-8540"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--441cd0f8-59df-58cb-a0e8-9ad9c0028299",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-6744",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-6744"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ad294953-42d1-5be1-9c69-77de66b4da48",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-6743",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-6743"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--654e216a-95ab-546d-8a07-f30da2ce30da",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-6740",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-6740"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c851afa0-674e-5cc4-ac28-c1099568243c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-6739",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-6739"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--04d681ab-33a1-5751-a416-f4216f8e403e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-6738",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-6738"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ee4dc737-4eb9-5c87-8b44-f3f3d1764a78",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-6737",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-6737"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--7af49138-e3ad-5848-be2a-208495299542",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-6736",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-6736"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--416a2206-f1a4-5691-8b58-19c0c461e538",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-6663",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-6663"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--9d9150e5-c33a-5b0f-ae90-988a429daec5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-6627",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-6627"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--7277fb33-686e-5f66-b730-d5d87c4307dd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-12319",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-12319"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--aebf2aa4-f2d2-509a-b54b-7f743e7deb07",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-12240",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-12240"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--42dfd8e2-b705-5d48-9a70-7099ea1c2933",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-12238",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-12238"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6d01df1b-9d62-542c-9fa1-0b3b8aeb64fc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-12237",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-12237"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--7114d505-ee62-52d9-acdf-9ee5f53ee3bb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-12235",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-12235"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--1d807552-11d7-561c-9723-83a42d3785a0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-12234",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-12234"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e51ff803-bdd8-5c1b-b7ac-e170ad910f68",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-12233",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-12233"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--72ecd6a3-1501-5ffd-9425-f508adb678c2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-12232",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-12232"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ef9213ec-9d1e-5011-a91e-6cc06e9c59b5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-12231",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-12231"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a6253775-6c9b-562a-b97e-4ddf1cf54757",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-11826",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-11826"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--be9814c7-f0ab-5c70-b82e-52aaa8a6452f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-11292",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-11292"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--0a5fb5d8-9db9-51f2-a932-6e05ed05b541",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-0261",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-0261"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--7d3da33f-9fc1-57a2-8402-a05d9679f2cd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-0001",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-0001"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b2de7ea1-e3d2-526b-ac37-efb176864d0c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-8562",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-8562"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--027e0816-3cea-5c41-a37d-e66bd5075f90",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-7855",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-7855"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--705a8d3d-d564-5383-a2ed-93aa117a4a1d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-7262",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-7262"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--fd8c4a95-db18-58e3-9feb-7bb0632d1404",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-7193",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-7193"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b1c15bab-c36e-5f40-b66c-9b1ae6fbd7f8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-5195",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-5195"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--24d7812c-a5c1-5c26-9892-032207753a37",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-0099",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-0099"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--40b80c2b-9bf9-589b-9f1a-69202d9374d8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2015-7645",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2015-7645"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--26f92b46-8bdc-5ab1-b897-ccc05f9a8529",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2015-5119",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2015-5119"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--87d5c25a-d0a2-5bef-85ba-cb6e42c91487",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2015-4902",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2015-4902"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--bebbd055-a670-5559-a770-8c6f07b5540a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2015-3043",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2015-3043"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--8a852bcb-0730-5916-85e1-ee9d49ee3c27",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2015-2590",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2015-2590"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--02416b9e-6d0c-54e1-a5a1-6e7f51fc1d30",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2015-2545",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2015-2545"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--32fc2743-1e9b-5648-aa41-df45b518fcff",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2015-2424",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2015-2424"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6929f65f-b3ea-5419-a00f-2640a8f2af1e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2015-2387",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2015-2387"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ddd71822-bc10-5c13-990c-d1214bcc873b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2015-1642",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2015-1642"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--97a16674-6d5a-5772-b967-7798adce46ff",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2014-4114",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2014-4114"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e544f1c0-5b2a-5166-9d73-e867cde38827",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2014-0496",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2014-0496"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--afae9526-367a-5d8c-90a5-adb8ebf853bf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2013-5065",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2013-5065"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e126af62-847a-53c0-8f27-74e876e71cb6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2013-3897",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2013-3897"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--018de088-ec61-5704-a777-82af9f6afc72",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2013-3346",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2013-3346"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6da9311e-f581-589c-9541-edbd46976497",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2013-1675",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2013-1675"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--da93d0c3-99d1-589e-b4a9-ac15390b4402",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2013-1347",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2013-1347"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5b12b60c-873d-53d2-8a29-facc52b90053",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2013-0641",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2013-0641"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--39fd821e-f20d-5462-bdcb-d2507e25441e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2013-0640",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2013-0640"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--fa57d397-1421-572c-842e-b3d13d528c39",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2013-0632",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2013-0632"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--04e72e46-b697-50be-aa4c-2b713bf04a00",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2012-1856",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2012-1856"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e27e008f-f88e-573f-b6f6-3f9b171780ab",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2012-1535",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2012-1535"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--06f9b271-277c-561c-ab82-1a9a8158e7b7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2011-3544",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2011-3544"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--7e3012ee-0ee6-5aaf-8966-e1e571a347bc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2011-1889",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2011-1889"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--4c05a7b0-5892-5028-9c6f-5378dfbd2be9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2011-0611",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2011-0611"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--1934bbfa-941a-5e76-afdc-b5c492096900",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2010-3333",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2010-3333"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--2527a06d-562b-587e-b0ca-3b048c023575",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2010-0232",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2010-0232"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c4752568-f50c-50ca-82a9-2a8e68b6ef2c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2009-3129",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2009-3129"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--cf383648-2d10-5d4d-96db-9cfdbf74fb9d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2009-1123",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2009-1123"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--735524e9-c562-55d1-8fce-b8d888334832",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2008-3431",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2008-3431"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--32bdd53b-7ade-5883-a5c4-82a8e0cffa32",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2008-2992",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2008-2992"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--3e212f98-1dbc-5e7e-8f43-ecebcb384ce2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2004-0210",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2004-0210"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--33e0ec46-a9a9-51af-90d8-ef944eabd6d0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2002-0367",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2002-0367"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c0975705-fefd-5116-9bd3-c9d55f01d75c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-24682",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-24682"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "medium",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--cda72ea4-6318-5160-b1bb-0a1091e8b99f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-8570",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-8570"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--7a20f5fc-5e11-501d-aa75-475d11573d1b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-0222",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-0222"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f76af22a-5f90-5d9f-b1f3-ce2ea08acff8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2014-6352",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2014-6352"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ee7bdb64-50b5-53a3-a841-63a154da18f4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-23134",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-23134"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--2287bff6-e7e9-56b0-aff9-acfc76d8e9b2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-23131",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-23131"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--02069fbc-316b-5647-8b6a-eb23aad2e36e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-0752",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-0752"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--84d08633-ae74-5657-8487-5b870af849a5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-8174",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-8174"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--3d3a4867-9699-5503-8b94-ed747dc5d6a4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-20250",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-20250"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--80f44c0d-b8e5-5f9d-870e-19635b6dc18a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-15982",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-15982"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--7c7a7ded-9a1e-5703-a6f0-305cb3a91245",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-24086",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-24086"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--02f9c6eb-eb68-5ad0-84d1-d6b6bb06782e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-0609",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-0609"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6961cdc7-9b73-592f-92d9-72e1608f07d3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-9841",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-9841"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6741757b-927e-530c-b1e8-8d4b395ef3c4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2014-1761",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2014-1761"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--cb5148ab-1a58-51e2-9abe-d1e36cd6df74",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2013-3906",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2013-3906"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--09c6f97a-38b6-583c-bab3-7c95b54ed1a9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-22620",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-22620"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f527d99f-316f-5293-9e86-c686c5d67018",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-36934",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-36934"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b09c6d9b-8b22-51d2-956e-b47414cc2da0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-10271",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-10271"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--176cbb02-7456-5432-8abf-aff613355560",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-0145",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-0145"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--00b272c1-460b-5be5-87fb-518fb47d6248",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-0144",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-0144"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--51657418-a90c-5e44-82dd-12ea2e275965",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-0796",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-0796"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--00240359-0ed6-5b2d-88b4-70b095c06c29",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-1000861",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-1000861"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--bd034315-f7af-54e4-b38b-106956708511",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-9791",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-9791"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--719552ac-53ec-52cf-8509-e4143df4c836",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-8464",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-8464"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ece3c816-3467-5a62-b329-3f8451b4ba2b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-0263",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-0263"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--60c4e930-4c9c-52f8-8d65-f6774786d3f4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-0262",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-0262"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ee5b24fb-0d50-57e3-98aa-e69869ebcae2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-3088",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-3088"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--308d65b9-0f48-57c2-8bae-063ba1eace5b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2015-2051",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2015-2051"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b92fdd13-0cce-5dc5-998f-cde451782a09",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2015-1635",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2015-1635"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--690dcb7d-1259-5f5a-878e-4d890796882e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2015-1130",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2015-1130"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--69d32d5f-117b-5cad-8367-24de7038c57d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2014-4404",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2014-4404"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--97856a51-1e7c-50fe-88a1-4a11dba82ac2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-21882",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-21882"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--40b7a437-47d1-5931-8831-8017b2e5c12d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-0787",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-0787"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--4fb4bc56-5303-5db7-870f-420bc2aa55e9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2022-22587",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2022-22587"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--3bfc822f-eb79-500b-a76e-463d322746fe",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-20038",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-20038"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--9a0801c3-8b2b-5664-80b2-e0065538a3ca",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-5722",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-5722"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f899f8d3-2bbc-54c1-82f0-eb257d195773",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-5689",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-5689"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--70fc50b1-30f1-5e94-a236-5fb3fa7b9886",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2014-7169",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2014-7169"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--67a54ec2-6a87-5b0e-9cc8-d6740065dcbe",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2014-6271",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2014-6271"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--65d1352b-7b09-5d37-9f7d-1f45f15de28b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2014-1776",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2014-1776"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--47713f5d-7f00-58c3-ac33-d65a2844e4da",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-8453",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-8453"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--0e683133-908c-5e03-b979-f69d8e438576",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-35247",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-35247"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--7b4871ec-dc35-57b5-8c4e-b0a052ec9c6b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2012-0391",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2012-0391"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6f72fe24-b24d-5127-abc4-b81ea77091b1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2006-1547",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2006-1547"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c3229dc8-103e-5ec8-bc95-9971ad470511",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-33766",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-33766"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--153adeee-e96d-52f2-a054-d7fab1a86a9b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-21975",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-21975"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6e5b29b9-8d79-5818-96fe-ae99cbf16f4f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-40870",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-40870"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--abc25c47-2820-59ec-9769-f18bfe479b49",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-32648",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-32648"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--4284fc26-5838-59b1-b549-64443fb96e12",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-25298",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-25298"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b05c8002-215c-58e0-9964-1e04b58036d8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-25297",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-25297"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5bc5c8db-dae2-57e2-a048-f7b65f74f3ed",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-25296",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-25296"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b6f61aef-854f-55f9-a678-6ee58e579ea7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-22991",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-22991"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--2ef91ca3-5369-5ffe-a4e8-09e4244edb88",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-21315",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-21315"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--df8a736f-3a05-5226-b4a7-95dd3820b399",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-14864",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-14864"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--bab79770-fad7-5236-b7d5-1ec388226119",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-13927",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-13927"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--0b2e1c16-2295-54c8-a6fe-f71b6b5f7cbd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-13671",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-13671"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--767d8350-3755-589c-a3ed-851b018b5a87",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-11978",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-11978"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--454752c1-740b-5203-a63e-942af195b0ad",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-1458",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-1458"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f49db1d7-cd4c-5b24-b704-57a0d45832e7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-1579",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-1579"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--0f22575c-ddc8-5626-8962-854fa5da6a9a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-2725",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-2725"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--0e9727a7-c5a7-5554-86d2-6c214d2c72b0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2013-3900",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2013-3900"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "medium",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--8bae31aa-b84b-577a-8302-3171bafe0f1b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-36260",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-36260"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--319b4b76-5f47-5564-bd5e-81d7f7d776c2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-27860",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-27860"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--8df583f0-2e85-5378-ade1-706cb906701a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-22017",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-22017"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--8fe83857-83d0-5150-bd5b-775d5f2ebb1c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-6572",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-6572"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--246f0edc-fefd-5005-ad86-28166ec816af",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-9670",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-9670"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c31b94df-961b-5f29-b69c-05d7bacdea85",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-7609",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-7609"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--83882256-ba2e-5f1c-bb90-8a499047196d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-10149",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-10149"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a5a71f10-74fe-5f6e-9f4e-cb0ea88a59e2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-13383",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-13383"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--1ad61207-a5c4-5aab-acd6-abd01ad76464",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-13382",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-13382"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--24fcf993-84fb-5557-ac81-46d78f5e1e71",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-1000486",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-1000486"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--bb75b14e-0f5a-5140-917c-aca58a02762e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2015-7450",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2015-7450"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--fda3315e-e99f-5842-ba09-f4ad216e6e32",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-43890",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-43890"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--83d36b7a-a092-5883-b102-e8c66709ef59",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-4102",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-4102"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e57852b5-ef68-56f2-9411-709e6950213c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-44228",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-44228"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--fc9943d6-0f3b-56d7-bc5c-83dc27684736",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-12149",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-12149"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a9ce8edf-b723-554c-bd17-ce5a9d41c51e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-44515",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-44515"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e97dc41a-aac4-568b-b88a-4cea2ad74f0f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-44168",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-44168"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--00a8881e-e973-5b47-b588-8c5bdefbd54c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-35394",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-35394"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f0451000-617f-5511-bd8a-29f1b8fa8a83",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-8816",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-8816"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--8581b8e6-7e0c-5ef7-a1cd-2706f411533c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-17463",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-17463"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d06e2d3b-b29c-51c7-b8f0-535ecad30a50",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-7238",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-7238"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--50ea7597-27bd-5abe-8416-311c72d1c724",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-13272",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-13272"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--0f8449a1-fefe-5c52-9eb3-5fbeba687877",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-10758",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-10758"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6243831d-00f2-5496-a464-980b2749b219",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-0193",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-0193"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--14778dd5-cbd1-51df-b871-5efb3abae5a2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-17562",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-17562"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6ba462cd-b72f-505e-9c3a-6f053826a5cb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2010-1871",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2010-1871"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--55f34a5c-c4e2-5b7e-a612-8ec1be71cd9a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-40438",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-40438"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ba52c48c-7738-5507-b059-674d142b7d15",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-44077",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-44077"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ab2a1af6-210f-5a3d-8a73-d3008e69a1d1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-37415",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-37415"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b1680164-51d6-575f-9537-0d3e3fd94d57",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-11261",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-11261"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--4798cd82-b9f3-522b-91e1-0030e8dbec60",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-14847",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-14847"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ec81bf4c-c597-59f2-a9d2-2cbd88661a38",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-42321",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-42321"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--4c359d37-23ea-5008-a2ed-da9811bc9d65",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-42292",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-42292"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b66ce3b5-5df2-5270-9c43-aecc379b584f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-40449",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-40449"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--777c5d0d-f957-5eb6-b110-e266e4b632b6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-22204",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-22204"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ed9409b1-4673-518c-96c7-73437a6bac9e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-40444",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-40444"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--60a96e23-a20b-56ae-9940-7e5babb2ed7f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-38649",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-38649"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--8866c8bb-240d-5e6d-a115-d4ba52af45ae",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-38648",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-38648"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b43efe85-c24a-58be-8848-e9d4bf2a1511",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-38647",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-38647"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--54ff12e9-8b82-5566-b87b-1190e3dcc635",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-38645",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-38645"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--8805c6c5-422e-5df5-8a59-0b98d2f6f236",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-36955",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-36955"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--4500f573-5124-50cf-897e-9d25232261d1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-36948",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-36948"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c9fa9a9b-f3ef-57a1-9102-d99e092a9e86",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-36942",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-36942"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--278a83a4-b72f-5898-8b12-552b1868f27a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-34527",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-34527"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--dcb246b2-571b-5957-80dc-2d42a40039a8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-34523",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-34523"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ada148c8-a544-5b57-8f23-4067065c03e8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-34473",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-34473"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b121abf3-2fc3-50db-8c31-b0b0fff70484",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-34448",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-34448"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "medium",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e5455982-58f2-5972-854d-27416636ce5c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-33771",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-33771"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--07e8173f-e4ae-58ab-8a7e-5c6332bf8d04",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-31979",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-31979"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--1da87310-1c51-53a2-824c-2ddf12c6613f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-30116",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-30116"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e29bc057-77ed-54f2-9ce6-e8d6eb86ba1e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-27059",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-27059"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b863a7fe-53bd-5554-ae4b-7443ec275529",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-26857",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-26857"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--22ac9619-a5b7-5fe8-aabb-34fe730faee3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-26855",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-26855"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ea63cb96-e2ac-5a7d-b89f-1029e961526a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-22893",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-22893"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a214c51c-a844-5a70-a45c-f71b52df894c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-22205",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-22205"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--9e1b4f25-f554-595f-b1b3-3704d6e4209d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-21985",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-21985"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--bad9df78-19a1-590f-8abf-593184bc54f1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-21972",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-21972"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--33cccfef-0494-53f4-8f7f-d09410bf7136",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-20021",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-20021"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--17588257-66b9-54c9-a3ae-c0a5fe2997b4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-20016",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-20016"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--710256b0-92cf-5053-9867-7af048021171",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-1732",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-1732"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--009785f5-0d0c-5680-8145-760f0f29f0f8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-1675",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-1675"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--fbb43c03-32c0-558c-b4c0-ea3cef99bf0d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-3992",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-3992"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6643862f-4e0b-5c78-94dc-c066c1256148",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-3580",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-3580"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "medium",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5bfd511c-fe7b-561b-bc03-9ced301cf985",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-3452",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-3452"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c889e57f-8cfd-5470-850f-48bd26d4fb69",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-7481",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-7481"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b2a6317e-29a3-5c55-91aa-e09e8f8267c3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-5591",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-5591"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "medium",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--be83f84d-912b-58a1-8bec-fe08b6f1a2a8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-19781",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-19781"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c569e935-11bf-5310-91ab-bd25d486be7c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-11634",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-11634"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--05f6d999-a5f6-56ec-a5dd-28b7d285e2d3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-0296",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-0296"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--495a08de-e202-52ab-a783-7ef012a9c0fe",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-20023",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-20023"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "medium",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5a1075f2-7035-549f-9785-e26f081ee487",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-20022",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-20022"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--db2781d0-27f6-520f-9cff-36062d9b5c0b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-26411",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-26411"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e41c05ba-15d4-58d1-9ed4-da35207626f9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-27065",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-27065"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5866cb04-2cb1-587e-a57b-d15d3129d452",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-26858",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-26858"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--3945f8f7-9e9f-5c23-88e2-79e3aef6419f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-12812",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-12812"
        }
      ],
      "labels": [
        "critical",
        "cve",
        "exploited-in-the-wild",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--648b6d48-10e8-59a8-8460-0d5695f0ce82",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-1054",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-1054"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e4f35d8b-5591-5e44-87d7-5c0117b9ba9e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-7255",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-7255"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild",
        "high",
        "nvd"
      ],
      "x_swiftioc_source": "cisa_kev,nist_nvd_recent",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d81c6dc8-b9c5-5572-a42c-700402126995",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-42258",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-42258"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--4ea48f31-f5aa-5828-83b8-06075789d442",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-42013",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-42013"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c289d471-56b9-5f4c-b01a-29dfa7257811",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-41773",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-41773"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--12774ebd-cb98-5333-90c4-00a4714e3ccb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-40539",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-40539"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--af00a54e-8e72-545e-a164-d367bd9be7e5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-38003",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-38003"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5fd75362-7eb0-5447-b950-d06627054022",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-38000",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-38000"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--3104170b-d3e4-5227-b5ef-fe2edb90d867",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-37976",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-37976"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c6886ccf-7db2-5c5e-99ec-f55285586bd1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-37975",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-37975"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f08134c7-98b4-5a1f-accc-4a6e19c07d45",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-37973",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-37973"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d7018058-88f7-5981-9353-f3390d676017",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-36742",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-36742"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f69fb41a-0caf-58f0-9f56-44db7dd3dcf3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-36741",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-36741"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--97b72eb4-ee71-562e-8b92-2943cf8c70de",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-35464",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-35464"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--118e0aa7-c794-572d-ae0c-169dd1c1c44e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-35395",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-35395"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--fce0efae-7435-52a3-960e-d95e5401c337",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-35211",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-35211"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--70305a3d-d7e8-509f-aeb7-f54b80c37a22",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-33742",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-33742"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--9046c9c7-8a09-522d-9f1a-76f9224ac9d0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-33739",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-33739"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6c06d18b-b61f-54cf-b690-57b8e0e7ef7a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-31956",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-31956"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--7560960e-66ae-5701-9a92-cd8049b13190",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-31955",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-31955"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--adc660f2-dd85-5e0b-89dc-6feadbaac81f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-31755",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-31755"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--70f5be44-338e-5702-a17c-c4c9a2eade6b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-31207",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-31207"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6eabc8a5-2095-5932-8757-b4628e401f44",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-31201",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-31201"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b52307de-9d2a-501c-855e-ccc4205b601c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-31199",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-31199"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d633eae2-323c-51cc-8e2f-7f626e937ada",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-30869",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-30869"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--56b48c04-cfbb-5b1e-932f-365175289223",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-30860",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-30860"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--78d78a6c-7129-5532-9618-0adf20e9e765",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-30858",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-30858"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d6a03f9e-79ea-585d-8010-e8c2028a156a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-30807",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-30807"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--872f424f-deb0-5eb5-81d5-603fa71b6e7f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-30762",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-30762"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--3c82a608-372e-5f32-9d1c-110172c38cfd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-30761",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-30761"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--892bb033-ee97-5b4a-9614-30d01ca8531a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-30713",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-30713"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--204f7de4-950d-5b3a-948f-717b528bf888",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-30666",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-30666"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b37c5055-50a7-57a1-bfce-b11438cfbc80",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-30665",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-30665"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f8c9e233-9644-5dcc-9275-53e00f78dd84",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-30663",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-30663"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5192c52c-d25a-5e9e-98d9-84b67badd340",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-30661",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-30661"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--0d14383b-d84c-5ae1-b276-cb4c5a58f4f6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-30657",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-30657"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5da7bc9e-004c-585a-8e06-dfaa4128637a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-30633",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-30633"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--fd57d466-6874-52a2-96ed-3f3dacb86a84",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-30632",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-30632"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--7bb6d845-85b4-5ca0-adc9-38d6055b5e3a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-30563",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-30563"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--31e1ec37-9c11-5fc9-ac07-b47292235d02",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-30554",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-30554"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--34631344-b075-5d65-a198-fc96c9f2e03a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-30551",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-30551"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--eba888bc-902c-5329-a77f-3d0267fa1a9f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-28664",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-28664"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--7f1e077d-5e72-5949-a04c-c9c64704bacd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-28663",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-28663"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a9cf884b-6ac1-5a3b-8f29-ce76a41aacd1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-28550",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-28550"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--019b6cab-128c-5166-a5cd-d98acc588418",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-28310",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-28310"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--bceb1357-a759-5b0a-b2df-20ac4dc67cbd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-27562",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-27562"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6c875f3b-095e-5939-97bf-2154bf769a42",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-27561",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-27561"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--df37b180-13ee-567a-b64f-929de59976e9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-27104",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-27104"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--3f068548-4929-5859-a012-53e13b724bf3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-27103",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-27103"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c47e9fac-644d-5f59-96b5-494d76f06b75",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-27102",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-27102"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--0ff83973-7887-5050-8ae3-9b93f0c7e7d2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-27101",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-27101"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f4bde713-d587-5739-a506-360a85c04145",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-27085",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-27085"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ff599b8a-0de6-5c66-a857-fcbae5a117bd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-26084",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-26084"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--66733f91-25b1-577c-93f5-e481f97f17c1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-23874",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-23874"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6016b7c4-890c-55da-9f57-0d3b12480c25",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-22986",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-22986"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--3554c4fc-11fb-596c-9a0f-c17ff7e0123c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-22900",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-22900"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--22a08704-dc98-5f15-8e8b-e0d29358e2c5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-22899",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-22899"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5d103ee3-14fa-555e-b929-336e4e5be151",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-22894",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-22894"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c6609a54-8d73-5079-b8ff-09c06fdc8286",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-22506",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-22506"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b2d061ce-146c-518e-b2e3-63fc1cbebafa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-22502",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-22502"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--737475b5-c628-5418-a127-c7dc2070d775",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-22005",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-22005"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--3baae9c0-6690-5a3b-8bbb-2817788ec805",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-21224",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-21224"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e98c4624-dee7-5722-88fb-104e186d3b8f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-21220",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-21220"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ee6f82fe-19c8-59ae-bbb8-825d20739a86",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-21206",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-21206"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--42fbb182-6b30-560d-a0f8-56fc33b4ba71",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-21193",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-21193"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--edfadf99-85ec-5173-8eeb-1e1410d661cb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-21166",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-21166"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f5269734-ba5d-5080-9ce5-62bdb902943c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-21148",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-21148"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--740425a7-9084-599c-b8e5-18ddd7bbe924",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-21017",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-21017"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e7b2595d-8717-5efa-b262-afe701dc4ffd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-20090",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-20090"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--20f377ba-7578-507b-b46f-59a1bb775add",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-1906",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-1906"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c6ed5651-bc41-5426-9950-fc560f95fe0f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-1905",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-1905"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5bc51ca1-e4e4-5ca6-bf2a-1319561c36a6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-1879",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-1879"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ab6e1e3b-0a9f-5dea-930c-c4b7319f9a51",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-1871",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-1871"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a13716c5-cf31-5464-bdb0-45f2b7f8c050",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-1870",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-1870"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--9a8bb626-33d6-5d0f-b15c-9e5c2d4a5b12",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-1782",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-1782"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--05420c62-70ce-58e5-931d-0723fbe5b9b8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-1647",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-1647"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c6cfb51e-2b0e-5322-82f6-964e1cad748b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-1498",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-1498"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--640f75b1-159c-5a12-82fd-ae3dbffde275",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2021-1497",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2021-1497"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--2387c832-d53b-58c9-addb-1e0ff7b9fcc9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-9859",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-9859"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5331bb6c-e855-5bff-93ee-7c781b7698ad",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-9819",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-9819"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c0e0b046-87bf-5859-81ef-dc254d454610",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-9818",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-9818"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e11a2626-5515-5c1d-9770-e05f9c236f90",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-8657",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-8657"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--9f4a5682-db9a-5f30-8b63-faf6497e5c50",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-8655",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-8655"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--4409bcc3-367d-5a35-8cd9-74304d7b301c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-8644",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-8644"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--91ee7a47-c60d-5f8b-83a8-575102225eec",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-8599",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-8599"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--34e110c3-eaa3-55c4-9057-08141b55740c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-8515",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-8515"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e4795929-bc23-5183-bec8-315885baf981",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-8468",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-8468"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--2df2f2ba-c989-50bf-a654-28662c278d77",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-8467",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-8467"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--558c204c-9c39-5b0b-b1f2-08f63c99a5d8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-8260",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-8260"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--fe212ef2-da38-57e1-a22a-170188e1d4f5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-8243",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-8243"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--1a4cd486-90b1-5e23-9951-5d67f6560072",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-8196",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-8196"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--8469fd11-e0af-5d6b-bbc3-254a762bca02",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-8195",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-8195"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--fa3fbe36-1b3e-56c1-bc8f-513e22e3f706",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-8193",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-8193"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e4b634a8-ba11-5cae-b77d-e927708ea1f8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-7961",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-7961"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--4025641e-a4e0-50bb-b3df-2056ab766294",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-6820",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-6820"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--fd70b3c8-11ae-58db-ba43-a363dbf99657",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-6819",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-6819"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--409287b9-4613-5fa9-af5b-94acffaad91f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-6418",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-6418"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--2cd8d2a2-f13a-5aaa-be71-f30741d6c21e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-6287",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-6287"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--2ccd505a-c326-577d-bce5-691e96ef62dd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-6207",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-6207"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--3c880009-7560-566c-b955-ef0b73e8ecae",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-5902",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-5902"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--827592d9-0f77-556b-8b7e-0b7093ac3283",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-5849",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-5849"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ee1a8dd2-428a-5d41-a8bd-1d87875c22b2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-5847",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-5847"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b5eb4381-577f-55c7-99a4-ce60adf10e21",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-5735",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-5735"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--83f0d46e-a1fa-5781-8884-c3cee6ca10f9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-4430",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-4430"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a118ca20-9aa7-55f0-96b6-2ccd469a15d8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-4428",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-4428"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6e763d1b-7add-562b-a6cb-ad2cdf104876",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-4427",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-4427"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e2a49f96-c68b-5f22-b74a-87b7a10b4b6a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-4006",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-4006"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b8223d31-e80a-5104-86be-c01b8f0b547e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-3952",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-3952"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--4408802a-4340-5368-bc6a-35426e1e026b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-3950",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-3950"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--298ef5b0-3026-50bc-8e7b-2c48ce726686",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-3569",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-3569"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--37970ada-805f-5c5b-afb9-499e56e96fb3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-3566",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-3566"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--4a51cc48-8ce5-5a9b-a8a1-47c3434cab80",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-3161",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-3161"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ee8f42b4-7ae0-5a35-9d1d-1e2973191838",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-3118",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-3118"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--7ce1097f-ecb5-54de-8a3d-b73ee90016ac",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-29583",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-29583"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--40507ca7-88c7-54cf-89e9-f5dc975afc7a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-29557",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-29557"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b72bed46-82ba-5664-b421-fc58f9e91ce0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-27950",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-27950"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--dd471ecc-f1bc-5be6-a09a-22eef69c8cd8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-27932",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-27932"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ed01a06c-ab60-5d55-b55a-f0cb8de469d3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-27930",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-27930"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--57e6db28-4967-50d3-b596-faef44c1e73f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-26919",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-26919"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--52d33093-ce65-569c-bc88-638e7d200d3e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-2555",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-2555"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f61ed5ec-cfc1-55f1-97b8-0b63beb73e42",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-25506",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-25506"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--0a049cc4-197c-55eb-bd8f-9e7150344e87",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-25213",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-25213"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f6aac87b-0ae9-5a12-bd67-96b1b13390c9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-24557",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-24557"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--801ee3f7-8130-5ed3-bd97-21617c114072",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-17530",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-17530"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--fe27d0ee-2892-5699-8401-d8703c52e210",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-17496",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-17496"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--56da397b-e4c1-572f-b42b-847bee91a515",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-17144",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-17144"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--07a8ca91-1da9-597c-8f3d-85d7bd31e0b3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-17087",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-17087"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--97391687-faaa-5646-a5e2-b1270264aba1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-16846",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-16846"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--0721dce7-c855-5ab7-8a12-6bc5bf9b4a68",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-16017",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-16017"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--0fb5b2c1-c6e3-5eaf-a69d-c63698d3ff8c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-16013",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-16013"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--2d6abf43-a83e-5b7a-96d3-465dc44db9e1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-16010",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-16010"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--239f8db9-3686-5110-b82c-3f6d154c5bc4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-16009",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-16009"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--bf794a60-9a49-59b2-bb3d-2f1bcc174fa1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-15999",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-15999"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--7ba8dbc3-0292-53fb-9771-8c051fdc1211",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-15505",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-15505"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--3a17a17e-6d25-5798-87b6-6d4b6caa052a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-14883",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-14883"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--2da5419c-48c0-5cf2-a901-fc94a8d8a502",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-14882",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-14882"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f398336e-6ed2-5508-8003-712186ef8586",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-14871",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-14871"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5ff5614a-1255-5ed5-9904-10046abe9885",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-14750",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-14750"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--3e4f7a9e-e76d-543e-814a-f808171d4604",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-1472",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-1472"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--68bcb28c-caa8-5137-b9d6-5a1ef2c37f8a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-1464",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-1464"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--df025439-a126-5866-8902-e6649e913a9e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-1380",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-1380"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--49782430-b930-5cf4-a626-f396a7ba8479",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-1350",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-1350"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--546b7d40-4ced-591b-b5e6-6135174199f4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-12271",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-12271"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5cf4735d-bf09-55c5-b9d7-169fa2976fbd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-11738",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-11738"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--11e87635-0eef-51e9-b50c-1d79f306db95",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-11652",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-11652"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--1d3389f2-82a3-562d-9b14-05fd61ebb6da",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-11651",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-11651"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--37fbc06f-b748-5249-9493-f582044eb8d5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-1147",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-1147"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--7b4336ba-d652-53a6-9e1f-22fda9c11a85",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-10987",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-10987"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--9f6ba961-bec1-5aca-864b-d8ac4a45e056",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-1040",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-1040"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c7bb583b-0621-53b8-8f2b-cf37c17cb40d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-10221",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-10221"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6155c84e-450d-5a94-9f09-718093d57334",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-1020",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-1020"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--04a29f89-f041-5338-a5dc-7a059f0699c0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-10199",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-10199"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--281222e0-01fd-5ba4-8d0b-8284a5b81f37",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-10189",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-10189"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--948c9e53-86cb-5440-8d8b-1a92628f30ea",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-10181",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-10181"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--4ee7146e-54d0-5c4d-be27-f8e0025191f9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-10148",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-10148"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--13d17c09-0956-5305-8efd-b13a49ae117b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-0986",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-0986"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b89d623c-acd0-5d01-8a47-03d1e44bb145",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-0968",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-0968"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--7b4a9b4c-4446-5648-9bfa-d9651fd5c815",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-0938",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-0938"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--7640e99c-b8a5-5276-9fcd-529850bc8c62",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-0878",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-0878"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--113bc6eb-8fc5-59f5-a30b-4c9fe34f36d0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-0688",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-0688"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c806f639-ecc2-54e5-a6a9-c1766dd57e4a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-0683",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-0683"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--7c3cc6fa-fa17-5416-b192-b6534739e9a2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-0674",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-0674"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e26b8005-1d49-5f67-b5c1-380bcd35e7c3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-0646",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-0646"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--850df137-a6a6-5c1b-9867-dbe0e7c103bc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-0601",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-0601"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--9c26a158-8301-5a97-97b0-3cf4a6e580b9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-0069",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-0069"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e4bbb421-536f-52d1-bef1-d993d76f92ab",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2020-0041",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2020-0041"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--fbcb9d9d-b59a-5b43-b307-5a0c300bcac0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-9978",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-9978"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b1c59627-7837-57f3-8414-ceed24d53235",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-9082",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-9082"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f102b59d-8cbc-596b-9ac2-1fd24fd890f3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-8394",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-8394"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e89f2151-9bd1-547b-960e-47ec8f6ee2f9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-6223",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-6223"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--2537b129-7601-584e-96da-925ee6bae253",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-5544",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-5544"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--0f64d119-c760-50ad-9c36-5aad42cdd7f7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-4716",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-4716"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b8304bb1-4b21-58f1-bf99-353176147dbf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-3398",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-3398"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--2b83a39a-33e3-5eb9-be12-30576720f86e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-3396",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-3396"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b04848af-50ed-5e4e-9bb4-08952892042f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-2215",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-2215"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--1efd0781-9d75-5654-8550-ca8807bf3106",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-20085",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-20085"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c3c9fb05-12c5-5502-bb42-416e57d544b5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-19356",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-19356"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d811c00b-2488-504c-bd69-f8067173b34f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-18988",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-18988"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--bbb75704-5277-5d20-8c0b-b6042fafe2c8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-18935",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-18935"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--dfb34512-1908-5e2a-a0c7-954e3bff312d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-18187",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-18187"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--1b4a646b-0bc3-56b8-9816-317e69c6b99d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-17558",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-17558"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--9bc3a468-3139-563b-a605-7a5170abb38d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-17026",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-17026"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--983b0ee1-3149-5450-9149-8e2ff1e683c2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-16759",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-16759"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--45dcf4aa-98f7-5cfe-8114-9ce23520f032",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-1653",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-1653"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--eb5a5c58-c3b6-5a0f-9ace-ecad7778acf7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-16256",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-16256"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ebd8c6c4-b495-549c-b6f6-d53d7e8ba61c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-15949",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-15949"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a292d38e-1d79-5624-b7cb-3f5c0bfd5d82",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-15752",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-15752"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--0182a0b9-73e9-5454-ac7a-167a186c84df",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-1429",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-1429"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--3729782c-81a7-5bfe-9311-d361122191fd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-1367",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-1367"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--9cf9ed42-9663-52ba-98fe-ea8d8603409b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-13608",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-13608"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--defc85a6-acee-5186-aa2f-1a479bad3858",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-1215",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-1215"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--1b859514-6613-552b-8aef-ca3a400184bd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-1214",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-1214"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--64ae8116-ce3d-585d-8e5d-5241daad5ebf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-11580",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-11580"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--efc2b161-d84e-59af-bb5c-cb1e180ea7e6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-11539",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-11539"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ef1aee19-0cf4-5584-92e7-28c016cb8164",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-11510",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-11510"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c87da6d4-fc88-547b-92a0-19e0d55007e7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-0863",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-0863"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--0eaea3e4-817a-578f-8f14-015b89dc0232",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-0859",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-0859"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--81e63377-f4e9-5d0e-9bcb-95551cc9f59e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-0808",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-0808"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f2062a7e-ac1c-57ce-8e56-29e520cbde32",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-0803",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-0803"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--60fb51e1-2ebe-5f70-b6b0-d3eeb42dfac1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-0797",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-0797"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c2634e19-a6c2-5e74-818b-ebd6f04675a0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-0708",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-0708"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--9cecd9fb-a830-52ae-8798-d2d5c501d6f5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-0604",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-0604"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--24d7c006-dec6-57ac-9bbc-c3433a7338a4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-0541",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-0541"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--56de2396-53d8-51c6-80a3-df40e6166377",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2019-0211",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2019-0211"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--41ed1e96-a847-5f1d-a07f-299852dad569",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-8653",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-8653"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--79c44f36-0232-54a3-af0c-698e866e0e65",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-7600",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-7600"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--10c39551-0102-5031-b1d6-5b64493c44ad",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-6789",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-6789"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--9b62aabf-d484-5265-a1a8-0c4e528f3447",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-4939",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-4939"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--270dc4ec-085e-5e56-97da-c1fc2994eb45",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-4878",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-4878"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e177b825-ece7-5390-8d8f-a9a70b6513be",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-2380",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-2380"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c9e6cbeb-8a66-501a-9b29-09a717bb1668",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-20062",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-20062"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--995bcdea-2643-5dec-b52f-d98656c3599c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-18325",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-18325"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d4add5c0-ae38-594e-a08e-c0e0108d9021",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-15961",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-15961"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ca87f952-051e-5fb3-9f7c-fe1f9800ec76",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-15811",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-15811"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--9ac8eb41-ad63-5c1b-8f4e-74547b1a8a85",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-14558",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-14558"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--128410d0-4fd7-5088-99c7-976154f34661",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-13379",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-13379"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--80939fa5-81e0-5ebc-807c-010471614c8d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-11776",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-11776"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c65bd4dc-3668-5242-a4b8-94032f6ef2e4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-0802",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-0802"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--f68d9d00-5238-5d6c-bb6a-5fba8c3ba7a2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-0798",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-0798"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--12ef4830-831b-5dd0-9485-53436b2049b3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2018-0171",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2018-0171"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--c29a38ac-056b-5889-adae-1505cd57df62",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-9822",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-9822"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--8539f9d6-c4cd-5397-9437-0306989b8a1f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-9805",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-9805"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--2b3624aa-bbdf-5052-968b-efa5ad0fea64",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-9248",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-9248"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--a62fcd6a-b144-52b1-9a36-5f28e2e0bac6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-8759",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-8759"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--fa3282d3-d852-51d0-8dc4-7bcdecfb3b36",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-7269",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-7269"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--627032f4-afc9-50cd-aa7c-1d6437908f4d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-6327",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-6327"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b9c82d8b-befc-5ced-b8c7-5e5691fa9889",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-5638",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-5638"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--312f88a7-36c2-5e91-9175-7db3feb7ad5c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-16651",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-16651"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--16d6b91a-e6d1-5f62-8281-b73c97801d39",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-11882",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-11882"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--40771a79-29c7-5ed1-b7b8-556a5749e0fc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-11774",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-11774"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5f9a5f11-b9c2-50a3-8648-2a07389a7c06",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-0199",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-0199"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--d9897563-0f80-57b6-8aec-0f817ff49b3a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2017-0143",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2017-0143"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--0dc60bc0-659b-55bc-adc8-8b3e4fadc872",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-9563",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-9563"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ea9e37c1-6e24-5c61-8b31-926ed64e049e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-4437",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-4437"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6c2a865f-5135-5288-893a-0fab3ce23cd5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-3976",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-3976"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ffb68059-c8f3-5ef9-92be-03836c2aecea",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-3718",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-3718"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--b8f26453-d441-5aa9-9a73-3b759229b4db",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-3715",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-3715"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--e01bc939-4eac-5e93-a937-528cb779c3db",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-3643",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-3643"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--4375d2b9-935f-5b4e-a424-c60e27f58ccb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-3235",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-3235"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6023bbf8-ab34-55ea-81a5-f0912c7a381c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-0185",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-0185"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--499a284d-e4c0-59c7-9d2f-368688ea9c02",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2016-0167",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2016-0167"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--76b9f90b-9615-50cf-9de3-81cf9e2b884f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2015-4852",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2015-4852"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--be96f853-4b48-5e6e-b445-dc1160d34bde",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2015-1641",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2015-1641"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6035032f-e727-56ea-b3da-5ccbc20f29b9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2014-1812",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2014-1812"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--4d91a8fb-f757-542a-860a-a97217e1c38f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2012-3152",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2012-3152"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--3a0f5019-2d17-55cc-bf43-fe366e925de2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2012-0158",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2012-0158"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--ffeb4424-9cfd-53db-9c36-d2b83a97f67f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "CVE-2010-5326",
      "external_references": [
        {
          "source_name": "cve",
          "external_id": "CVE-2010-5326"
        }
      ],
      "labels": [
        "cve",
        "exploited-in-the-wild"
      ],
      "x_swiftioc_source": "cisa_kev",
      "x_swiftioc_reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--94273156-716c-5386-9547-711c23b00762",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:130[.]12[.]180[.]32",
      "pattern": "[ipv4-addr:value = '130.12.180.32']",
      "pattern_type": "stix",
      "valid_from": "2026-10-17T15:21:10Z",
      "confidence": 96,
      "labels": [
        "aggregated",
        "binarydefense",
        "blocklist",
        "bruteforce",
        "compromised",
        "ddos",
        "elf",
        "emerging-threats",
        "go",
        "greensnow",
        "ipsum",
        "legea",
        "multi-list",
        "scanner",
        "ssh",
        "threatfox"
      ],
      "x_swiftioc_source": "binarydefense_banlist,blocklist_de_ssh,et_compromised,greensnow_blocklist,ipsum_level5,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://rules.emergingthreats.net/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4fab62c5-cbc6-5a87-8794-e8635d035aec",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:94[.]154[.]43[.]69",
      "pattern": "[ipv4-addr:value = '94.154.43.69']",
      "pattern_type": "stix",
      "valid_from": "2026-09-03T05:39:44Z",
      "confidence": 96,
      "labels": [
        "AkataruBotnet",
        "aggregated",
        "binarydefense",
        "blocklist",
        "bruteforce",
        "compromised",
        "emerging-threats",
        "greensnow",
        "ipsum",
        "multi-list",
        "scanner",
        "ssh",
        "threatfox"
      ],
      "x_swiftioc_source": "binarydefense_banlist,blocklist_de_ssh,et_compromised,greensnow_blocklist,ipsum_level5,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://rules.emergingthreats.net/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--526c950e-42e1-5a20-9e73-ca90c7a2e3a2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:176[.]65[.]139[.]131",
      "pattern": "[ipv4-addr:value = '176.65.139.131']",
      "pattern_type": "stix",
      "valid_from": "2026-10-23T05:26:18Z",
      "confidence": 96,
      "labels": [
        "aggregated",
        "blocklist",
        "bruteforce",
        "compromised",
        "emerging-threats",
        "honeypot",
        "ipsum",
        "multi-list",
        "ssh",
        "threatfox"
      ],
      "x_swiftioc_source": "blocklist_de_ssh,et_compromised,ipsum_level5,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--06396cc3-dcbe-505b-b835-c225ef8dfa9d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:85[.]215[.]73[.]250",
      "pattern": "[ipv4-addr:value = '85.215.73.250']",
      "pattern_type": "stix",
      "valid_from": "2026-10-22T01:18:15Z",
      "confidence": 96,
      "labels": [
        "Mirai",
        "blocklist",
        "bruteforce",
        "cins",
        "cowrie",
        "elf",
        "honeypot",
        "scanner",
        "ssh",
        "threatfox"
      ],
      "x_swiftioc_source": "blocklist_de_ssh,ci_army_list,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--97ad1e77-1362-5033-ae0c-2233c64df0a1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:77[.]239[.]124[.]135",
      "pattern": "[ipv4-addr:value = '77.239.124.135']",
      "pattern_type": "stix",
      "valid_from": "2026-10-21T05:31:44Z",
      "confidence": 96,
      "labels": [
        "aggregated",
        "arm",
        "binarydefense",
        "blocklist",
        "cins",
        "elf",
        "ipsum",
        "multi-list",
        "scanner",
        "threatfox",
        "zig"
      ],
      "x_swiftioc_source": "binarydefense_banlist,ci_army_list,ipsum_level5,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.binarydefense.com/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e6520f3c-dc46-5e5f-9f24-f240a94f8902",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:92[.]249[.]61[.]190",
      "pattern": "[ipv4-addr:value = '92.249.61.190']",
      "pattern_type": "stix",
      "valid_from": "2026-10-19T09:45:47Z",
      "confidence": 96,
      "labels": [
        "Adaptix",
        "AdaptixC2",
        "aggregated",
        "blocklist",
        "bruteforce",
        "drb-ra",
        "greensnow",
        "ipsum",
        "multi-list",
        "ssh",
        "threatfox"
      ],
      "x_swiftioc_source": "blocklist_de_ssh,greensnow_blocklist,ipsum_level5,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--274fc3b1-55dd-59cc-a32c-419b959e4ce1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:91[.]92[.]43[.]221",
      "pattern": "[ipv4-addr:value = '91.92.43.221']",
      "pattern_type": "stix",
      "valid_from": "2026-10-16T06:10:48Z",
      "confidence": 96,
      "labels": [
        "aggregated",
        "blocklist",
        "bruteforce",
        "cins",
        "honeypot",
        "ipsum",
        "mirai",
        "multi-list",
        "scanner",
        "ssh",
        "threatfox"
      ],
      "x_swiftioc_source": "blocklist_de_ssh,ci_army_list,ipsum_level5,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.blocklist.de/en/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6e2d2d26-1a1a-5220-a001-5797d29c0c56",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:31[.]59[.]220[.]26",
      "pattern": "[ipv4-addr:value = '31.59.220.26']",
      "pattern_type": "stix",
      "valid_from": "2026-10-12T06:11:09Z",
      "confidence": 96,
      "labels": [
        "aggregated",
        "binarydefense",
        "blocklist",
        "cins",
        "ipsum",
        "multi-list",
        "scanner",
        "threatfox"
      ],
      "x_swiftioc_source": "binarydefense_banlist,ci_army_list,ipsum_level5,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://cinsscore.com/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8c65b922-4bc1-54e6-8d0b-efeb9c6f67a4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:156[.]225[.]17[.]60",
      "pattern": "[ipv4-addr:value = '156.225.17.60']",
      "pattern_type": "stix",
      "valid_from": "2026-09-23T08:22:50Z",
      "confidence": 96,
      "labels": [
        "Gh0stRAT",
        "RAT",
        "binarydefense",
        "blocklist",
        "cins",
        "scanner",
        "threatfox"
      ],
      "x_swiftioc_source": "binarydefense_banlist,ci_army_list,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://cinsscore.com/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--719c85b3-fc5a-531b-bd93-88b3805ae7bd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:165[.]154[.]227[.]8",
      "pattern": "[ipv4-addr:value = '165.154.227.8']",
      "pattern_type": "stix",
      "valid_from": "2026-09-21T07:10:53Z",
      "confidence": 96,
      "labels": [
        "aggregated",
        "blocklist",
        "bruteforce",
        "greensnow",
        "ipsum",
        "mdrfckr",
        "multi-list",
        "outlaw",
        "ssh",
        "ssh-bruteforce",
        "threatfox"
      ],
      "x_swiftioc_source": "blocklist_de_ssh,greensnow_blocklist,ipsum_level5,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.blocklist.de/en/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--86eef1e3-7717-589e-94cd-f6664acd7815",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:165[.]154[.]162[.]74",
      "pattern": "[ipv4-addr:value = '165.154.162.74']",
      "pattern_type": "stix",
      "valid_from": "2026-09-21T07:10:53Z",
      "confidence": 96,
      "labels": [
        "aggregated",
        "blocklist",
        "bruteforce",
        "greensnow",
        "ipsum",
        "mdrfckr",
        "multi-list",
        "outlaw",
        "ssh",
        "ssh-bruteforce",
        "threatfox"
      ],
      "x_swiftioc_source": "blocklist_de_ssh,greensnow_blocklist,ipsum_level5,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.blocklist.de/en/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5e85bc44-abf8-55b7-8327-fa4b5f2d56b2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:45[.]198[.]224[.]184",
      "pattern": "[ipv4-addr:value = '45.198.224.184']",
      "pattern_type": "stix",
      "valid_from": "2026-09-21T07:10:37Z",
      "confidence": 96,
      "labels": [
        "aggregated",
        "blocklist",
        "bruteforce",
        "compromised",
        "emerging-threats",
        "honeypot",
        "ipsum",
        "multi-list",
        "shardlure",
        "ssh",
        "threatfox"
      ],
      "x_swiftioc_source": "blocklist_de_ssh,et_compromised,ipsum_level5,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://rules.emergingthreats.net/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e74042e0-e77b-57a4-ab81-a04d62032e51",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:114[.]111[.]53[.]214",
      "pattern": "[ipv4-addr:value = '114.111.53.214']",
      "pattern_type": "stix",
      "valid_from": "2026-09-12T13:44:26Z",
      "confidence": 96,
      "labels": [
        "aggregated",
        "blocklist",
        "bruteforce",
        "greensnow",
        "ipsum",
        "mdrfckr",
        "multi-list",
        "outlaw",
        "ssh",
        "ssh-bruteforce",
        "threatfox",
        "xmrig"
      ],
      "x_swiftioc_source": "blocklist_de_ssh,greensnow_blocklist,ipsum_level5,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.blocklist.de/en/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cb7b37f8-9147-5ecf-95cf-af7c019483ef",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:45[.]78[.]201[.]248",
      "pattern": "[ipv4-addr:value = '45.78.201.248']",
      "pattern_type": "stix",
      "valid_from": "2026-09-12T13:44:25Z",
      "confidence": 96,
      "labels": [
        "aggregated",
        "blocklist",
        "bruteforce",
        "greensnow",
        "ipsum",
        "mdrfckr",
        "multi-list",
        "outlaw",
        "ssh",
        "ssh-bruteforce",
        "threatfox",
        "xmrig"
      ],
      "x_swiftioc_source": "blocklist_de_ssh,greensnow_blocklist,ipsum_level5,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.blocklist.de/en/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9323ce03-3968-53d0-bf40-c08e7c888490",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:130[.]12[.]180[.]51",
      "pattern": "[ipv4-addr:value = '130.12.180.51']",
      "pattern_type": "stix",
      "valid_from": "2026-10-23T16:11:43Z",
      "confidence": 88,
      "labels": [
        "CVE-2021-41773",
        "CVE-2026-109618",
        "Redtail",
        "aggregated",
        "blocklist",
        "bruteforce",
        "ipsum",
        "multi-list",
        "php2shell",
        "ssh",
        "telnet",
        "threatfox",
        "xmrig"
      ],
      "x_swiftioc_source": "blocklist_de_ssh,ipsum_level5,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c01d2dec-7748-5dab-9a7c-4a0fd6307150",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:45[.]198[.]224[.]34",
      "pattern": "[ipv4-addr:value = '45.198.224.34']",
      "pattern_type": "stix",
      "valid_from": "2026-10-12T10:46:34Z",
      "confidence": 88,
      "labels": [
        "aggregated",
        "blocklist",
        "compromised",
        "emerging-threats",
        "honeypot",
        "ipsum",
        "multi-list",
        "shardlure",
        "threatfox"
      ],
      "x_swiftioc_source": "et_compromised,ipsum_level5,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://rules.emergingthreats.net/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--56ed0a39-8fff-5a41-92d7-0ccc68fff053",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:178.20.210.0/24",
      "pattern": "[ipv4-addr:value = '178.20.210.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-09-27T15:22:01Z",
      "confidence": 88,
      "labels": [
        "drop",
        "dshield",
        "sans-isc",
        "scanning",
        "spamhaus"
      ],
      "x_swiftioc_source": "dshield_block,spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e157cc4a-271c-50e8-bf16-4e99e5b660b5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:94.154.43.0/24",
      "pattern": "[ipv4-addr:value = '94.154.43.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-09-11T02:39:29Z",
      "confidence": 88,
      "labels": [
        "drop",
        "dshield",
        "sans-isc",
        "scanning",
        "spamhaus"
      ],
      "x_swiftioc_source": "dshield_block,spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fb15c426-34e1-5a71-ac87-d71728ee6613",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.135.193.0/24",
      "pattern": "[ipv4-addr:value = '45.135.193.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-09-09T02:44:17Z",
      "confidence": 88,
      "labels": [
        "drop",
        "dshield",
        "sans-isc",
        "scanning",
        "spamhaus"
      ],
      "x_swiftioc_source": "dshield_block,spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--41a0b5fa-9216-54f7-9e26-e09302e101dc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:91.92.47.0/24",
      "pattern": "[ipv4-addr:value = '91.92.47.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-08-31T18:39:04Z",
      "confidence": 88,
      "labels": [
        "drop",
        "dshield",
        "sans-isc",
        "scanning",
        "spamhaus"
      ],
      "x_swiftioc_source": "dshield_block,spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cdb15b22-0d47-518e-b26e-5b5ca0b6a7cf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:91.92.40.0/24",
      "pattern": "[ipv4-addr:value = '91.92.40.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-08-06T13:53:27Z",
      "confidence": 88,
      "labels": [
        "drop",
        "dshield",
        "sans-isc",
        "scanning",
        "spamhaus"
      ],
      "x_swiftioc_source": "dshield_block,spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--96d063bc-233e-5d6c-9a91-7668c97421b4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:77.90.185.0/24",
      "pattern": "[ipv4-addr:value = '77.90.185.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-07-19T02:11:45Z",
      "confidence": 88,
      "labels": [
        "drop",
        "dshield",
        "sans-isc",
        "scanning",
        "spamhaus"
      ],
      "x_swiftioc_source": "dshield_block,spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--26e93333-c294-5dad-afdf-60d7d74a57f5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.194.92.0/24",
      "pattern": "[ipv4-addr:value = '45.194.92.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-07-19T02:11:45Z",
      "confidence": 88,
      "labels": [
        "drop",
        "dshield",
        "sans-isc",
        "scanning",
        "spamhaus"
      ],
      "x_swiftioc_source": "dshield_block,spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9eab8323-dec1-5001-9f8b-8cad6db4cb91",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.148.10.0/24",
      "pattern": "[ipv4-addr:value = '45.148.10.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-07-19T02:11:45Z",
      "confidence": 88,
      "labels": [
        "drop",
        "dshield",
        "sans-isc",
        "scanning",
        "spamhaus"
      ],
      "x_swiftioc_source": "dshield_block,spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0267df45-856a-5d65-8e05-b76215f16b5d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.142.193.0/24",
      "pattern": "[ipv4-addr:value = '45.142.193.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-07-19T02:11:45Z",
      "confidence": 88,
      "labels": [
        "drop",
        "dshield",
        "sans-isc",
        "scanning",
        "spamhaus"
      ],
      "x_swiftioc_source": "dshield_block,spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9da85d44-96c5-5d4a-8af9-3a1d662f3a78",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:43.228.157.0/24",
      "pattern": "[ipv4-addr:value = '43.228.157.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-07-19T02:11:45Z",
      "confidence": 88,
      "labels": [
        "drop",
        "dshield",
        "sans-isc",
        "scanning",
        "spamhaus"
      ],
      "x_swiftioc_source": "dshield_block,spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e3939d82-1b08-5792-aff4-01858ef1c000",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:213.209.159.0/24",
      "pattern": "[ipv4-addr:value = '213.209.159.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-07-19T02:11:45Z",
      "confidence": 88,
      "labels": [
        "drop",
        "dshield",
        "sans-isc",
        "scanning",
        "spamhaus"
      ],
      "x_swiftioc_source": "dshield_block,spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2a18eeab-899c-5bf1-8b00-891f7821e8f8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.76.203.0/24",
      "pattern": "[ipv4-addr:value = '204.76.203.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-07-19T02:11:45Z",
      "confidence": 88,
      "labels": [
        "drop",
        "dshield",
        "sans-isc",
        "scanning",
        "spamhaus"
      ],
      "x_swiftioc_source": "dshield_block,spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d988b9d9-3f61-5b64-a4b6-45dad702cb7c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:195.178.110.0/24",
      "pattern": "[ipv4-addr:value = '195.178.110.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-07-19T02:11:45Z",
      "confidence": 88,
      "labels": [
        "drop",
        "dshield",
        "sans-isc",
        "scanning",
        "spamhaus"
      ],
      "x_swiftioc_source": "dshield_block,spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--642da630-51f4-5b6c-8d7f-beb4ef446bd7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:45[.]198[.]224[.]89",
      "pattern": "[ipv4-addr:value = '45.198.224.89']",
      "pattern_type": "stix",
      "valid_from": "2026-10-19T13:06:02Z",
      "confidence": 83,
      "labels": [
        "MooBot",
        "aggregated",
        "blocklist",
        "cins",
        "ipsum",
        "multi-list",
        "scanner",
        "threatfox"
      ],
      "x_swiftioc_source": "ci_army_list,ipsum_level5,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://cinsscore.com/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2e57fecc-161e-5804-9a95-ed73213613a9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:bioindiaservices[.]com",
      "pattern": "[domain-name:value = 'bioindiaservices.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T22:07:42Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e6f6f29a-b1b6-5832-82a8-4775aad6d644",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:www[.]alliancefr-bizerte[.]tn",
      "pattern": "[domain-name:value = 'www.alliancefr-bizerte.tn']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T22:07:41Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fbab2c24-ff51-51b3-8eea-467cc22a0828",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:beatjournals[.]store",
      "pattern": "[domain-name:value = 'beatjournals.store']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T22:07:41Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--74d4fbc4-a3d0-556d-9b13-22d73f5df1d0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:baiihua[.]com",
      "pattern": "[domain-name:value = 'baiihua.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T22:07:41Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1381dbe7-bb1e-597e-8bcc-e4171a67b7dd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:aqeellogistic[.]com",
      "pattern": "[domain-name:value = 'aqeellogistic.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T22:07:41Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e531d82f-97f8-5f84-a6b7-2acbcef94966",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://c[.]adilawa99[.]org/",
      "pattern": "[url:value = 'https://c.adilawa99.org/']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T22:05:48Z",
      "confidence": 80,
      "labels": [
        "Vidar",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a3d767a6-26c8-5ad5-952d-a38b179cc17a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:c[.]adilawa99[.]org",
      "pattern": "[domain-name:value = 'c.adilawa99.org']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T22:05:48Z",
      "confidence": 80,
      "labels": [
        "Vidar",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d5ddd3ab-8403-50e5-b05d-ea3df7b5d900",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:156[.]240[.]14[.]155",
      "pattern": "[ipv4-addr:value = '156.240.14.155']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T22:05:06Z",
      "confidence": 80,
      "labels": [
        "Vshell",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fbb746b8-1953-5e1b-a86e-86bc9f23b528",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:110[.]173[.]53[.]101",
      "pattern": "[ipv4-addr:value = '110.173.53.101']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T22:05:06Z",
      "confidence": 80,
      "labels": [
        "Vshell",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4952cf0c-0081-5150-8901-2dc7fbaa323e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://129[.]121[.]115[.]43:9163/llx[.]apk",
      "pattern": "[url:value = 'http://129.121.115.43:9163/llx.apk']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T22:03:50Z",
      "confidence": 80,
      "labels": [
        "ADB",
        "Android",
        "apk",
        "honeypot",
        "llx",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e8d32b60-0eb0-5faa-bf73-8ad96a83c9f8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:9c2d8150f4dfb5030060c8ae701d8e79211b8f37bd43197fae1c2075121211c0",
      "pattern": "[file:hashes.'SHA-256' = '9c2d8150f4dfb5030060c8ae701d8e79211b8f37bd43197fae1c2075121211c0']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:59:45Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "forge",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--45c4acb7-22d5-531f-ae3b-baecd747f979",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:blogstartups[.]com",
      "pattern": "[domain-name:value = 'blogstartups.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:57:39Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--74883c00-a4f3-51ef-bc22-6559646130a3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:blog[.]edelzone[.]fr",
      "pattern": "[domain-name:value = 'blog.edelzone.fr']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:57:39Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--23d129c3-a377-5f70-8c7e-5dfe491538ce",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:bestpayoutcasinos[.]org",
      "pattern": "[domain-name:value = 'bestpayoutcasinos.org']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:57:39Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a4a540e1-188f-5afc-8609-35d210dbeb38",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:azwebsoft[.]online",
      "pattern": "[domain-name:value = 'azwebsoft.online']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:57:39Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--527bfb7f-b432-579d-9b56-6e0cea667989",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:appconsulting[.]fr",
      "pattern": "[domain-name:value = 'appconsulting.fr']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:57:39Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8f2a0c98-8609-5fc7-818c-a70e617b8718",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:beautyavenue[.]us",
      "pattern": "[domain-name:value = 'beautyavenue.us']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:57:38Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e690109a-6ea5-570b-a34a-f4f501a16765",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:barkacsolokboltja[.]hu",
      "pattern": "[domain-name:value = 'barkacsolokboltja.hu']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:57:38Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cb11b93e-5f04-5ecb-b23a-da1b7fbeda43",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:artsetindustriesinformatiques[.]fr",
      "pattern": "[domain-name:value = 'artsetindustriesinformatiques.fr']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:57:38Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6918e370-4765-5cd7-af9f-59ffdc2f1bbe",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:v[.]getpi[.]su",
      "pattern": "[domain-name:value = 'v.getpi.su']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:56:54Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ee369da8-610c-5bb6-85b1-0947759e54ff",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:a7bd0e9cb7c225d7bfe570f8621ce8ca63c178eddc4c318f0b15c8ead45e2cd2",
      "pattern": "[file:hashes.'SHA-256' = 'a7bd0e9cb7c225d7bfe570f8621ce8ca63c178eddc4c318f0b15c8ead45e2cd2']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:56:43Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "boost",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6c1a2fb0-d121-576a-b94f-609906d0bb3a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://123[.]8[.]55[.]138:39954/i",
      "pattern": "[url:value = 'http://123.8.55.138:39954/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:55:13Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "elf",
        "Mozi"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f56549d9-6f6a-5f12-a479-1066bfce30d5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://115[.]49[.]4[.]137:40320/i",
      "pattern": "[url:value = 'http://115.49.4.137:40320/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:55:12Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "32-bit",
        "elf",
        "mips",
        "Mozi"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--960197b0-4871-567e-b1ac-e8f687d6206a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:c15a77a91792f555cf29cdcd2415c2ae0fd00005d2bceb3ccd241adca0cf98f7",
      "pattern": "[file:hashes.'SHA-256' = 'c15a77a91792f555cf29cdcd2415c2ae0fd00005d2bceb3ccd241adca0cf98f7']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:53:42Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "macOS",
        "stratos",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d81ed615-868c-54c4-acbb-636dd429106d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:4188fcab89b6b88a761f8ff3facd6ac36f8e66bd15f171775188dd2b8fa51939",
      "pattern": "[file:hashes.'SHA-256' = '4188fcab89b6b88a761f8ff3facd6ac36f8e66bd15f171775188dd2b8fa51939']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:50:51Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "grove",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--748912e6-4263-57a5-be13-502d33324586",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:5b6458c024a0333edf779148aa23e3072fb1508103001f4dd6477f5805e262f5",
      "pattern": "[file:hashes.'SHA-256' = '5b6458c024a0333edf779148aa23e3072fb1508103001f4dd6477f5805e262f5']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:49:56Z",
      "confidence": 80,
      "labels": [
        "malware",
        "Mirai"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a4a0e7a2-8c2e-5c24-85e3-a3124d23d674",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://del[.]sou[.]pp[.]ua/ip_ranges[.]txt",
      "pattern": "[url:value = 'https://del.sou.pp.ua/ip_ranges.txt']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:49:03Z",
      "confidence": 80,
      "labels": [
        "honeypot",
        "proxyware",
        "python",
        "threatfox",
        "traffmonetizer"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a456ae66-212b-5b07-b3eb-c95065b4fb49",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://del[.]sou[.]pp[.]ua/install_tm[.]sh",
      "pattern": "[url:value = 'https://del.sou.pp.ua/install_tm.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:49:03Z",
      "confidence": 80,
      "labels": [
        "honeypot",
        "proxyware",
        "python",
        "threatfox",
        "traffmonetizer"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bd21d62c-9dbd-5b4a-9f15-9673262efc0b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://del[.]sou[.]pp[.]ua/install[.]sh",
      "pattern": "[url:value = 'https://del.sou.pp.ua/install.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:49:03Z",
      "confidence": 80,
      "labels": [
        "honeypot",
        "proxyware",
        "python",
        "threatfox",
        "traffmonetizer"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fd15125c-fd19-579c-b469-1d016f406485",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://del[.]sou[.]pp[.]ua/del[.]txt",
      "pattern": "[url:value = 'https://del.sou.pp.ua/del.txt']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:49:03Z",
      "confidence": 80,
      "labels": [
        "honeypot",
        "proxyware",
        "python",
        "threatfox",
        "traffmonetizer"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--90a220c5-d3bd-5092-a5bf-ea9b58249c7d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://176[.]65[.]139[.]201/nyx_bot_linux_amd64_hkdf",
      "pattern": "[url:value = 'http://176.65.139.201/nyx_bot_linux_amd64_hkdf']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:48:10Z",
      "confidence": 80,
      "labels": [
        "DDoS",
        "elf",
        "golang",
        "honeypot",
        "nyx",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e97e125b-ef67-5339-92e8-e7efb8fc8670",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:9ffec38b5f3343980fdf7a926bfad3f07c17a4a2e16eb4b4ad909decb5465ff1",
      "pattern": "[file:hashes.'SHA-256' = '9ffec38b5f3343980fdf7a926bfad3f07c17a4a2e16eb4b4ad909decb5465ff1']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:47:49Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "frame97",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6475af82-2f62-50df-9cde-82992daaf8b4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://196[.]191[.]231[.]12:53338/i",
      "pattern": "[url:value = 'http://196.191.231.12:53338/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:47:10Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "mirai"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--19b92053-86c8-5a3c-b3a8-6c58e7e8f356",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://59[.]96[.]140[.]238:54441/i",
      "pattern": "[url:value = 'http://59.96.140.238:54441/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:47:08Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "Mozi"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--532d6a35-7bd1-564e-8499-da33ad9bddaa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://115[.]49[.]11[.]8:51631/bin[.]sh",
      "pattern": "[url:value = 'http://115.49.11.8:51631/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:47:08Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "mirai"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6881d6a8-a944-5387-b73a-e88bc812ae75",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://61[.]176[.]70[.]91:43838/i",
      "pattern": "[url:value = 'http://61.176.70.91:43838/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:47:07Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "None"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--beaf483b-2107-575e-8e5d-319c9aaaee51",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://123[.]189[.]18[.]155:33861/i",
      "pattern": "[url:value = 'http://123.189.18.155:33861/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:47:06Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "None"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e8b1a371-4b5f-5bcb-805a-8a81fc567291",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:155[.]138[.]175[.]126",
      "pattern": "[ipv4-addr:value = '155.138.175.126']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:46:45Z",
      "confidence": 80,
      "labels": [
        "Beacon",
        "honeypot",
        "persistence",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--64ba3b98-e126-52d8-ac51-20dae3286cb2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:655addd2cef1396715a4eeb69c793e205bd7cae5bb64770d4d37291eae3b17e3",
      "pattern": "[file:hashes.'SHA-256' = '655addd2cef1396715a4eeb69c793e205bd7cae5bb64770d4d37291eae3b17e3']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:44:58Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "frame",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2a9095f6-50cd-54ed-8e5c-6f1b2341ddbc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:4f0dfbf07451be9c9e20efe612a60ee92413e085a77d3c7bd82847d21e8c559c",
      "pattern": "[file:hashes.'SHA-256' = '4f0dfbf07451be9c9e20efe612a60ee92413e085a77d3c7bd82847d21e8c559c']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:42:05Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "macOS",
        "nova",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b3226cc4-0ac5-57df-88ca-6660ae0114d9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:event[.]springdepot[.]lat",
      "pattern": "[domain-name:value = 'event.springdepot.lat']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:39:22Z",
      "confidence": 80,
      "labels": [
        "RevStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--171f1d96-baeb-5f6e-90f3-5e28f6e4e233",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:bb059bf8aa39a8e8365d9f99b586447853026db3ad1e684a17a9b72fd949956a",
      "pattern": "[file:hashes.'SHA-256' = 'bb059bf8aa39a8e8365d9f99b586447853026db3ad1e684a17a9b72fd949956a']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:39:12Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "haven",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--02763a1c-494e-5729-aeba-60ca4002db36",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:www[.]allcopytx[.]com",
      "pattern": "[domain-name:value = 'www.allcopytx.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:37:36Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--283c6c01-caf4-5c98-a66c-1e14c4588dc0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:www[.]alvesaraujo[.]com",
      "pattern": "[domain-name:value = 'www.alvesaraujo.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:37:35Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8176f555-eb26-50c8-bd0d-c33b1f90d750",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:www[.]alubox[.]org",
      "pattern": "[domain-name:value = 'www.alubox.org']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:37:35Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4f8b80cb-33ff-55a1-9f49-9366841835d0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:www[.]allcoastinteriorlinings[.]com[.]au",
      "pattern": "[domain-name:value = 'www.allcoastinteriorlinings.com.au']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:37:35Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6963197d-f982-56d5-94e6-c80962bdefc4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:www[.]adamellobrentameteo[.]it",
      "pattern": "[domain-name:value = 'www.adamellobrentameteo.it']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:37:35Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0205b7f3-b606-5e95-ae30-c785b2e4a3b7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:e11d97166f3419f58d5c2996e12046ccf6e4522cd6739251e50319203def3979",
      "pattern": "[file:hashes.'SHA-256' = 'e11d97166f3419f58d5c2996e12046ccf6e4522cd6739251e50319203def3979']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:36:22Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "chant",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ea4853df-8469-5b4d-9776-80d8ae2f4c83",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://115[.]55[.]220[.]145:36742/i",
      "pattern": "[url:value = 'http://115.55.220.145:36742/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:36:19Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "32-bit",
        "elf",
        "mips",
        "Mozi"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b4fb054c-2ffe-59d2-9230-b33ccf0f3c68",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:2d2e0392b48f3e2c97f6153709a9adc333a85287749c04c007e44cb7cdc0374d",
      "pattern": "[file:hashes.'SHA-256' = '2d2e0392b48f3e2c97f6153709a9adc333a85287749c04c007e44cb7cdc0374d']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:33:21Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "macOS",
        "threatfox",
        "willow"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--251a4b75-590b-527a-b6c4-a2575034c8e8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://42[.]227[.]173[.]102:56891/bin[.]sh",
      "pattern": "[url:value = 'http://42.227.173.102:56891/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:32:11Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "Mozi"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dcbb470d-3e2c-55f6-8641-961a2f934204",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:845c5901c9d0492dc0d212e4784e0c8ec3252adb9fabb7eb1c1f6fa0a457724a",
      "pattern": "[file:hashes.'SHA-256' = '845c5901c9d0492dc0d212e4784e0c8ec3252adb9fabb7eb1c1f6fa0a457724a']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:30:27Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "macOS",
        "quill",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7a830c05-0d05-5459-86e5-439027ea427e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://115[.]49[.]4[.]137:40320/bin[.]sh",
      "pattern": "[url:value = 'http://115.49.4.137:40320/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:27:18Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "32-bit",
        "elf",
        "mips",
        "Mozi"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6833a563-a238-5bc3-a31d-5c175f9f8d64",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:www[.]111tv[.]it",
      "pattern": "[domain-name:value = 'www.111tv.it']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:22:18Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--87b82f5b-078c-5d8d-88f9-70988714bfcd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:allianzexecutivo[.]com[.]br",
      "pattern": "[domain-name:value = 'allianzexecutivo.com.br']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:22:18Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--44ef427d-763b-5552-940c-d02a8298d43a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:6e136391f87beac4ae152e4f3f24ad61fb7b06df0fdb39d0005660ea1c5ea55e",
      "pattern": "[file:hashes.'SHA-256' = '6e136391f87beac4ae152e4f3f24ad61fb7b06df0fdb39d0005660ea1c5ea55e']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:17:19Z",
      "confidence": 80,
      "labels": [
        "malware",
        "Mirai"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c3b20813-c87d-5d32-9445-1457529e6fb3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://221[.]14[.]182[.]104:50789/bin[.]sh",
      "pattern": "[url:value = 'http://221.14.182.104:50789/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:17:08Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "Mozi"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a68d6288-888d-5101-8243-ffb2169c34c8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://42[.]239[.]240[.]52:51436/i",
      "pattern": "[url:value = 'http://42.239.240.52:51436/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:17:07Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "Mozi"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--edd1264a-79f5-5671-9e45-2076bd764eb8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://219[.]155[.]80[.]139:35992/i",
      "pattern": "[url:value = 'http://219.155.80.139:35992/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:17:07Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "Mozi"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--94414bb1-999b-5e7d-b391-73ec615f9e71",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://183[.]12[.]171[.]187:44417/bin[.]sh",
      "pattern": "[url:value = 'http://183.12.171.187:44417/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:17:07Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "mirai"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--caac5a34-dc0f-5493-a42b-0041dfd17bfd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://182[.]116[.]115[.]115:58495/i",
      "pattern": "[url:value = 'http://182.116.115.115:58495/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:17:07Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "Mozi"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a2be323e-5269-5f66-b140-33f1c03e5657",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://123[.]189[.]18[.]155:33861/bin[.]sh",
      "pattern": "[url:value = 'http://123.189.18.155:33861/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:17:07Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "None"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--945c91d9-2c0f-522f-85dc-9f88da3f87af",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:3cad72ca97f4394491d63bbcb0c33f79c3871e4b58f2913a7270520a2b6da162",
      "pattern": "[file:hashes.'SHA-256' = '3cad72ca97f4394491d63bbcb0c33f79c3871e4b58f2913a7270520a2b6da162']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:15:09Z",
      "confidence": 80,
      "labels": [
        "malware",
        "WannaCry"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ad7aac71-0d6e-5465-8498-8e10e4a34fd6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:deload[.]getpi[.]su",
      "pattern": "[domain-name:value = 'deload.getpi.su']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:13:19Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a2470916-50b5-5c0b-936b-86ae92426cf8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:www[.]150graziadeledda[.]it",
      "pattern": "[domain-name:value = 'www.150graziadeledda.it']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:12:17Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--449f941f-ba16-5ced-aa3b-5a3650a43326",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:24siete[.]info",
      "pattern": "[domain-name:value = '24siete.info']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:12:17Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d5722fc6-16bc-5339-89e0-db82ded92adc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:alldatadaily[.]info",
      "pattern": "[domain-name:value = 'alldatadaily.info']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:12:16Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2aee08b8-e36b-523d-aa51-0b956e9d4731",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:alansarkw[.]com",
      "pattern": "[domain-name:value = 'alansarkw.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:12:16Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--028ecb07-b266-5025-a9df-eb8c000af57a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:a-head[.]fr",
      "pattern": "[domain-name:value = 'a-head.fr']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:12:16Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--faf1f3a4-b764-5578-a9fb-59a0f11724ac",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:www[.]11quu[.]com",
      "pattern": "[domain-name:value = 'www.11quu.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:12:15Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d69349cf-bd3a-54a6-a012-dbb0c00c0359",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:afritekers[.]com",
      "pattern": "[domain-name:value = 'afritekers.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:12:15Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8f3e174c-7257-5bce-b357-528a20ca506f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:affordablemedicalhealthcare[.]com",
      "pattern": "[domain-name:value = 'affordablemedicalhealthcare.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:12:15Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--80ebfec9-8f4c-5c17-810e-5f66947878d0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:afb-aspect[.]com",
      "pattern": "[domain-name:value = 'afb-aspect.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:12:15Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--867cfbc5-4db3-5a36-9f08-ea716ca900c3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:aciencia-cap[.]com",
      "pattern": "[domain-name:value = 'aciencia-cap.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:12:15Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--111bc24a-bc2f-54e1-a5f8-344dbaf717be",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:administrationvisa[.]com",
      "pattern": "[domain-name:value = 'administrationvisa.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:12:14Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b307101c-7560-5aa7-a06c-fce2adb9dadf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:aceexterior[.]com",
      "pattern": "[domain-name:value = 'aceexterior.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:12:14Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--98aea927-102f-52ef-8eae-5b679e708b61",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:acecamps[.]net",
      "pattern": "[domain-name:value = 'acecamps.net']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:12:14Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--97352e16-b557-5024-a649-8094118d9ab3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:99websitestudio[.]com",
      "pattern": "[domain-name:value = '99websitestudio.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:12:14Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fc74e9a2-1548-549c-9591-90be18d90ea8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:4xvc[.]com",
      "pattern": "[domain-name:value = '4xvc.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:12:13Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4cd8809f-d307-516f-9aac-ad6c14ba77bc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:38[.]60[.]179[.]108",
      "pattern": "[ipv4-addr:value = '38.60.179.108']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:05:04Z",
      "confidence": 80,
      "labels": [
        "CobaltStrike",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4059947e-0d53-530a-873f-6252f2666c1b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:18[.]118[.]229[.]48",
      "pattern": "[ipv4-addr:value = '18.118.229.48']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:05:03Z",
      "confidence": 80,
      "labels": [
        "CobaltStrike",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b6a61fb4-d6fc-5702-86bd-ab8867d5be59",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:cd72c23bef1c9120ba0528efb8437c4fe0b7f5d2bbe8877ba02ae8b980420453",
      "pattern": "[file:hashes.'SHA-256' = 'cd72c23bef1c9120ba0528efb8437c4fe0b7f5d2bbe8877ba02ae8b980420453']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:03:04Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "forge",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--51e63c7e-a868-5379-bc59-25c88cb970bc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:amberbriefs[.]store",
      "pattern": "[domain-name:value = 'amberbriefs.store']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:02:12Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2fde2f8f-805a-5957-a6cb-9c4fec2b3248",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:ambercorner[.]store",
      "pattern": "[domain-name:value = 'ambercorner.store']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:02:11Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--14a0d42e-dd6d-513f-a83b-3ca35e507c5c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:amberchronicle[.]store",
      "pattern": "[domain-name:value = 'amberchronicle.store']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:02:11Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--89fa0d92-ffd1-58ed-a935-c3274b690ba8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:adplaret[.]com",
      "pattern": "[domain-name:value = 'adplaret.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:02:11Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--13248f0d-46b6-5ca6-8efd-3ab94f0eb8f0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:amberdiaries[.]store",
      "pattern": "[domain-name:value = 'amberdiaries.store']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:02:10Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3aa5b173-3593-5459-bbd1-da482516ce20",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:admission[.]qaed[.]pk",
      "pattern": "[domain-name:value = 'admission.qaed.pk']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:02:10Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ed8ad8fd-e03a-5fd1-beee-30ecc5be99c9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:556990[.]xyz",
      "pattern": "[domain-name:value = '556990.xyz']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:02:10Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c1be4c69-ade8-56d1-8d22-6d9b6319e7ab",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:889992513[.]xyz",
      "pattern": "[domain-name:value = '889992513.xyz']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:02:09Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6da86a24-d909-50f0-a218-699cef7d8894",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://42[.]234[.]142[.]188:57183/i",
      "pattern": "[url:value = 'http://42.234.142.188:57183/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:02:05Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "Mozi"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8e0e7122-c11d-50f5-9aaf-6345b0d0cb50",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://220[.]198[.]113[.]11:56881/i",
      "pattern": "[url:value = 'http://220.198.113.11:56881/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:02:05Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "None"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d2f7b710-587d-55c8-b8f9-596fa0cd7672",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://116[.]53[.]43[.]75:39671/bin[.]sh",
      "pattern": "[url:value = 'http://116.53.43.75:39671/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:01:28Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "32-bit",
        "arm",
        "elf",
        "mirai",
        "Mozi"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4349b7ba-b30f-582e-b4a4-e1bcf54a0cd0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://administrationvisa[.]com/",
      "pattern": "[url:value = 'https://administrationvisa.com/']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:00:37Z",
      "confidence": 80,
      "labels": [
        "ClickFix",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a0392351-b720-5762-bc5a-0ff4f28fc293",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://556990[.]xyz/",
      "pattern": "[url:value = 'https://556990.xyz/']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:00:37Z",
      "confidence": 80,
      "labels": [
        "ClickFix",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bd9c3ad3-58f1-5a57-b281-ed39c1bb5923",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:19a24cdbaca4bf48f7a73697cbe6fe8404c402fa5d4f16ad34a1a5868f653fcd",
      "pattern": "[file:hashes.'SHA-256' = '19a24cdbaca4bf48f7a73697cbe6fe8404c402fa5d4f16ad34a1a5868f653fcd']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T21:00:03Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "boost",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7d4dc0ae-59be-5664-9a0a-b245b611420a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:955fdf4dc9f3bbd7020fe002faa7ef85619e1a33c183b8d6929a407a0bb53f07",
      "pattern": "[file:hashes.'SHA-256' = '955fdf4dc9f3bbd7020fe002faa7ef85619e1a33c183b8d6929a407a0bb53f07']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T20:56:53Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "macOS",
        "stratos",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2011acea-30c9-5fcb-8777-6c47209f3037",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://60[.]211[.]70[.]40:36563/i",
      "pattern": "[url:value = 'http://60.211.70.40:36563/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T20:54:09Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "32-bit",
        "elf",
        "mips",
        "Mozi"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--88088aa6-97bc-5921-80fc-c83726b4eae6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:bd89557fc733124867570eafb2c762b63a18cfdc7005e8776d01e0346427e983",
      "pattern": "[file:hashes.'SHA-256' = 'bd89557fc733124867570eafb2c762b63a18cfdc7005e8776d01e0346427e983']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T20:54:00Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "grove",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c63a78a9-826d-5ea4-894c-0f3e5b473d7c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:d42fede1058f62ba45ce9eff1923d644fd2cc1ab6ac1994abc58bd1fd6c666e6",
      "pattern": "[file:hashes.'SHA-256' = 'd42fede1058f62ba45ce9eff1923d644fd2cc1ab6ac1994abc58bd1fd6c666e6']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T20:52:23Z",
      "confidence": 80,
      "labels": [
        "malware",
        "Mirai"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9e67a6d9-653b-5bf9-baf3-5abcf0c4355a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:db4cb5095a5d490265826c0dc5fa5f931c826679076a0e53acd2d7b1e7a54870",
      "pattern": "[file:hashes.'SHA-256' = 'db4cb5095a5d490265826c0dc5fa5f931c826679076a0e53acd2d7b1e7a54870']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T20:51:04Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "frame97",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1d25bd4f-4b53-5fc1-8a41-71c5d92613bf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:3d0ed188d7c5918481c91776459b664c13cdfa4cd57a4288aa37edaa9c596c74",
      "pattern": "[file:hashes.'SHA-256' = '3d0ed188d7c5918481c91776459b664c13cdfa4cd57a4288aa37edaa9c596c74']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T20:48:05Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "frame",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4656fae9-6935-5817-8b41-62beed80f815",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://42[.]239[.]240[.]52:51436/bin[.]sh",
      "pattern": "[url:value = 'http://42.239.240.52:51436/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T20:47:07Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "Mozi"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a385ba2b-410e-5342-abfd-d81081b0d83b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://182[.]116[.]12[.]137:40825/i",
      "pattern": "[url:value = 'http://182.116.12.137:40825/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T20:47:06Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "Mozi"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--45686747-c9fe-5748-a867-defc08dfb7a6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://125[.]45[.]11[.]156:53066/i",
      "pattern": "[url:value = 'http://125.45.11.156:53066/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T20:47:05Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "Mozi"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5cb543c6-7bdf-5d6a-9397-edff2331df75",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:4m8axf47[.]worknernorgram[.]rest",
      "pattern": "[domain-name:value = '4m8axf47.worknernorgram.rest']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T20:46:44Z",
      "confidence": 80,
      "labels": [
        "ClearFake",
        "mac-0xdcf2",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e0e8c0e6-176d-5920-94b5-eabeff4d03ff",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:0f1ac762b4e0e2e9a90e4aa340dc16c0fefbb38f3bfa5fe0d54ce7854686d583",
      "pattern": "[file:hashes.'SHA-256' = '0f1ac762b4e0e2e9a90e4aa340dc16c0fefbb38f3bfa5fe0d54ce7854686d583']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T20:45:07Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "macOS",
        "nova",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2dea65c3-ad61-5aa0-891f-78301cf39496",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:www[.]precisionprinterservices[.]com",
      "pattern": "[domain-name:value = 'www.precisionprinterservices.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T20:42:06Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--03fc4891-50f4-5b91-9a64-b94c441ba14b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:500d4a59e841270ac27b93547f8d72a8c72dcf875ae4fca809f47380840d93ea",
      "pattern": "[file:hashes.'SHA-256' = '500d4a59e841270ac27b93547f8d72a8c72dcf875ae4fca809f47380840d93ea']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T20:42:06Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "haven",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--31c32021-9646-5673-a610-a472f93c1f89",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:www[.]trinityoftithing[.]com",
      "pattern": "[domain-name:value = 'www.trinityoftithing.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T20:42:03Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--361dfa00-60ec-5261-bab7-dffdca5f4932",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:c742ec47af51052c61882b6a097bcdfbfb4b905cffd59e7a2bc2fb535a78a4af",
      "pattern": "[file:hashes.'SHA-256' = 'c742ec47af51052c61882b6a097bcdfbfb4b905cffd59e7a2bc2fb535a78a4af']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T20:39:15Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "chant",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d60f7c72-b0a4-5a31-afc7-b14fbe9dc8cd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:7505f68c6428914e3d2fc83a22440694370d3b55013485595f9863950256f7c4",
      "pattern": "[file:hashes.'SHA-256' = '7505f68c6428914e3d2fc83a22440694370d3b55013485595f9863950256f7c4']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T20:36:04Z",
      "confidence": 80,
      "labels": [
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--198440d3-6122-5a4a-8bf9-8d50231827f1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:6ac23271ee051abb71bf60a65daf39ab31d2b852165f88c5b5fe6ff7693c4e1e",
      "pattern": "[file:hashes.'SHA-256' = '6ac23271ee051abb71bf60a65daf39ab31d2b852165f88c5b5fe6ff7693c4e1e']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T20:36:03Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "macOS",
        "threatfox",
        "willow"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--02dd04e6-c161-56ac-97ce-6344d347de73",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:8b88b5ce9263f49cbc0a2f05d754a75a860e970ceb9eb416cb767595a1d2451b",
      "pattern": "[file:hashes.'SHA-256' = '8b88b5ce9263f49cbc0a2f05d754a75a860e970ceb9eb416cb767595a1d2451b']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T20:34:07Z",
      "confidence": 80,
      "labels": [
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fef6a2eb-373b-555f-bd42-9f11fb744d33",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:gbhpljne[.]paars[.]poker",
      "pattern": "[domain-name:value = 'gbhpljne.paars.poker']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T20:33:16Z",
      "confidence": 80,
      "labels": [
        "ClearFake",
        "mac-0x0f14",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--962f1365-cbb7-5f44-967e-36e480f57002",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:4d33abec3c68f195e84e92b3b50200604acffea9f5ffcb14d68c3917f4e25b3c",
      "pattern": "[file:hashes.'SHA-256' = '4d33abec3c68f195e84e92b3b50200604acffea9f5ffcb14d68c3917f4e25b3c']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T20:33:07Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "macOS",
        "quill",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bdeba380-6a12-5773-b7f8-409a1f7f5c6a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:c189d6a23a412aeabdb65e6ce77cee8632323bbc70c44435c2940d8725c69a01",
      "pattern": "[file:hashes.'SHA-256' = 'c189d6a23a412aeabdb65e6ce77cee8632323bbc70c44435c2940d8725c69a01']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T20:32:34Z",
      "confidence": 80,
      "labels": [
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f467f6a0-ce14-52e2-8628-7a718c8a462e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://60[.]19[.]243[.]54:44612/i",
      "pattern": "[url:value = 'http://60.19.243.54:44612/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T20:32:05Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "None"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--87f7c9e5-3ed5-5e3a-9990-64c5839e2deb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:www[.]rotundavillas[.]com",
      "pattern": "[domain-name:value = 'www.rotundavillas.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T20:32:02Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3b887dfe-b1f8-58a4-a31a-145fdaa9278e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:www[.]shenzhen2050[.]com",
      "pattern": "[domain-name:value = 'www.shenzhen2050.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T20:31:59Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eec54c54-6136-53c5-acdf-e02607973abd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:31[.]77[.]220[.]7",
      "pattern": "[ipv4-addr:value = '31.77.220.7']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T20:31:00Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6808563c-5d33-5c11-ab1d-b0bbb3396d63",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:de[.]remusdownloads[.]su",
      "pattern": "[domain-name:value = 'de.remusdownloads.su']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T20:30:37Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ca10d0fc-0d5e-55ec-ab85-4109e2354fed",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:eaddd0e6bf1c396859cee853792e6878977c8951829e1c43a66b204cc11a6a47",
      "pattern": "[file:hashes.'SHA-256' = 'eaddd0e6bf1c396859cee853792e6878977c8951829e1c43a66b204cc11a6a47']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T20:22:58Z",
      "confidence": 80,
      "labels": [
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f7449ae8-e59a-50a3-a233-177297f2df56",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:fac[.]ucao-uuz[.]com",
      "pattern": "[domain-name:value = 'fac.ucao-uuz.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T20:21:57Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8ca4a047-7779-58e0-983b-b0a3cdfe94bd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:www[.]lesmilanregistry[.]com",
      "pattern": "[domain-name:value = 'www.lesmilanregistry.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T20:21:56Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4a5227b2-2081-502a-9d4f-05a35086d61e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://83[.]188[.]251[.]9:60758/i",
      "pattern": "[url:value = 'http://83.188.251.9:60758/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T20:17:08Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "mirai"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d3f2d0b3-d902-5ab6-aa69-161bf4cd5361",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://115[.]53[.]241[.]76:42289/i",
      "pattern": "[url:value = 'http://115.53.241.76:42289/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T20:17:07Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "Mozi"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d86dfd2c-1c95-5273-abce-99a2cd715eed",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://123[.]14[.]88[.]128:35845/i",
      "pattern": "[url:value = 'http://123.14.88.128:35845/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T20:17:06Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "Mozi"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3c04cda9-b862-57f4-bec8-651774594d47",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:3u8krmfu[.]energedia[.]com",
      "pattern": "[domain-name:value = '3u8krmfu.energedia.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T20:16:08Z",
      "confidence": 80,
      "labels": [
        "ClearFake",
        "mac-0x68dc",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--620e8519-6a06-5a86-aff1-6c40b1e0691d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:energedia[.]com",
      "pattern": "[domain-name:value = 'energedia.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T20:04:20Z",
      "confidence": 80,
      "labels": [
        "ClearFake",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--32844350-23df-543d-8afd-a428e0033f4d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://125[.]42[.]14[.]247:42475/i",
      "pattern": "[url:value = 'http://125.42.14.247:42475/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T20:03:06Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "Mozi"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a835a704-9a89-570c-920d-5e793196d5f4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://60[.]19[.]220[.]91:35940/i",
      "pattern": "[url:value = 'http://60.19.220.91:35940/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T20:02:08Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "None"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e52f8c28-ad24-54fa-b560-42cf68cad4d5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://219[.]156[.]115[.]201:41968/i",
      "pattern": "[url:value = 'http://219.156.115.201:41968/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T20:02:07Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "Mozi"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cf0ec8db-36db-51c4-aa15-7f7d00f6c01d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://60[.]19[.]217[.]54:47297/bin[.]sh",
      "pattern": "[url:value = 'http://60.19.217.54:47297/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T20:02:06Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "None"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6e7cc375-d996-5424-9114-6483c3d85f46",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://175[.]165[.]94[.]178:54439/bin[.]sh",
      "pattern": "[url:value = 'http://175.165.94.178:54439/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T20:02:06Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "None"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--af61fbad-d952-570a-a9e5-820f79d0e1a1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:emakbapaklugimanasehat[.]my[.]id",
      "pattern": "[domain-name:value = 'emakbapaklugimanasehat.my.id']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:49:45Z",
      "confidence": 80,
      "labels": [
        "ADB",
        "AISURU",
        "payload",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c676720f-28b3-5622-a0fd-5273d10c1ebf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:manzzkontolaktolakan[.]my[.]id",
      "pattern": "[domain-name:value = 'manzzkontolaktolakan.my.id']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:49:44Z",
      "confidence": 80,
      "labels": [
        "ADB",
        "AISURU",
        "DDoS",
        "c2",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1c13c41a-5720-5fd8-a820-2263d78adfca",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:129[.]121[.]115[.]43",
      "pattern": "[ipv4-addr:value = '129.121.115.43']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:49:44Z",
      "confidence": 80,
      "labels": [
        "ADB",
        "AISURU",
        "Android",
        "DDoS",
        "c2",
        "honeypot",
        "llx",
        "payload",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--406576a6-3aa8-58d4-bb5f-77bd2e7c9732",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:62e1c8b2f427296a64de68031105058afa1dfa0ada054cd98026746e51ba87c1",
      "pattern": "[file:hashes.'SHA-256' = '62e1c8b2f427296a64de68031105058afa1dfa0ada054cd98026746e51ba87c1']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:49:41Z",
      "confidence": 80,
      "labels": [
        "ADB",
        "AISURU",
        "DDoS",
        "Mirai",
        "elf",
        "malware",
        "threatfox"
      ],
      "x_swiftioc_source": "malwarebazaar_recent,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--48077e05-c3b7-5007-a0ef-9e8daf51aa9f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:95d3b53b17d267bdb6b547a0c5f167d4807ce31349eb06fa698a6b0c111f2af2",
      "pattern": "[file:hashes.'SHA-256' = '95d3b53b17d267bdb6b547a0c5f167d4807ce31349eb06fa698a6b0c111f2af2']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:49:34Z",
      "confidence": 80,
      "labels": [
        "ADB",
        "AISURU",
        "DDoS",
        "Mirai",
        "elf",
        "malware",
        "threatfox"
      ],
      "x_swiftioc_source": "malwarebazaar_recent,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9a9df311-856e-5c3a-bac5-d3f2211fa071",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:9d12a0b1dac5467771edfeccb3c599b73412c0754051f5b0aabc8013e9346d50",
      "pattern": "[file:hashes.'SHA-256' = '9d12a0b1dac5467771edfeccb3c599b73412c0754051f5b0aabc8013e9346d50']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:49:27Z",
      "confidence": 80,
      "labels": [
        "ADB",
        "AISURU",
        "DDoS",
        "Mirai",
        "elf",
        "malware",
        "threatfox"
      ],
      "x_swiftioc_source": "malwarebazaar_recent,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--73d1300a-207c-5568-8649-bb68dbae4039",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:9bd91039bad7799c22da48a6ddfd7e83510c0c4adddbb8c4151f3eb9b2d52d23",
      "pattern": "[file:hashes.'SHA-256' = '9bd91039bad7799c22da48a6ddfd7e83510c0c4adddbb8c4151f3eb9b2d52d23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:49:19Z",
      "confidence": 80,
      "labels": [
        "ADB",
        "AISURU",
        "DDoS",
        "Mirai",
        "elf",
        "malware",
        "threatfox"
      ],
      "x_swiftioc_source": "malwarebazaar_recent,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3d57985e-ece3-5410-80a8-ac6d3ca29fe1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:20740f7da1421e9fea1199c7a44689b53317da9f6c63fd6c96f0cf1c13567f78",
      "pattern": "[file:hashes.'SHA-256' = '20740f7da1421e9fea1199c7a44689b53317da9f6c63fd6c96f0cf1c13567f78']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:49:12Z",
      "confidence": 80,
      "labels": [
        "ADB",
        "AISURU",
        "DDoS",
        "Mirai",
        "elf",
        "malware",
        "threatfox"
      ],
      "x_swiftioc_source": "malwarebazaar_recent,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--95ef96bc-ef29-59e8-b734-90da6a6e674b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:2dc2cda5399b4d50d123592f8d4c890f84ce94b15b7f68d9084a362dbb9ede46",
      "pattern": "[file:hashes.'SHA-256' = '2dc2cda5399b4d50d123592f8d4c890f84ce94b15b7f68d9084a362dbb9ede46']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:49:10Z",
      "confidence": 80,
      "labels": [
        "malware",
        "Mirai"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0eada0a0-cf79-500e-b522-a89b739b0c19",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:b99da9425f9a73c0c887485fb5692987ec123a239ae0f6ceb7d4b788b059f330",
      "pattern": "[file:hashes.'SHA-256' = 'b99da9425f9a73c0c887485fb5692987ec123a239ae0f6ceb7d4b788b059f330']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:49:05Z",
      "confidence": 80,
      "labels": [
        "ADB",
        "AISURU",
        "DDoS",
        "Mirai",
        "elf",
        "malware",
        "threatfox"
      ],
      "x_swiftioc_source": "malwarebazaar_recent,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7000bbbf-b1ca-5469-919a-12e677ed7cad",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:66d809ab37751057afa220c80f31325357c8078780d6e35580e2b6f3a7b59a94",
      "pattern": "[file:hashes.'SHA-256' = '66d809ab37751057afa220c80f31325357c8078780d6e35580e2b6f3a7b59a94']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:48:58Z",
      "confidence": 80,
      "labels": [
        "ADB",
        "AISURU",
        "DDoS",
        "Mirai",
        "elf",
        "malware",
        "threatfox"
      ],
      "x_swiftioc_source": "malwarebazaar_recent,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6701a82c-d7a2-58dc-b119-721b46980dd9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:a51f6d785ad9d1952603177b431918fab29e969e4946b8baf9d9cffb1f8c92d9",
      "pattern": "[file:hashes.'SHA-256' = 'a51f6d785ad9d1952603177b431918fab29e969e4946b8baf9d9cffb1f8c92d9']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:48:50Z",
      "confidence": 80,
      "labels": [
        "ADB",
        "AISURU",
        "DDoS",
        "Mirai",
        "elf",
        "malware",
        "threatfox"
      ],
      "x_swiftioc_source": "malwarebazaar_recent,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b6c34b34-f899-5339-85e3-4bc8c5d4a868",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:adbimmo[.]cs-projets[.]be",
      "pattern": "[domain-name:value = 'adbimmo.cs-projets.be']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:48:35Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cf332861-ed0d-5848-a26c-3a55bfc28176",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:webshop[.]gereformeerdekerkoldebroek[.]nl",
      "pattern": "[domain-name:value = 'webshop.gereformeerdekerkoldebroek.nl']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:47:40Z",
      "confidence": 80,
      "labels": [
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5eb57663-1c8e-5384-936b-6b7ee7093d0f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:srivaricotton[.]com",
      "pattern": "[domain-name:value = 'srivaricotton.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:47:40Z",
      "confidence": 80,
      "labels": [
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--883b3e9d-cbb1-50ff-91ba-86fc6fa8c8d0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:sonarnegociosdigitais[.]com",
      "pattern": "[domain-name:value = 'sonarnegociosdigitais.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:47:40Z",
      "confidence": 80,
      "labels": [
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--578da1d5-b4b9-5297-97ca-dfd01944ff17",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:pro-vet[.]es",
      "pattern": "[domain-name:value = 'pro-vet.es']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:47:39Z",
      "confidence": 80,
      "labels": [
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--54663ab9-93ff-5555-851e-1a2126b44900",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:precisionprinterservices[.]com",
      "pattern": "[domain-name:value = 'precisionprinterservices.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:47:39Z",
      "confidence": 80,
      "labels": [
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ec18abfc-6e34-566d-a7ff-aa90805fda58",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:ortopediaqueralto[.]com",
      "pattern": "[domain-name:value = 'ortopediaqueralto.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:47:39Z",
      "confidence": 80,
      "labels": [
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f6fed007-3c9b-5bf9-96b4-53a8a24fb04c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:orangecountychemdry[.]com",
      "pattern": "[domain-name:value = 'orangecountychemdry.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:47:39Z",
      "confidence": 80,
      "labels": [
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3d0401ac-e48b-5efa-93c8-ac647f61615c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:meteorprint[.]ca",
      "pattern": "[domain-name:value = 'meteorprint.ca']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:47:39Z",
      "confidence": 80,
      "labels": [
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8f850c8f-67ed-59bf-b537-a63103aa587d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:legalwise[.]rw",
      "pattern": "[domain-name:value = 'legalwise.rw']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:47:39Z",
      "confidence": 80,
      "labels": [
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bf30a690-a53b-5a89-baaa-de482c60b230",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:framesi[.]com",
      "pattern": "[domain-name:value = 'framesi.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:47:39Z",
      "confidence": 80,
      "labels": [
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0a3e7644-74cd-5652-b95b-5a6c93b37f87",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:dimensionemosaico[.]it",
      "pattern": "[domain-name:value = 'dimensionemosaico.it']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:47:39Z",
      "confidence": 80,
      "labels": [
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f37d3719-a97e-508d-a9ce-932b61034686",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:bolton-flooring[.]co[.]uk",
      "pattern": "[domain-name:value = 'bolton-flooring.co.uk']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:47:39Z",
      "confidence": 80,
      "labels": [
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bfd92f38-f72e-5b7f-88a7-8f7288ad4597",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:bixcash[.]net",
      "pattern": "[domain-name:value = 'bixcash.net']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:47:39Z",
      "confidence": 80,
      "labels": [
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1a290add-5e7c-577b-a889-36229f23925d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://123[.]14[.]88[.]128:35845/bin[.]sh",
      "pattern": "[url:value = 'http://123.14.88.128:35845/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:47:06Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "Mozi"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d967b16c-ba73-570f-9ac3-a14b08c5f137",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://115[.]50[.]25[.]39:35911/i",
      "pattern": "[url:value = 'http://115.50.25.39:35911/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:47:05Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "Mozi"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bf1a4b53-5ea2-50da-8510-22fe98204f0e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:zigpsychocybercowboys[.]com",
      "pattern": "[domain-name:value = 'zigpsychocybercowboys.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:49Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8f512499-9c0f-563b-9ec0-06ae5e1e51fe",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:youblokle[.]com",
      "pattern": "[domain-name:value = 'youblokle.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:49Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8aab33db-38be-5d54-bb85-f72c1d97068b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:wp[.]klipr[.]io",
      "pattern": "[domain-name:value = 'wp.klipr.io']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:49Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f34534a9-925d-56b2-8a41-7f8123f0608e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:wishyourgifts[.]in",
      "pattern": "[domain-name:value = 'wishyourgifts.in']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:49Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7c552a5c-fa29-5efc-b8fc-e6767c05f7d6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:wealthwise[.]co[.]uk",
      "pattern": "[domain-name:value = 'wealthwise.co.uk']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:49Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--888b46e6-eb1f-5063-abe9-74ac80398ff6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:usedcarfriendship[.]online",
      "pattern": "[domain-name:value = 'usedcarfriendship.online']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:49Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c8a8d301-c983-554e-a27d-c389ea721e3b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:usa-salesforce[.]com",
      "pattern": "[domain-name:value = 'usa-salesforce.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:49Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5a1d3fab-07bd-5715-add8-7a40c671ee16",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:turkishrebars[.]com",
      "pattern": "[domain-name:value = 'turkishrebars.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:49Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--25104fb1-0815-5511-8d1d-8ecad068b7ee",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:tttbr[.]com",
      "pattern": "[domain-name:value = 'tttbr.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:48Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1dc3f579-9d72-5262-b0a4-0645b92c968e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:triwell[.]cz",
      "pattern": "[domain-name:value = 'triwell.cz']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:48Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aa030be6-3dad-5a82-a40d-8261c1891f6c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:trinityoftithing[.]com",
      "pattern": "[domain-name:value = 'trinityoftithing.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:48Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9d7ad5ef-f50f-53d5-b7cd-c99b63d370dd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:toyota-club[.]by",
      "pattern": "[domain-name:value = 'toyota-club.by']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:48Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--54bab55d-c8be-58ec-be75-607550c375e5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:tibor[.]es",
      "pattern": "[domain-name:value = 'tibor.es']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:48Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--65d9654b-baa8-5b6d-b9aa-821188e139b0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:theferrancegroup[.]ca",
      "pattern": "[domain-name:value = 'theferrancegroup.ca']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:48Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0bc585e4-ad4d-5909-9750-bb44e2e99d4d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:talentclub[.]uk",
      "pattern": "[domain-name:value = 'talentclub.uk']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:48Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--253c7146-45d2-5f82-906b-10c346d37ce2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:tagesnachrichten24[.]de",
      "pattern": "[domain-name:value = 'tagesnachrichten24.de']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:48Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4dd60946-fe92-5a3a-8077-e136ae54018e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:suo[.]company",
      "pattern": "[domain-name:value = 'suo.company']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:48Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--18a7af90-e4d6-5ae3-9dae-43a4de0f1f19",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:sulthansalmanjaya[.]com",
      "pattern": "[domain-name:value = 'sulthansalmanjaya.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:48Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--02365109-8540-55c3-8ecd-9fe8ae41fe2e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:ssttower[.]com",
      "pattern": "[domain-name:value = 'ssttower.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:48Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--570af1f1-c3ea-5eea-8747-86d915ea129a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:shenzhen2050[.]com",
      "pattern": "[domain-name:value = 'shenzhen2050.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:48Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9f3c0a12-248e-5549-ab88-bdb51a2ef942",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:sfasagg[.]com",
      "pattern": "[domain-name:value = 'sfasagg.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:48Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6a502b33-fac8-5c0a-9207-1508ed0e29ca",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:rotundavillas[.]com",
      "pattern": "[domain-name:value = 'rotundavillas.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:48Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--49a892ea-69c5-57ff-9805-d5dbd9f30b44",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:rosateeshop[.]com",
      "pattern": "[domain-name:value = 'rosateeshop.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:48Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--37737e9d-5401-5bd1-8bbb-50dacf30d3e9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:rodriguesembalagem[.]com[.]br",
      "pattern": "[domain-name:value = 'rodriguesembalagem.com.br']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:48Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--987650f9-e7a0-584f-825a-06e3a0f300b3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:residencialdama[.]com",
      "pattern": "[domain-name:value = 'residencialdama.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:48Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7d925020-07cc-5a6a-a9db-14fb50a2802c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:reportehla[.]xyz",
      "pattern": "[domain-name:value = 'reportehla.xyz']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:48Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bc1a5d4e-c827-5fbb-afdd-920a53859e48",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:proyectosanborondon[.]es",
      "pattern": "[domain-name:value = 'proyectosanborondon.es']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:48Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--02a47375-5769-53b1-8c42-0ba6d8522477",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:prevoz-putnika[.]net",
      "pattern": "[domain-name:value = 'prevoz-putnika.net']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:48Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--79b80992-c9d7-5545-8aa5-2a1ed78e89f9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:premiosarquitectura[.]org",
      "pattern": "[domain-name:value = 'premiosarquitectura.org']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:48Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e40a32af-7266-5045-b626-7a057e2cbde3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:pratikkagittahta[.]com",
      "pattern": "[domain-name:value = 'pratikkagittahta.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:48Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bd75f122-e930-5a5f-90fc-13b0639733ff",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:platinum[.]csfsistemi[.]it",
      "pattern": "[domain-name:value = 'platinum.csfsistemi.it']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:48Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3a64f813-8189-50b7-a675-b31457e02ea6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:permanentmakeup-andric[.]de",
      "pattern": "[domain-name:value = 'permanentmakeup-andric.de']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:48Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--74ae313f-5712-5eba-a722-ca1002eca9d3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:onekanimo[.]com",
      "pattern": "[domain-name:value = 'onekanimo.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:48Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aba53756-4d5a-514b-87b9-9105f3e84182",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:omnifluencer[.]com",
      "pattern": "[domain-name:value = 'omnifluencer.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:48Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dd053942-7f8e-50c5-8e70-e9011222dfe1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:omannaturals[.]store",
      "pattern": "[domain-name:value = 'omannaturals.store']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:48Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3551820b-538b-5c99-8af5-0d72862d3d98",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:oliscuquello[.]com",
      "pattern": "[domain-name:value = 'oliscuquello.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:48Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9b0fd69d-9ad2-5fdc-80d0-875476944d88",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:og-allgemeinerhof[.]ch",
      "pattern": "[domain-name:value = 'og-allgemeinerhof.ch']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:48Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d082c51c-0963-543b-a71a-290b3fce27d2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:nypdprosecutorcorruption[.]com",
      "pattern": "[domain-name:value = 'nypdprosecutorcorruption.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:48Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7b3703e6-b094-5cb7-9cb0-3081062da3f4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:mygumzy[.]com",
      "pattern": "[domain-name:value = 'mygumzy.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:47Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5bdb313f-8e4a-5119-9a42-e43b1acd55d6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:mslightinggroup[.]com",
      "pattern": "[domain-name:value = 'mslightinggroup.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:47Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c44930b7-fd2d-5aa3-be1c-cad2419938ec",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:mpresso[.]co[.]th",
      "pattern": "[domain-name:value = 'mpresso.co.th']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:47Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--08d67932-7921-5f78-b765-f69e36c0ea43",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:misguayabas[.]es",
      "pattern": "[domain-name:value = 'misguayabas.es']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:47Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--586dbea8-eac7-5136-9177-7ed679f06c6c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:metasail[.]info",
      "pattern": "[domain-name:value = 'metasail.info']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:47Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--33c6e83e-4bee-5446-94e1-728588a89948",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:marbellamentalhealth[.]com",
      "pattern": "[domain-name:value = 'marbellamentalhealth.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:47Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7f2d7391-9a4d-56c1-82fd-d76143148a0b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:limo-deal[.]de",
      "pattern": "[domain-name:value = 'limo-deal.de']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:47Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9799af6e-50ca-5dde-9859-3178f110c52a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:lesmilanregistry[.]com",
      "pattern": "[domain-name:value = 'lesmilanregistry.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:47Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--563f491b-693b-5786-a384-d2c50100f0ee",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:ladnejany[.]eu",
      "pattern": "[domain-name:value = 'ladnejany.eu']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:47Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b9a8f599-06f2-5ec8-b162-0933d244e18b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:kusi75[.]ch",
      "pattern": "[domain-name:value = 'kusi75.ch']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:47Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3cb6324c-0e7c-50f9-854e-1822c65d3b54",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:kurbad-st-leonhard[.]de",
      "pattern": "[domain-name:value = 'kurbad-st-leonhard.de']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:47Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f7e26763-644b-5765-9c39-ac8a32782a36",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:knokheadstudio[.]com",
      "pattern": "[domain-name:value = 'knokheadstudio.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:47Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--008dcc5a-2414-5750-85c1-d7c88a6abe65",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:kd[.]ac[.]th",
      "pattern": "[domain-name:value = 'kd.ac.th']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:47Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9a18c5be-c81c-5155-9855-d7836fbde4de",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:jheebdjw[.]com",
      "pattern": "[domain-name:value = 'jheebdjw.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:47Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f889365f-c057-59a1-b529-35d8f2137926",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:italian-university[.]com",
      "pattern": "[domain-name:value = 'italian-university.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:47Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c1f7f16c-9b58-53af-9d41-948db6ff3c58",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:isuzucorluservis[.]com",
      "pattern": "[domain-name:value = 'isuzucorluservis.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:47Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--50a64334-2f61-5b6e-a911-f7826e8ac540",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:idd-industrieservice[.]de",
      "pattern": "[domain-name:value = 'idd-industrieservice.de']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:47Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1e7d40c7-b7f0-5519-9c91-92a37f1e2689",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:hubbmediaentertainment[.]com",
      "pattern": "[domain-name:value = 'hubbmediaentertainment.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:47Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a8d549db-76df-52c6-b938-924b5444a57e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:hochzeitsband-dj[.]de",
      "pattern": "[domain-name:value = 'hochzeitsband-dj.de']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:47Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a04e633f-e1dd-57ce-ac56-698eb30281ba",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:hafizbookstore[.]com",
      "pattern": "[domain-name:value = 'hafizbookstore.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:47Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--500200d0-6ac7-53b0-9833-f0d8ac107608",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:grarg[.]com",
      "pattern": "[domain-name:value = 'grarg.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:47Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8dc138e5-8a9a-5f84-96d3-54b8a4bff423",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:golfhotel-schweiz[.]com",
      "pattern": "[domain-name:value = 'golfhotel-schweiz.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:47Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b6da77ac-687d-5209-84aa-a581b7c27db2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:gispvn[.]vn",
      "pattern": "[domain-name:value = 'gispvn.vn']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:47Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cce041e6-2f6c-50b5-81c1-ecbc3d5b0ac0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:folasasegbon[.]org",
      "pattern": "[domain-name:value = 'folasasegbon.org']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:47Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4e0c2074-2b17-536e-8991-b96582f81597",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:fhaedl[.]com",
      "pattern": "[domain-name:value = 'fhaedl.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:47Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--64a35b08-5b27-5790-a309-d03cb9ffb7ae",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:extremenitrowrestling[.]com",
      "pattern": "[domain-name:value = 'extremenitrowrestling.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:47Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d232d109-1b5f-56db-8698-66fc8af99e9d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:ecommunicate[.]biz",
      "pattern": "[domain-name:value = 'ecommunicate.biz']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:47Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5f894e3b-69ad-560f-a9d7-115f6903a848",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:doortrans[.]hu",
      "pattern": "[domain-name:value = 'doortrans.hu']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:47Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--24416e99-a449-5ff1-b561-56eed7c4a2bf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:chiamanino[.]it",
      "pattern": "[domain-name:value = 'chiamanino.it']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:47Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--568bb5b8-8120-500e-9656-2c518879c052",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:brownsenterprisesllc[.]com",
      "pattern": "[domain-name:value = 'brownsenterprisesllc.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:46Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a7460688-b45b-527f-acca-123c18ff2181",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:bossleysportsclub[.]com[.]au",
      "pattern": "[domain-name:value = 'bossleysportsclub.com.au']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:46Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--201e56f4-f671-536c-8cb2-cf20498d9dcb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:bluegeneration[.]es",
      "pattern": "[domain-name:value = 'bluegeneration.es']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:46Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c918834d-c968-5291-8a07-a4baa39e0cb3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:bezdickova[.]cz",
      "pattern": "[domain-name:value = 'bezdickova.cz']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:46Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3119e430-da84-5f68-91bd-9044d1e094bd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:arrowsone[.]com",
      "pattern": "[domain-name:value = 'arrowsone.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:46Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dc1eb786-005e-54fc-8f44-5045b2764463",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:akupunktur-weiterstadt[.]com",
      "pattern": "[domain-name:value = 'akupunktur-weiterstadt.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:46Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--abf2a94d-6df3-5e87-b276-398a2ae22670",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:abrahamalvarezgonzalez[.]com",
      "pattern": "[domain-name:value = 'abrahamalvarezgonzalez.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:46:46Z",
      "confidence": 80,
      "labels": [
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c14f2d6b-d037-5ec3-b1e3-85540fd1d09a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:92[.]4[.]93[.]169",
      "pattern": "[ipv4-addr:value = '92.4.93.169']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:45:29Z",
      "confidence": 80,
      "labels": [
        "AdaptixC2",
        "drb-ra",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0a18ad73-3192-506e-af69-8fe6c2d491ea",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:64[.]188[.]91[.]78",
      "pattern": "[ipv4-addr:value = '64.188.91.78']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:45:14Z",
      "confidence": 80,
      "labels": [
        "Mythic",
        "drb-ra",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5bf4462a-f3d0-5c3d-b342-752da7135b23",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:52[.]128[.]230[.]20",
      "pattern": "[ipv4-addr:value = '52.128.230.20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:45:12Z",
      "confidence": 80,
      "labels": [
        "PureHVNC",
        "PureRAT",
        "RAT",
        "drb-ra",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e5aa9ca6-7169-54e0-9e9c-66e1138491ed",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:50[.]114[.]179[.]6",
      "pattern": "[ipv4-addr:value = '50.114.179.6']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:45:10Z",
      "confidence": 80,
      "labels": [
        "PureHVNC",
        "PureRAT",
        "RAT",
        "drb-ra",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--029bccaf-a88e-5b1f-92b1-b887b2b190ae",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:45[.]225[.]135[.]133",
      "pattern": "[ipv4-addr:value = '45.225.135.133']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:45:00Z",
      "confidence": 80,
      "labels": [
        "PureHVNC",
        "PureRAT",
        "RAT",
        "drb-ra",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6ba04efb-b4a6-534f-b4ff-79ddbdf9519e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:31[.]56[.]209[.]196",
      "pattern": "[ipv4-addr:value = '31.56.209.196']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:44:42Z",
      "confidence": 80,
      "labels": [
        "PureHVNC",
        "PureRAT",
        "RAT",
        "drb-ra",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c1c3f87d-ae1a-5274-8190-128cf85855d4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:207[.]189[.]17[.]124",
      "pattern": "[ipv4-addr:value = '207.189.17.124']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:44:13Z",
      "confidence": 80,
      "labels": [
        "PureHVNC",
        "PureRAT",
        "RAT",
        "drb-ra",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b64e29ac-eb0d-54d0-9d1e-9e1056d47b8f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:193[.]142[.]146[.]172",
      "pattern": "[ipv4-addr:value = '193.142.146.172']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:44:03Z",
      "confidence": 80,
      "labels": [
        "PureHVNC",
        "PureRAT",
        "RAT",
        "drb-ra",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e2de1aa3-59ff-58e5-942b-dd23734a8504",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:150[.]241[.]69[.]22",
      "pattern": "[ipv4-addr:value = '150.241.69.22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:43:30Z",
      "confidence": 80,
      "labels": [
        "Mythic",
        "drb-ra",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b2f36758-83a2-51ea-82d7-8d5ec75c5141",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:131[.]226[.]2[.]185",
      "pattern": "[ipv4-addr:value = '131.226.2.185']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:43:21Z",
      "confidence": 80,
      "labels": [
        "AdaptixC2",
        "drb-ra",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--68060e5b-5365-5760-bf2b-3cda6abd91e2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:new[.]decorhome[.]kz",
      "pattern": "[domain-name:value = 'new.decorhome.kz']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:42:10Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c94f3805-c45d-5329-a183-acb819b520ac",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:88ba6c9b3ec7ff1f9b05479ada24ba3702f100a1a521d11474f711ab71a785fd",
      "pattern": "[file:hashes.'SHA-256' = '88ba6c9b3ec7ff1f9b05479ada24ba3702f100a1a521d11474f711ab71a785fd']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:41:46Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "macOS",
        "quill",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9c2ed046-628b-5978-9bf5-7c34b7b57462",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:551cd532444fd1d8f86b36c06951d530801fb1affe0154b539cf8effc23d07a8",
      "pattern": "[file:hashes.'SHA-256' = '551cd532444fd1d8f86b36c06951d530801fb1affe0154b539cf8effc23d07a8']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:38:55Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "forge",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4acf6659-0756-52f6-a85a-bffa61610f46",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:0b6b6527204ed3cb0f5663a37d5c29bbef8e0e012336e2f426caacc4d70cae18",
      "pattern": "[file:hashes.'SHA-256' = '0b6b6527204ed3cb0f5663a37d5c29bbef8e0e012336e2f426caacc4d70cae18']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:35:52Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "boost",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--85817fbf-79ef-55d4-b77a-f357b5cae658",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:29d9f9085b69b3d26f92fb76e1bb037a195250400ba0d38df2179185760ee783",
      "pattern": "[file:hashes.'SHA-256' = '29d9f9085b69b3d26f92fb76e1bb037a195250400ba0d38df2179185760ee783']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:35:02Z",
      "confidence": 80,
      "labels": [
        "malware",
        "Mirai"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2eb51118-0d92-5ffd-bd68-6ef437b85211",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:f14a465c87a898cb0817daef1217492c3539a7f385bc5c101182c0656fc9d8c3",
      "pattern": "[file:hashes.'SHA-256' = 'f14a465c87a898cb0817daef1217492c3539a7f385bc5c101182c0656fc9d8c3']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:32:45Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "macOS",
        "stratos",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8b96a737-3252-5cad-bfe6-3dcddc6e3f72",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://61[.]52[.]159[.]144:45720/bin[.]sh",
      "pattern": "[url:value = 'http://61.52.159.144:45720/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:32:05Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "Mozi"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ae7950d3-47fc-555c-b663-143d15a669ae",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://42[.]239[.]153[.]8:46089/i",
      "pattern": "[url:value = 'http://42.239.153.8:46089/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:32:05Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "Mozi"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--17f65f13-ab22-53f1-809b-c966c4ebd083",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:www[.]abrahamalvarezgonzalez[.]com",
      "pattern": "[domain-name:value = 'www.abrahamalvarezgonzalez.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:31:47Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f1a0a472-07d7-59de-a709-b5a412ec1d36",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:c4615d12c5729435d2aa2799cba426cccfc0fb16de18cfafc3670df55d96ef98",
      "pattern": "[file:hashes.'SHA-256' = 'c4615d12c5729435d2aa2799cba426cccfc0fb16de18cfafc3670df55d96ef98']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:29:52Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "grove",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e07859a1-f929-516e-9210-e822b970d366",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:0b3cd85d11d82969427d4d45dd23e3d6a0c4c8cefd68df51248b019f420e27b2",
      "pattern": "[file:hashes.'SHA-256' = '0b3cd85d11d82969427d4d45dd23e3d6a0c4c8cefd68df51248b019f420e27b2']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:26:56Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "frame97",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c6dbcc87-bb26-5b4e-86a1-92abd5843bb9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:237bf2f7b0e8c41dc9990d50b97b7a2e890cff0862f3258b435575e2a4998807",
      "pattern": "[file:hashes.'SHA-256' = '237bf2f7b0e8c41dc9990d50b97b7a2e890cff0862f3258b435575e2a4998807']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:24:07Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "frame",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8db3a83c-198c-50fe-bc3b-c639c26d4d08",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:www[.]bolton-flooring[.]co[.]uk",
      "pattern": "[domain-name:value = 'www.bolton-flooring.co.uk']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:21:46Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fdf07cf1-3a8e-5c00-8bbe-84bc3d13b9fb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:barneyschurch[.]au",
      "pattern": "[domain-name:value = 'barneyschurch.au']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:21:46Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f6b2acc5-e3e7-5fe6-a5f9-be1bf69b79ba",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:www[.]joliveira[.]com[.]br",
      "pattern": "[domain-name:value = 'www.joliveira.com.br']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:21:45Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fd8cd1f6-98e3-5a15-bbcb-66b8b1ecb2ce",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:www[.]isuzucorluservis[.]com",
      "pattern": "[domain-name:value = 'www.isuzucorluservis.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:21:45Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--50b0520d-c294-5fe4-bb13-7ad88a98d2d1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:www[.]hubbmediaentertainment[.]com",
      "pattern": "[domain-name:value = 'www.hubbmediaentertainment.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:21:45Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b1a7eef8-b00e-55b9-86ea-a9e992a34ea1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:www[.]bossleysportsclub[.]com[.]au",
      "pattern": "[domain-name:value = 'www.bossleysportsclub.com.au']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:21:45Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8ccc47ec-4d69-5761-9113-7544a4c809bd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:jemohgh[.]com",
      "pattern": "[domain-name:value = 'jemohgh.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:21:45Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--47f83c9a-dbef-5bf1-adbd-013519298387",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:9995d51130d86e9c745e2e7cab4c47d89251da9765d517c69d47855de185147d",
      "pattern": "[file:hashes.'SHA-256' = '9995d51130d86e9c745e2e7cab4c47d89251da9765d517c69d47855de185147d']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:21:11Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "macOS",
        "nova",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4770a676-69d4-5023-84c6-3844952cb6dd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:8816810a3f8520a0520afa391b25ac58b5d8bf918ecd320e1f8e4a28d61848e6",
      "pattern": "[file:hashes.'SHA-256' = '8816810a3f8520a0520afa391b25ac58b5d8bf918ecd320e1f8e4a28d61848e6']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:21:01Z",
      "confidence": 80,
      "labels": [
        "malware",
        "Mirai"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a075a015-6748-588e-bf98-2eb4287802ae",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:n2late[.]fr",
      "pattern": "[domain-name:value = 'n2late.fr']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:19:55Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--251ad7e6-e0c8-5a74-b1cf-0bd95a245841",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:mytutions[.]com",
      "pattern": "[domain-name:value = 'mytutions.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:19:24Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1b158573-8265-5af8-91e8-108520b4be8b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://113[.]238[.]236[.]218:56630/i",
      "pattern": "[url:value = 'http://113.238.236.218:56630/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:18:06Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "None"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1591740b-8482-5b1e-a6cc-8fe4b6ab566d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:f044230ed52e82d62ee6c78654f8cdc875fed94264023fcb48b3b3a217460b74",
      "pattern": "[file:hashes.'SHA-256' = 'f044230ed52e82d62ee6c78654f8cdc875fed94264023fcb48b3b3a217460b74']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:18:05Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "haven",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--33478f0b-278f-59b0-94ef-6eedb96f2ef1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:2e2612d964aaf92e7b57bccab58349518bcdfd3a3f07e1c70a71f4f6f6fef16c",
      "pattern": "[file:hashes.'SHA-256' = '2e2612d964aaf92e7b57bccab58349518bcdfd3a3f07e1c70a71f4f6f6fef16c']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:17:33Z",
      "confidence": 80,
      "labels": [
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e087b7d7-2831-5553-b62e-49433caf4a1e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://123[.]190[.]160[.]239:52844/bin[.]sh",
      "pattern": "[url:value = 'http://123.190.160.239:52844/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:17:06Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "None"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0d3b42cf-3cb0-5eab-875c-6bf5a1638e75",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://61[.]52[.]185[.]113:43444/i",
      "pattern": "[url:value = 'http://61.52.185.113:43444/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:17:05Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "Mozi"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6b48907d-a44b-5dd0-8fac-47d37f368133",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://42[.]239[.]153[.]8:46089/bin[.]sh",
      "pattern": "[url:value = 'http://42.239.153.8:46089/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:17:05Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "Mozi"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--716a19ef-9bad-5141-ac69-3cb1ed793f4f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://42[.]224[.]0[.]89:37584/i",
      "pattern": "[url:value = 'http://42.224.0.89:37584/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:17:05Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "Mozi"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f4441e32-a9a6-584d-a180-316f0fff0209",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://27[.]204[.]196[.]55:39789/i",
      "pattern": "[url:value = 'http://27.204.196.55:39789/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:17:05Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "Mozi"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--70fe1d41-51e7-545d-a9e3-7f04ac33e2de",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://116[.]139[.]137[.]187:55052/i",
      "pattern": "[url:value = 'http://116.139.137.187:55052/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:17:05Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "None"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--865f6fa3-ac99-573d-a5f1-4d1516476c26",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:fe5ab151cc1bc84e985263a4af1bde172c17ea6c3733e48d8da6631ca5ff82f3",
      "pattern": "[file:hashes.'SHA-256' = 'fe5ab151cc1bc84e985263a4af1bde172c17ea6c3733e48d8da6631ca5ff82f3']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:15:40Z",
      "confidence": 80,
      "labels": [
        "malware",
        "WannaCry"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c6dd2d16-e998-5f33-a9b8-c3fabfcda91a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:5cc1be09f0f23fc66b108e0de730189f7401db6b1ef1c525b8cbf6c7b2999365",
      "pattern": "[file:hashes.'SHA-256' = '5cc1be09f0f23fc66b108e0de730189f7401db6b1ef1c525b8cbf6c7b2999365']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:15:15Z",
      "confidence": 80,
      "labels": [
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5b26b657-0c06-5c3f-afaa-3c597b33b27c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:ab19199ad4f50548504330f49d5f9342a0bc65953a495dbaae5f9fa1ca08fef5",
      "pattern": "[file:hashes.'SHA-256' = 'ab19199ad4f50548504330f49d5f9342a0bc65953a495dbaae5f9fa1ca08fef5']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:15:12Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "chant",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d53dbc0a-f366-5841-b856-f4abf578c4a9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:d33f3c73613acba1b5f41475910257190f60097481842f8716e4caca22d4221d",
      "pattern": "[file:hashes.'SHA-256' = 'd33f3c73613acba1b5f41475910257190f60097481842f8716e4caca22d4221d']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:12:17Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "macOS",
        "threatfox",
        "willow"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5af33720-bf7c-5977-ac41-32ba62a0c9b4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:in-gesprek[.]com",
      "pattern": "[domain-name:value = 'in-gesprek.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:11:43Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0e4e81f7-7b97-5259-b227-5679d8f78196",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:iepsantarosapurisimaves[.]edu[.]pe",
      "pattern": "[domain-name:value = 'iepsantarosapurisimaves.edu.pe']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:11:43Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9b95c9f5-ca4d-5bdf-8952-eec3d176f9d2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:buycocainethessaloniki[.]com",
      "pattern": "[domain-name:value = 'buycocainethessaloniki.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:11:43Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--57dc63c3-5438-51d4-b54f-3a3657a56232",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:besttechnoschool[.]com",
      "pattern": "[domain-name:value = 'besttechnoschool.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:11:43Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2684d3b4-acb5-5617-95c9-df4e21b4a131",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:anfgroup[.]co[.]za",
      "pattern": "[domain-name:value = 'anfgroup.co.za']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:11:43Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cf6dfd4b-6d1f-5848-8c17-52a96b85456f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:hondapareindah[.]com",
      "pattern": "[domain-name:value = 'hondapareindah.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:11:42Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6c336882-5a1c-5665-9cc8-f0cd4d624ff2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:farhangsch[.]ir",
      "pattern": "[domain-name:value = 'farhangsch.ir']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:11:42Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6e4418c1-ce0d-53fe-9282-110efe347eef",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:bgrenergysolutions[.]com",
      "pattern": "[domain-name:value = 'bgrenergysolutions.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:11:42Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--203c694f-4da2-560a-a106-af02fac4cd7d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:7seasstore[.]com",
      "pattern": "[domain-name:value = '7seasstore.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:11:42Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c41ebdad-2dfe-59f8-b680-322cbc6ab08d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:drleonardofiuza[.]com[.]br",
      "pattern": "[domain-name:value = 'drleonardofiuza.com.br']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:11:41Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--11a48d77-e7a6-56ac-8ca2-d2ebf3538dfa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:diepsam[.]vn",
      "pattern": "[domain-name:value = 'diepsam.vn']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:11:41Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ea93ddcd-9e90-563a-9d72-e0a00a466f61",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:byhandhairstudio[.]com",
      "pattern": "[domain-name:value = 'byhandhairstudio.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:11:41Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8b2b932f-960a-58ba-88b9-be6f8a163562",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:athenaengenharia[.]eng[.]br",
      "pattern": "[domain-name:value = 'athenaengenharia.eng.br']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:11:41Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1a8ebc1a-9249-5c98-a094-080bdb4eaa7a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:adzyw[.]cn",
      "pattern": "[domain-name:value = 'adzyw.cn']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:11:41Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a3b0aaac-b358-5511-8424-4f45657b20c4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:ghyasigroup[.]com",
      "pattern": "[domain-name:value = 'ghyasigroup.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:11:40Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e7322691-aee0-543b-a69f-adac60713438",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:ejscontabil[.]com[.]br",
      "pattern": "[domain-name:value = 'ejscontabil.com.br']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:11:40Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d0dbc73b-0578-5cec-8b54-c45f186928e2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:ehsan-perfume[.]com",
      "pattern": "[domain-name:value = 'ehsan-perfume.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:11:40Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2df0d61a-3bd3-5d31-b68d-0d89b0f81173",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:ec69d3e0d4d9e797c2942cd2aa177b269db94edf5bd104d7a8eb2ecc73029b4c",
      "pattern": "[file:hashes.'SHA-256' = 'ec69d3e0d4d9e797c2942cd2aa177b269db94edf5bd104d7a8eb2ecc73029b4c']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:06:57Z",
      "confidence": 80,
      "labels": [
        "Mirai",
        "elf",
        "malware",
        "threatfox"
      ],
      "x_swiftioc_source": "malwarebazaar_recent,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--50a3bd62-d79c-5ab4-8a1c-994ceb32de2d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:229d92d5ee1ad82be7388975dacf2087363ff4371515e711b29fdeb35dc06c1d",
      "pattern": "[file:hashes.'SHA-256' = '229d92d5ee1ad82be7388975dacf2087363ff4371515e711b29fdeb35dc06c1d']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:06:55Z",
      "confidence": 80,
      "labels": [
        "malware",
        "Mirai"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--17eb9b55-b030-55a8-9d9b-8fd50c25aecc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://115[.]55[.]51[.]189:47141/i",
      "pattern": "[url:value = 'http://115.55.51.189:47141/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:02:08Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "None"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--66c0bccc-7a2c-5b6d-960f-eaaf05938bc4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://59[.]97[.]250[.]4:48029/bin[.]sh",
      "pattern": "[url:value = 'http://59.97.250.4:48029/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:02:07Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "Mozi"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--576f3858-2f88-5a5f-a3df-43ee01a89965",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://42[.]232[.]229[.]217:46603/bin[.]sh",
      "pattern": "[url:value = 'http://42.232.229.217:46603/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:02:07Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "None"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dc41b777-ea3e-5e0c-a6c1-52f15e83db04",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://27[.]204[.]196[.]55:39789/bin[.]sh",
      "pattern": "[url:value = 'http://27.204.196.55:39789/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:02:07Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "Mozi"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b4687e5f-e528-55a7-bf33-0d92f5e46ecf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://182[.]126[.]84[.]152:44186/i",
      "pattern": "[url:value = 'http://182.126.84.152:44186/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:02:06Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "Mozi"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b967cdfb-994a-5f49-930e-c35f99dc5ff9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:eudfitaly[.]org",
      "pattern": "[domain-name:value = 'eudfitaly.org']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:01:39Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--264bee8d-a5ab-5581-85f5-5ad65185cd9d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:ecointernationalltd[.]com",
      "pattern": "[domain-name:value = 'ecointernationalltd.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:01:39Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--73e552ee-233c-546e-8c52-a5eecec98352",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:kargowa[.]ayz[.]pl",
      "pattern": "[domain-name:value = 'kargowa.ayz.pl']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:01:38Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0b9b3d67-727c-5ff4-95a5-a6efe2d1458f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:immexadvisory[.]com",
      "pattern": "[domain-name:value = 'immexadvisory.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:01:38Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--93c0c3ec-8c49-5cd0-b427-99951f26bc66",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:chemdrygreen[.]com",
      "pattern": "[domain-name:value = 'chemdrygreen.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:01:38Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--83d20392-a12b-5ca4-9aa6-4b1648729710",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:canaillechicproduction[.]com",
      "pattern": "[domain-name:value = 'canaillechicproduction.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:01:38Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--144e4f85-092f-5081-98c9-144005674b3f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:immexsolutions[.]com",
      "pattern": "[domain-name:value = 'immexsolutions.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:01:37Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--08be8aa3-36b8-50e7-afae-d06c2f2da932",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:dicktigerfoundation[.]org",
      "pattern": "[domain-name:value = 'dicktigerfoundation.org']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:01:37Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a276c4b2-f7fa-5552-99f9-f839525e9298",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:cleandrygreen[.]com",
      "pattern": "[domain-name:value = 'cleandrygreen.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:01:37Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c1add116-eb5a-56ce-9075-fbd955912d14",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:chemdryoflosangeles[.]com",
      "pattern": "[domain-name:value = 'chemdryoflosangeles.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:01:37Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2ca92c16-5479-5f51-b064-a8d86fe0dd33",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:chem-dryoforange[.]com",
      "pattern": "[domain-name:value = 'chem-dryoforange.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:01:37Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1624d447-8b41-5539-9ea2-a6288fac21f5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:immexcompany[.]com",
      "pattern": "[domain-name:value = 'immexcompany.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:01:36Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c1c5ac43-0169-5226-8227-79d5b56eb307",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:hirbodmotors[.]com",
      "pattern": "[domain-name:value = 'hirbodmotors.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:01:36Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b53f2731-83aa-5166-9d9f-4abfb96b289f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:gpwlegal[.]com",
      "pattern": "[domain-name:value = 'gpwlegal.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:01:36Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b37da6c0-9784-519a-a490-cfc1a7c7d1c9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:city-dentist[.]de",
      "pattern": "[domain-name:value = 'city-dentist.de']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:01:36Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--60a36175-cd27-53d6-b3ff-31499b12f25d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:blackhillsutv[.]rentals",
      "pattern": "[domain-name:value = 'blackhillsutv.rentals']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:01:35Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e15c6e65-659b-5ee4-a582-411dbbb92a4e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:baraksamoon[.]com",
      "pattern": "[domain-name:value = 'baraksamoon.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T19:01:35Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8fd68a6b-ed45-55ea-b124-331fd9fc0c7a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:cc234b6d637cc98c9aa679beec766346c14815fce21e4278f7cb066b3763956d",
      "pattern": "[file:hashes.'SHA-256' = 'cc234b6d637cc98c9aa679beec766346c14815fce21e4278f7cb066b3763956d']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:59:40Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "forge",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6299af7b-4b6b-5fe9-a205-223bd74dc6c2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:fd145fdc03907adec5eab5cb060da29c7bfc96c92d31fecdde087bc6f4c2b044",
      "pattern": "[file:hashes.'SHA-256' = 'fd145fdc03907adec5eab5cb060da29c7bfc96c92d31fecdde087bc6f4c2b044']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:56:24Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "boost",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d5e1420c-9b23-547c-80c7-0dd28416cba0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:8e7d45f486c3438e2e6d855faeded6d6dad9561fdd36b08477a12a768a375fc4",
      "pattern": "[file:hashes.'SHA-256' = '8e7d45f486c3438e2e6d855faeded6d6dad9561fdd36b08477a12a768a375fc4']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:55:11Z",
      "confidence": 80,
      "labels": [
        "Dropper",
        "Loader",
        "SmartLoader",
        "threatfox",
        "trojan",
        "zip"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2a579468-17a0-5ddb-954e-d5b7d70eb370",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:ecadbe1c7666d720590cadedfb26b570fdbac1a7e2b4ce239a616581ef9f93f0",
      "pattern": "[file:hashes.'SHA-256' = 'ecadbe1c7666d720590cadedfb26b570fdbac1a7e2b4ce239a616581ef9f93f0']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:55:09Z",
      "confidence": 80,
      "labels": [
        "malware",
        "Amadey"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0df64410-016c-5241-9f9d-a700f6eebd9a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:fffce85ded6c9b6a529179d5c9cb21f40b8c79b913308c412f5db7222ad5bd47",
      "pattern": "[file:hashes.'SHA-256' = 'fffce85ded6c9b6a529179d5c9cb21f40b8c79b913308c412f5db7222ad5bd47']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:53:25Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "macOS",
        "stratos",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3530beba-2dbb-594c-8a49-8c33a0e3eda0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:84dbdfd2a982da772f7389a07e4398a4597f46cb4455d0b1b3a6301a17ef86c8",
      "pattern": "[file:hashes.'SHA-256' = '84dbdfd2a982da772f7389a07e4398a4597f46cb4455d0b1b3a6301a17ef86c8']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:50:23Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "grove",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--25409332-d868-53fc-ac92-940ad5ef12c4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:8a67f2bc78d859d328a491b68ab53f3f2680b183df0f2773ad511802007c8fbb",
      "pattern": "[file:hashes.'SHA-256' = '8a67f2bc78d859d328a491b68ab53f3f2680b183df0f2773ad511802007c8fbb']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:48:38Z",
      "confidence": 80,
      "labels": [
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d4b4c746-73e3-596d-bd87-cf5dd9ff313a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://221[.]0[.]125[.]141:33223/i",
      "pattern": "[url:value = 'http://221.0.125.141:33223/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:48:20Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "32-bit",
        "elf",
        "mips",
        "Mozi"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--509e3e4f-aadd-5937-9300-61ecdb780034",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:b059699327f09f0cb601063973d978fd86da62b1c358e0b5e966a04401c99e29",
      "pattern": "[file:hashes.'SHA-256' = 'b059699327f09f0cb601063973d978fd86da62b1c358e0b5e966a04401c99e29']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:47:16Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "frame97",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--18e30530-835c-5f7f-a002-037f988e27af",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://222[.]140[.]224[.]96:39117/i",
      "pattern": "[url:value = 'http://222.140.224.96:39117/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:47:07Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "Mozi"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--77549ccc-29b2-5813-ac7e-e3aa889e4efe",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://115[.]57[.]45[.]77:58355/i",
      "pattern": "[url:value = 'http://115.57.45.77:58355/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:47:07Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "Mozi"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8e6486ed-28f1-5fd4-8de6-2845740f4c77",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://42[.]224[.]0[.]89:37584/bin[.]sh",
      "pattern": "[url:value = 'http://42.224.0.89:37584/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:47:06Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "Mozi"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d35b13c1-d832-5f85-a995-7f170813a27c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://113[.]238[.]236[.]218:56630/bin[.]sh",
      "pattern": "[url:value = 'http://113.238.236.218:56630/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:47:06Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "None"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f30b5b50-4b0d-5ecf-a4e4-bce12040b11a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:netjournal[.]id",
      "pattern": "[domain-name:value = 'netjournal.id']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:45:27Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--42832e0b-746d-5c42-a17d-6c6cd5dc2667",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:ac2bb5cd4f46145d7c287a7a045787803fb4d4543188ea5df25dd32782c18f66",
      "pattern": "[file:hashes.'SHA-256' = 'ac2bb5cd4f46145d7c287a7a045787803fb4d4543188ea5df25dd32782c18f66']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:44:17Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "frame",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--59ceb28f-9ad9-592a-b455-e8d55dd732f3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:c08c25633ef0e47de41dbdd39469193ac8a6cc5e5faa1a09df290b0d2d2e2bb9",
      "pattern": "[file:hashes.'SHA-256' = 'c08c25633ef0e47de41dbdd39469193ac8a6cc5e5faa1a09df290b0d2d2e2bb9']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:41:18Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "macOS",
        "nova",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--484fc8bc-7945-5e44-b8bd-5647de27101f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://119[.]179[.]22[.]130:39856/i",
      "pattern": "[url:value = 'http://119.179.22.130:39856/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:40:18Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "elf",
        "Mozi"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b32666df-4d21-5bf6-869a-8887915ffef2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:snowdonart[.]co[.]uk",
      "pattern": "[domain-name:value = 'snowdonart.co.uk']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:40:04Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f97a3f4a-8604-59b6-bac0-9e8c29f29a71",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:4889484535ccefeb35a9dfae28f2ca27d725c5b26a211f9a2743a5bfd68672e9",
      "pattern": "[file:hashes.'SHA-256' = '4889484535ccefeb35a9dfae28f2ca27d725c5b26a211f9a2743a5bfd68672e9']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:38:21Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "haven",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f6ddae20-4e54-579a-9623-c73ba96753d3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://125[.]43[.]229[.]161:41236/i",
      "pattern": "[url:value = 'http://125.43.229.161:41236/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:38:10Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "elf",
        "Mozi"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aadf20da-216f-5329-8098-7983405248e5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:a0d5daefe2d6fb6acf4ea1af63dca214a286e9e29298f4b5e4d5d5162e7b73e0",
      "pattern": "[file:hashes.'SHA-256' = 'a0d5daefe2d6fb6acf4ea1af63dca214a286e9e29298f4b5e4d5d5162e7b73e0']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:35:13Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "chant",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e1656242-285d-51ee-8e1d-1ed9c8796f85",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:smart[.]net-developer[.]co[.]uk",
      "pattern": "[domain-name:value = 'smart.net-developer.co.uk']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:34:55Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3e594691-c7d3-585c-a850-f8b119e07014",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://119[.]179[.]254[.]90:55402/bin[.]sh",
      "pattern": "[url:value = 'http://119.179.254.90:55402/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:33:06Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "Mozi"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8e7722f7-5dd7-5f50-b881-71aacd10cef2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://182[.]126[.]84[.]152:44186/bin[.]sh",
      "pattern": "[url:value = 'http://182.126.84.152:44186/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:32:06Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "Mozi"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--38a5cbb5-3013-53ed-a873-e8c0521d6963",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://222[.]141[.]83[.]10:48348/i",
      "pattern": "[url:value = 'http://222.141.83.10:48348/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:32:05Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "Mozi"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--83abbd27-4d7c-5915-bbc5-0184d4ba21cd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:dc5b73caae42063575889263c0e646c8b9ec1933adc013b6504c759729862e00",
      "pattern": "[file:hashes.'SHA-256' = 'dc5b73caae42063575889263c0e646c8b9ec1933adc013b6504c759729862e00']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:31:51Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "macOS",
        "threatfox",
        "willow"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4f434d84-4291-5ba3-9e5e-b076394fe8a8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:xn--80affqomjaccdhnt[.]xn--p1ai",
      "pattern": "[domain-name:value = 'xn--80affqomjaccdhnt.xn--p1ai']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:31:32Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--84eb1aaf-5abd-5961-b890-497d9cdc84be",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:www[.]permanentart[.]cz",
      "pattern": "[domain-name:value = 'www.permanentart.cz']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:31:32Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--68d5416e-36ce-5633-9a18-28248a50b986",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:vanadiumholding[.]com",
      "pattern": "[domain-name:value = 'vanadiumholding.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:31:32Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a8e01481-6ff2-51e4-814d-054e841872c5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:www[.]residencialdama[.]com",
      "pattern": "[domain-name:value = 'www.residencialdama.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:31:31Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5d172542-f70d-5148-afef-aa6ad77d68f7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://196[.]251[.]107[.]186/8jdjZhdf7/index[.]php",
      "pattern": "[url:value = 'http://196.251.107.186/8jdjZhdf7/index.php']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:30:04Z",
      "confidence": 80,
      "labels": [
        "Amadey",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2b2489ec-3fe9-5217-b7ff-d18a1610a5c7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:c3e0d4186258c150b94004c3b66b6a3f0f4e10525ddfad8fadc439351afcc265",
      "pattern": "[file:hashes.'SHA-256' = 'c3e0d4186258c150b94004c3b66b6a3f0f4e10525ddfad8fadc439351afcc265']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:28:14Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "macOS",
        "quill",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--783102cb-c9db-574d-8766-f13c1f83c9e7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:slideshowtomsk[.]ru",
      "pattern": "[domain-name:value = 'slideshowtomsk.ru']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:26:26Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9eabed06-3838-5677-9dce-ce1dc633fe1f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:panel[.]vidar[.]to",
      "pattern": "[domain-name:value = 'panel.vidar.to']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:26:02Z",
      "confidence": 80,
      "labels": [
        "Vidar",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b22e1aaa-5d37-568c-849b-2f88ce75aff0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://42[.]178[.]110[.]53:45783/i",
      "pattern": "[url:value = 'http://42.178.110.53:45783/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:24:09Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "32-bit",
        "elf",
        "mips",
        "Mozi"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d9a382a3-4307-588b-b4cd-01ae5212ff85",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:2c4229230fdcb224538828468a8642aaf4429a1591fe83776f8b3aa683d65050",
      "pattern": "[file:hashes.'SHA-256' = '2c4229230fdcb224538828468a8642aaf4429a1591fe83776f8b3aa683d65050']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:23:38Z",
      "confidence": 80,
      "labels": [
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--87239ec5-8be8-59e5-9d3d-4713a09273d3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://182[.]127[.]41[.]21:41691/i",
      "pattern": "[url:value = 'http://182.127.41.21:41691/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:21:15Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "elf",
        "iot"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bf4cc3ec-f7cc-558b-ac1f-d0a4c0e1be6a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:1913ed2ad175632b1b75e99bf5e291f551302b16dea51df318379e77a36f1ce9",
      "pattern": "[file:hashes.'SHA-256' = '1913ed2ad175632b1b75e99bf5e291f551302b16dea51df318379e77a36f1ce9']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:21:12Z",
      "confidence": 80,
      "labels": [
        "Mirai",
        "elf",
        "malware",
        "threatfox"
      ],
      "x_swiftioc_source": "malwarebazaar_recent,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--402911f3-ccba-57f4-9179-29d566ed7927",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:0f1f82ed773b41dbcda1bb48984d8dc0b14e4192db2f3aea45f54cb592523a86",
      "pattern": "[file:hashes.'SHA-256' = '0f1f82ed773b41dbcda1bb48984d8dc0b14e4192db2f3aea45f54cb592523a86']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:21:10Z",
      "confidence": 80,
      "labels": [
        "Mirai",
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bd77d437-b32c-5e88-9216-d582867414c5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://27[.]204[.]193[.]8:33514/Mozi[.]m",
      "pattern": "[url:value = 'http://27.204.193.8:33514/Mozi.m']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:19:42Z",
      "confidence": 80,
      "labels": [
        "IoT",
        "Mozi",
        "elf",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c2d1ce11-8e14-5f47-a120-a163f5e617ff",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:a10712fc263510bc02cc4fefd96e0ad776aeb0e28e8f50fb0421d535321bbc1a",
      "pattern": "[file:hashes.'SHA-256' = 'a10712fc263510bc02cc4fefd96e0ad776aeb0e28e8f50fb0421d535321bbc1a']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:19:42Z",
      "confidence": 80,
      "labels": [
        "IoT",
        "elf",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--004a6a9d-4663-5801-8072-a8998b7a65f3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://45[.]198[.]224[.]89/gamebin/d3d11",
      "pattern": "[url:value = 'http://45.198.224.89/gamebin/d3d11']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:19:41Z",
      "confidence": 80,
      "labels": [
        "IoT",
        "elf",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6f8dd622-b142-5256-b577-89dabd9c3798",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:d53a8a4ad1409c069299e1217986badd91baa034c5795860f9eb5607f96cda79",
      "pattern": "[file:hashes.'SHA-256' = 'd53a8a4ad1409c069299e1217986badd91baa034c5795860f9eb5607f96cda79']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:19:06Z",
      "confidence": 80,
      "labels": [
        "Mirai",
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a950592d-f358-52af-87f6-b86ce2a53fa1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:189199[.]xyz",
      "pattern": "[domain-name:value = '189199.xyz']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:16:05Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aceb5b76-0587-5ab9-b416-ba38fc185d3c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:www[.]neonail[.]ro",
      "pattern": "[domain-name:value = 'www.neonail.ro']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:16:04Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e9c996cc-8784-50a1-9cb2-9ceeb9403345",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:www[.]gibertpaul[.]com",
      "pattern": "[domain-name:value = 'www.gibertpaul.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:16:04Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f558ce63-64ed-58d3-acff-1d6171c1f2f4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:rcreformes[.]com",
      "pattern": "[domain-name:value = 'rcreformes.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:16:04Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--84c72982-8701-571b-8ae3-78a0a0a9fb29",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:www[.]nypdprosecutorcorruption[.]com",
      "pattern": "[domain-name:value = 'www.nypdprosecutorcorruption.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:16:03Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--761e5a4d-2ba6-55b5-ac4b-fa940c1f64f4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:lapinga[.]com[.]br",
      "pattern": "[domain-name:value = 'lapinga.com.br']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:16:03Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0daa7605-abdf-55e3-90e0-123f0006d312",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:sigaconstrucoes[.]com[.]br",
      "pattern": "[domain-name:value = 'sigaconstrucoes.com.br']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:12:07Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8fb5910a-c407-53d8-8a48-3296a2445228",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:26117ae94f91603edcfd4811af97db75cc910ce11bc29da1fbc8ed7d5651c837",
      "pattern": "[file:hashes.'SHA-256' = '26117ae94f91603edcfd4811af97db75cc910ce11bc29da1fbc8ed7d5651c837']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:09:01Z",
      "confidence": 80,
      "labels": [
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ed222363-cc4d-5a33-a4e1-042c81f7ef99",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:www[.]fibraimpresa[.]it",
      "pattern": "[domain-name:value = 'www.fibraimpresa.it']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:06:01Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2f80727a-4cd6-54b8-bc67-e802ae50eb12",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:nubiaestetica[.]com",
      "pattern": "[domain-name:value = 'nubiaestetica.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:06:00Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--21a96c92-d07d-582f-b32d-cb0ad8d16a17",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:erzincanisitme[.]com",
      "pattern": "[domain-name:value = 'erzincanisitme.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:06:00Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--44343c8c-af8f-541d-8d23-658560c37eb8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:comvale[.]com[.]br",
      "pattern": "[domain-name:value = 'comvale.com.br']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:06:00Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a8324c3c-f50d-5f71-9ba0-ac4a878fa52a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:www[.]mineniches[.]com",
      "pattern": "[domain-name:value = 'www.mineniches.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:05:59Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0cd5c3c5-5442-5afa-b88d-b80c14709dcf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:www[.]danabagroup[.]com",
      "pattern": "[domain-name:value = 'www.danabagroup.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:05:59Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--da5ccfcf-718e-5f3f-8f22-077465a0c63b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:rf[.]adilawa99[.]org",
      "pattern": "[domain-name:value = 'rf.adilawa99.org']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:05:48Z",
      "confidence": 80,
      "labels": [
        "Vidar",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c40c0489-2a87-5dc2-b5a8-d38ae62761f6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://rf[.]adilawa99[.]org/",
      "pattern": "[url:value = 'https://rf.adilawa99.org/']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:05:48Z",
      "confidence": 80,
      "labels": [
        "Vidar",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ecc29b5d-15d1-5be6-ac85-7527ae33599f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:38[.]60[.]246[.]113",
      "pattern": "[ipv4-addr:value = '38.60.246.113']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:05:06Z",
      "confidence": 80,
      "labels": [
        "CobaltStrike",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ea6ae0b6-e91d-5725-8740-950b595fc1e9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:156[.]240[.]14[.]154",
      "pattern": "[ipv4-addr:value = '156.240.14.154']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:05:06Z",
      "confidence": 80,
      "labels": [
        "Vshell",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f5c91b85-8c5b-5530-8d78-818000c25277",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:103[.]178[.]235[.]51",
      "pattern": "[ipv4-addr:value = '103.178.235.51']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:05:06Z",
      "confidence": 80,
      "labels": [
        "asyncrat",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fcea97d4-38c3-522b-b8d0-1aebd87bf1a1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:143[.]244[.]140[.]4",
      "pattern": "[ipv4-addr:value = '143.244.140.4']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:05:05Z",
      "confidence": 80,
      "labels": [
        "Vshell",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--313e5967-8f54-5b91-8986-26b2cc4a0f45",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:b1822124f3aa3160c0def4aa6c46699459713b90c31d7b053b51265701886871",
      "pattern": "[file:hashes.'SHA-256' = 'b1822124f3aa3160c0def4aa6c46699459713b90c31d7b053b51265701886871']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:02:48Z",
      "confidence": 80,
      "labels": [
        "NSIS",
        "email",
        "guloader",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--addfbf24-c51c-5d02-a1a9-cd937f29c220",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:0685c49db9d52f0c2c4b217cc1389bb91257cfbda6d11c6c3c66c375032acadb",
      "pattern": "[file:hashes.'SHA-256' = '0685c49db9d52f0c2c4b217cc1389bb91257cfbda6d11c6c3c66c375032acadb']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:02:48Z",
      "confidence": 80,
      "labels": [
        "NSIS",
        "email",
        "guloader",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8c1d3cfc-85fa-5bed-a9db-909289b1bdaa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:edypsomlbd[.]com",
      "pattern": "[domain-name:value = 'edypsomlbd.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:02:47Z",
      "confidence": 80,
      "labels": [
        "NSIS",
        "email",
        "guloader",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9ab26c18-751e-5157-baac-ce55e36d999f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:134[.]255[.]216[.]227",
      "pattern": "[ipv4-addr:value = '134.255.216.227']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:02:47Z",
      "confidence": 80,
      "labels": [
        "NSIS",
        "email",
        "guloader",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1986547d-a65f-5330-8db0-e5b0de789138",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://182[.]127[.]41[.]21:41691/bin[.]sh",
      "pattern": "[url:value = 'http://182.127.41.21:41691/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:02:08Z",
      "confidence": 80,
      "labels": [
        "None",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0d89bb74-fe4a-516c-915f-cddcb66a801a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://125[.]47[.]236[.]168:42099/i",
      "pattern": "[url:value = 'http://125.47.236.168:42099/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:02:08Z",
      "confidence": 80,
      "labels": [
        "Mozi",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--11231f60-9140-5c6c-89c3-e85f78910e41",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://125[.]47[.]236[.]168:42099/bin[.]sh",
      "pattern": "[url:value = 'http://125.47.236.168:42099/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:02:08Z",
      "confidence": 80,
      "labels": [
        "Mozi",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--288fcbfd-c8b7-53f2-b788-1713f19ad7f9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://221[.]0[.]125[.]141:33223/bin[.]sh",
      "pattern": "[url:value = 'http://221.0.125.141:33223/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:02:07Z",
      "confidence": 80,
      "labels": [
        "None",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--24e59c8f-f291-5113-a1d0-fcffcb49e4a0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://220[.]198[.]113[.]45:49761/bin[.]sh",
      "pattern": "[url:value = 'http://220.198.113.45:49761/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:02:07Z",
      "confidence": 80,
      "labels": [
        "None",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8d653390-8338-5e77-9c00-9e80d20fbeda",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:2ab90b276553446e47c1de9507e1b8b9851fc5d89c783f2dbddc645dda1d7beb",
      "pattern": "[file:hashes.'SHA-256' = '2ab90b276553446e47c1de9507e1b8b9851fc5d89c783f2dbddc645dda1d7beb']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T18:01:55Z",
      "confidence": 80,
      "labels": [
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--281a40e4-28cf-5b35-8ed6-280bc7debb49",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:shop[.]goforbranding[.]com",
      "pattern": "[domain-name:value = 'shop.goforbranding.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:56:58Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d1e66020-e964-5ff9-b883-f001d855cef4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:22bc6453262b24d0811bd368c922a201e5f8fee726634448d9ff55794619a0b7",
      "pattern": "[file:hashes.'SHA-256' = '22bc6453262b24d0811bd368c922a201e5f8fee726634448d9ff55794619a0b7']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:54:57Z",
      "confidence": 80,
      "labels": [
        "Mirai",
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--87426e94-62f1-53a9-833c-209ab394c11b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://42[.]178[.]110[.]53:45783/bin[.]sh",
      "pattern": "[url:value = 'http://42.178.110.53:45783/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:54:17Z",
      "confidence": 80,
      "labels": [
        "32-bit",
        "Mozi",
        "elf",
        "malware",
        "malware_download",
        "mips"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d49eb78b-13b4-5ffa-a00e-fe5d2802eaf5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:www[.]polonez[.]org[.]au",
      "pattern": "[domain-name:value = 'www.polonez.org.au']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:52:36Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--31c15601-adb3-5791-9101-c180db6c0214",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:thelumberjackswife[.]com",
      "pattern": "[domain-name:value = 'thelumberjackswife.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:52:36Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6e3e2b7a-4317-561a-a261-c7c8f918a4d0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:starthappylife[.]com",
      "pattern": "[domain-name:value = 'starthappylife.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:52:36Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b70b84e4-21ec-5ed6-8395-a26c18d028d2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:ranganathcosmetologycenter[.]com",
      "pattern": "[domain-name:value = 'ranganathcosmetologycenter.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:52:36Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--57a4046b-3239-513a-bba5-f1112f2df7ce",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:hp-clinics[.]com",
      "pattern": "[domain-name:value = 'hp-clinics.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:52:36Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b613405b-51dc-5d98-9b6b-d12f664475c9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:greencrowdsourcing[.]com",
      "pattern": "[domain-name:value = 'greencrowdsourcing.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:52:36Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--72cbf7d4-f9f8-5e54-9a07-48a19f6ee13c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:dannyeveritt[.]net",
      "pattern": "[domain-name:value = 'dannyeveritt.net']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:52:36Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--36c69f76-7c13-584a-8088-141ee25d5bd0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:canakkaleayvaciktdiosb[.]org[.]tr",
      "pattern": "[domain-name:value = 'canakkaleayvaciktdiosb.org.tr']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:52:36Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--596cba17-a57f-5fce-8cef-e0377d921d0d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:bragadeandrade[.]com[.]br",
      "pattern": "[domain-name:value = 'bragadeandrade.com.br']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:52:36Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--790ebb0a-46bc-5f42-acd2-a94db2bf6d21",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:association-acage[.]fr",
      "pattern": "[domain-name:value = 'association-acage.fr']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:52:36Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ff4e04f8-c23a-52f9-bb78-d2d334172950",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:ailinshop[.]com",
      "pattern": "[domain-name:value = 'ailinshop.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:52:36Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--98e86e2c-a1a1-50bd-9a7c-f535d0d8d4d1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:06876beb9f04ee6d95882ee4b663b8081b6524dff46f4b58c8057bc8abeb18e3",
      "pattern": "[file:hashes.'SHA-256' = '06876beb9f04ee6d95882ee4b663b8081b6524dff46f4b58c8057bc8abeb18e3']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:49:37Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "forge",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--67767fb3-1330-5cb1-a098-ae9b2cb211c3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:1moko8um[.]encompass-graphics[.]co[.]uk",
      "pattern": "[domain-name:value = '1moko8um.encompass-graphics.co.uk']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:49:30Z",
      "confidence": 80,
      "labels": [
        "ClearFake",
        "mac-0x68dc",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d77fa4c6-80a3-5cfa-9f33-916c97786e39",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:cff237dcf3ab4cdc554209a469c4a85e8545bb568189401982aaf2e321af564b",
      "pattern": "[file:hashes.'SHA-256' = 'cff237dcf3ab4cdc554209a469c4a85e8545bb568189401982aaf2e321af564b']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:47:53Z",
      "confidence": 80,
      "labels": [
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b771fe00-cbd7-59ea-8119-6abd1c42d4dc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://42[.]227[.]44[.]100:48654/i",
      "pattern": "[url:value = 'http://42.227.44.100:48654/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:47:07Z",
      "confidence": 80,
      "labels": [
        "Mozi",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--602e5d70-7969-5d9e-bcf2-d9fe11f2b083",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://42[.]232[.]177[.]204:43511/i",
      "pattern": "[url:value = 'http://42.232.177.204:43511/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:47:06Z",
      "confidence": 80,
      "labels": [
        "Mozi",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f17259a3-8eb3-5672-80f1-71c932fae93e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://36[.]64[.]184[.]26:58931/i",
      "pattern": "[url:value = 'http://36.64.184.26:58931/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:47:06Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "mirai"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bf456872-7e81-56d5-a57b-32e08431cfe1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://222[.]140[.]216[.]62:57080/bin[.]sh",
      "pattern": "[url:value = 'http://222.140.216.62:57080/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:47:06Z",
      "confidence": 80,
      "labels": [
        "Mozi",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9f56ae29-2066-5f08-ae0f-dc8fd60efffc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://113[.]239[.]215[.]5:39653/i",
      "pattern": "[url:value = 'http://113.239.215.5:39653/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:47:06Z",
      "confidence": 80,
      "labels": [
        "None",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3e360140-7784-57a0-b4ac-c00e2138eea6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:d02034ee326121d11671db64a82c14d1a9261a78158d6341b5aae03a43d410f0",
      "pattern": "[file:hashes.'SHA-256' = 'd02034ee326121d11671db64a82c14d1a9261a78158d6341b5aae03a43d410f0']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:47:02Z",
      "confidence": 80,
      "labels": [
        "Mirai",
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--44d033d5-0023-5b62-b8ff-5ac4f02b9d60",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:3afb46077f2151e5315232d0a78355241253f5dbe5f867a0f9633535687110e8",
      "pattern": "[file:hashes.'SHA-256' = '3afb46077f2151e5315232d0a78355241253f5dbe5f867a0f9633535687110e8']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:46:37Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "boost",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--56187c85-dd23-5913-b3a3-c358bd7b6202",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:encompass-graphics[.]co[.]uk",
      "pattern": "[domain-name:value = 'encompass-graphics.co.uk']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:44:01Z",
      "confidence": 80,
      "labels": [
        "ClearFake",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a93eda89-b823-5dbf-93d3-fb4086ba39fb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:3054d8e241e5e6a37fb6d4ed63efe1653fe4ca265576005f054242da015a274d",
      "pattern": "[file:hashes.'SHA-256' = '3054d8e241e5e6a37fb6d4ed63efe1653fe4ca265576005f054242da015a274d']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:43:42Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "macOS",
        "stratos",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--73750cbe-fe1e-51e6-802d-1091c09e676d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:www[.]premiosarquitectura[.]org",
      "pattern": "[domain-name:value = 'www.premiosarquitectura.org']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:43:06Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f211845d-04db-5c80-98f1-ae5f3b3ae834",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:www[.]grarg[.]com",
      "pattern": "[domain-name:value = 'www.grarg.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:43:06Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2370294d-52a8-570b-93f2-e9883b6a18de",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:www[.]vvrs-info[.]be",
      "pattern": "[domain-name:value = 'www.vvrs-info.be']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:43:05Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--be9dc3b4-898f-509c-8e63-5f31950c33a3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:www[.]radiosantateresa[.]it",
      "pattern": "[domain-name:value = 'www.radiosantateresa.it']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:43:05Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6e3187a6-1c16-58fb-968c-48e2fa7f90b4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:anveraspain[.]com",
      "pattern": "[domain-name:value = 'anveraspain.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:43:05Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c3431ca7-36bc-5d23-9794-2ff30460aa96",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:www[.]sunagawa-shop[.]com",
      "pattern": "[domain-name:value = 'www.sunagawa-shop.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:43:04Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--758abf74-932c-5783-83b8-1705af1d80a8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:volegov-pravo[.]ru",
      "pattern": "[domain-name:value = 'volegov-pravo.ru']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:43:04Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cb078410-f702-5dc0-94c9-008327655b50",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:saskiadesign[.]nl",
      "pattern": "[domain-name:value = 'saskiadesign.nl']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:43:04Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5b275db7-3699-5ef0-ab9f-ac4d8dcfd13c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:n1492[.]ru",
      "pattern": "[domain-name:value = 'n1492.ru']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:43:04Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6aff5c8a-fc06-5d1b-863c-a7561e25c1e0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:clinicasenise[.]com[.]br",
      "pattern": "[domain-name:value = 'clinicasenise.com.br']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:43:03Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ad99cec4-c130-5149-8d5e-fa4762909169",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:205ec415fbd019c483684154649f9428fd35f0329bc954d0e5406abb20836586",
      "pattern": "[file:hashes.'SHA-256' = '205ec415fbd019c483684154649f9428fd35f0329bc954d0e5406abb20836586']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:43:00Z",
      "confidence": 80,
      "labels": [
        "Mirai",
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--87ba4eb2-478e-57d6-b8c4-009213714cba",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:de164633165810bf27ebda7d6a2cc4c365a00f12faa7e0ffc1fff3c86290bded",
      "pattern": "[file:hashes.'SHA-256' = 'de164633165810bf27ebda7d6a2cc4c365a00f12faa7e0ffc1fff3c86290bded']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:40:15Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "grove",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c4c903fa-2ccd-5973-9951-5d4bec3531f4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:e65e083416cf7b98085dea847f8456b1e424c62b3391b187d42723acbfbed851",
      "pattern": "[file:hashes.'SHA-256' = 'e65e083416cf7b98085dea847f8456b1e424c62b3391b187d42723acbfbed851']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:37:18Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "frame97",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--de9c2b36-ec51-5a5d-bfdb-843208fffa7b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:shavondezilva[.]com",
      "pattern": "[domain-name:value = 'shavondezilva.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:35:46Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e39dfd2d-c88e-5e21-9413-84c9a2de3556",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:52196a9dcc2f5aa5578bebbbbf9acb8bea4bc35244fcba589ccc16f5db7332af",
      "pattern": "[file:hashes.'SHA-256' = '52196a9dcc2f5aa5578bebbbbf9acb8bea4bc35244fcba589ccc16f5db7332af']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:34:55Z",
      "confidence": 80,
      "labels": [
        "Mirai",
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--24ec13f0-ddfa-5b22-be4b-181ce437124e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:cbad0a6d4ef25cc8b8ee846ab8508c42d6258e0bfc1c91ed429de788b4166820",
      "pattern": "[file:hashes.'SHA-256' = 'cbad0a6d4ef25cc8b8ee846ab8508c42d6258e0bfc1c91ed429de788b4166820']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:34:05Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "frame",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f18254b1-829a-5c8c-9fca-3730a815ce9c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://123[.]189[.]19[.]159:52662/i",
      "pattern": "[url:value = 'http://123.189.19.159:52662/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:32:07Z",
      "confidence": 80,
      "labels": [
        "None",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a917e176-e7b7-5655-a376-43aedea69f0c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://27[.]204[.]193[.]8:33514/bin[.]sh",
      "pattern": "[url:value = 'http://27.204.193.8:33514/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:32:06Z",
      "confidence": 80,
      "labels": [
        "Mozi",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1e025fcf-0b37-5315-a7eb-1a3e008dd3cb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:d973e0010942759d30d49836ac7b18199d813e375980b76f73c10c527be2758d",
      "pattern": "[file:hashes.'SHA-256' = 'd973e0010942759d30d49836ac7b18199d813e375980b76f73c10c527be2758d']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:31:01Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "macOS",
        "nova",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--393157ba-2dd2-5f01-96ed-9113ff74f8d0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:www[.]zigpsychocybercowboys[.]com",
      "pattern": "[domain-name:value = 'www.zigpsychocybercowboys.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:28:34Z",
      "confidence": 80,
      "labels": [
        "ClickFix",
        "Polygon",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3a6176ad-eebd-5fed-8b46-e92fdc770cd9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:26735e9d2a1df0d918ac8b3a37b42bda1e2c2de3374c6a8ffc2187b6af1c3a80",
      "pattern": "[file:hashes.'SHA-256' = '26735e9d2a1df0d918ac8b3a37b42bda1e2c2de3374c6a8ffc2187b6af1c3a80']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:27:55Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "haven",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0c816640-566e-52fe-a239-2b6ec9e43650",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:0d98501ac73fd2c318e0e1a4a223b9e2589f235627e512eac8b88a275315b69a",
      "pattern": "[file:hashes.'SHA-256' = '0d98501ac73fd2c318e0e1a4a223b9e2589f235627e512eac8b88a275315b69a']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:25:49Z",
      "confidence": 80,
      "labels": [
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f66106dc-7cb2-50e3-a4fd-3a4b9e743f92",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:70b2276aaa5ff9a8e714d625b9238c5bad790145be09827fb928143810df3bc9",
      "pattern": "[file:hashes.'SHA-256' = '70b2276aaa5ff9a8e714d625b9238c5bad790145be09827fb928143810df3bc9']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:25:42Z",
      "confidence": 80,
      "labels": [
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7b957a60-390c-5c8f-abfc-ab4c4034313e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:cca22fb5739abdfc4422a3a992235111cf64663983a59eb5d2780a8ef2b2a7a9",
      "pattern": "[file:hashes.'SHA-256' = 'cca22fb5739abdfc4422a3a992235111cf64663983a59eb5d2780a8ef2b2a7a9']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:25:03Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "chant",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--269ddf7c-9e02-5c2a-87cb-25f4d812d808",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:3f9b5c3452b5542dc43b7e6fb9355713c132c497",
      "pattern": "[file:hashes.'SHA-1' = '3f9b5c3452b5542dc43b7e6fb9355713c132c497']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:24:30Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--87313680-c209-565b-9a27-c498878ab9e8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:377cda3d6d3e088780aca9237d35fe08",
      "pattern": "[file:hashes.'MD5' = '377cda3d6d3e088780aca9237d35fe08']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:24:30Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--06998e37-1ea2-552c-bbb6-d293e5f5be06",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:ec29ff7d0c0acee15b978e64c7ce2d78",
      "pattern": "[file:hashes.'MD5' = 'ec29ff7d0c0acee15b978e64c7ce2d78']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:24:18Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c33517ea-e641-507c-8933-163b6e83840c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:645cf1c691412acaa51402aa2e44f6e4135b897c",
      "pattern": "[file:hashes.'SHA-1' = '645cf1c691412acaa51402aa2e44f6e4135b897c']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:24:17Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f45ac06e-43e2-5fa2-944c-b42bde56e2b0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:f0822425f44551ba600204c5ae73c661",
      "pattern": "[file:hashes.'MD5' = 'f0822425f44551ba600204c5ae73c661']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:24:12Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2732faf3-a7b7-540a-80e7-4e888eede6d2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:62631bacf64ccf513a607d6b1a6870046826bf8d",
      "pattern": "[file:hashes.'SHA-1' = '62631bacf64ccf513a607d6b1a6870046826bf8d']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:24:12Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a032ad98-6087-5658-af9d-60ad948e5e21",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:9a206522981379d306ebde007cb549ff",
      "pattern": "[file:hashes.'MD5' = '9a206522981379d306ebde007cb549ff']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:24:04Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eb04bff1-4c74-53c2-bf0c-8fb8c7927110",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:c862083cf0fb7f3e2c6d29c6f3f3800b39488908",
      "pattern": "[file:hashes.'SHA-1' = 'c862083cf0fb7f3e2c6d29c6f3f3800b39488908']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:24:03Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4c6672dd-3342-5336-9be5-693287b826c1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:fa10634e96d1ec758b4d0ccb50e7f1c0",
      "pattern": "[file:hashes.'MD5' = 'fa10634e96d1ec758b4d0ccb50e7f1c0']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:24:02Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c2d2e547-bfaf-53fa-94f5-ebd666cea36a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:c62fd3dd2ed1d7a924ee13685a4344f7",
      "pattern": "[file:hashes.'MD5' = 'c62fd3dd2ed1d7a924ee13685a4344f7']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:24:02Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--609426f6-4a29-5038-b1f5-262f20a11adc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:c09f2be7a47574eec6c7af357e06930ec7cd3295",
      "pattern": "[file:hashes.'SHA-1' = 'c09f2be7a47574eec6c7af357e06930ec7cd3295']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:24:02Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bd2bb994-a268-53ed-81b4-7eaab1459702",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:efb810ce559a4299715294b2a8770342",
      "pattern": "[file:hashes.'MD5' = 'efb810ce559a4299715294b2a8770342']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:24:01Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2b52727e-a926-5a42-8af9-a08d727b5918",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:30ac44cbb461c543eabb9680e0616e02fbe60180",
      "pattern": "[file:hashes.'SHA-1' = '30ac44cbb461c543eabb9680e0616e02fbe60180']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:24:01Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--99aa5299-7525-587f-ad84-d2865f5ffc32",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:9635d97d3001cba7520aede1b2a34717ad383786",
      "pattern": "[file:hashes.'SHA-1' = '9635d97d3001cba7520aede1b2a34717ad383786']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:24:00Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7c972dce-288c-58b3-acf4-e7e1c44adda4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:3216291f75673f0160dd82620c476e09251c178c",
      "pattern": "[file:hashes.'SHA-1' = '3216291f75673f0160dd82620c476e09251c178c']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:24:00Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--456e1d37-491b-5bdb-8da7-99e09cf69367",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:09a58d0deeb9b02610215b1cf96dd61c",
      "pattern": "[file:hashes.'MD5' = '09a58d0deeb9b02610215b1cf96dd61c']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:24:00Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e60fd603-7f33-503e-92e2-1ba86ff82ae2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:8fbe33848afc89dba3a1dcb6e359932af4c54a88",
      "pattern": "[file:hashes.'SHA-1' = '8fbe33848afc89dba3a1dcb6e359932af4c54a88']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:59Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--228923ff-07e3-50ed-8ce3-05f5a37b3ed5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:17f8c39ac1f7921a922e98124f8f262c",
      "pattern": "[file:hashes.'MD5' = '17f8c39ac1f7921a922e98124f8f262c']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:59Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--17fc5ac0-d46b-5f8f-9089-76cc4740327a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:d44662469e074d6e297cdbb3b9dcbb63",
      "pattern": "[file:hashes.'MD5' = 'd44662469e074d6e297cdbb3b9dcbb63']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:58Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1b7383e8-88ec-5a7e-a8cb-05b581c6050c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:c4183375cdd381cee98a7e9c3919fc9473810424",
      "pattern": "[file:hashes.'SHA-1' = 'c4183375cdd381cee98a7e9c3919fc9473810424']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:58Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e684119e-caa6-58cb-bf26-5f34f8624c0b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:afe83d78740a05079739c7e32be5b23cc516d084",
      "pattern": "[file:hashes.'SHA-1' = 'afe83d78740a05079739c7e32be5b23cc516d084']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:57Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4a8d0ec9-f1ec-560d-b028-38da3f1700ba",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:343b233054a70c68b620a20f9c455d23",
      "pattern": "[file:hashes.'MD5' = '343b233054a70c68b620a20f9c455d23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:57Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ccd1e7ac-e032-5fc9-a78e-9278a99b7d03",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:009e90fd0de9db004658827d4f9c2fd0",
      "pattern": "[file:hashes.'MD5' = '009e90fd0de9db004658827d4f9c2fd0']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:57Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d630dc67-f108-5a23-8afc-644abafc3636",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:bec7c035c5aa438566a975ff9b556a56",
      "pattern": "[file:hashes.'MD5' = 'bec7c035c5aa438566a975ff9b556a56']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:56Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6333d483-aee1-5fa7-8dd7-fc696c36989f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:923bc2b0ceffa97c7799f547fae7e8c95f2e8315",
      "pattern": "[file:hashes.'SHA-1' = '923bc2b0ceffa97c7799f547fae7e8c95f2e8315']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:56Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d338adb0-e196-5597-8c1e-53a35d13513a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:55f5723e2da8790d6d16ad08e8c77fa8c3aa218e",
      "pattern": "[file:hashes.'SHA-1' = '55f5723e2da8790d6d16ad08e8c77fa8c3aa218e']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:56Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e440f30d-f34c-5ea4-91af-3940b6894af9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:428ab7c8f0ccfd35d45b350b67d27f9f41a5eb9b",
      "pattern": "[file:hashes.'SHA-1' = '428ab7c8f0ccfd35d45b350b67d27f9f41a5eb9b']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:55Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c5f7965a-8975-5b73-aecc-4092b7af6382",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:1e6ea4a2385cf4c77cd140ab1a932b33",
      "pattern": "[file:hashes.'MD5' = '1e6ea4a2385cf4c77cd140ab1a932b33']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:55Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--00831893-d246-5b69-ad49-d38a7b4124e9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:9507c69e91b6bfc73ac3442ca44059b6",
      "pattern": "[file:hashes.'MD5' = '9507c69e91b6bfc73ac3442ca44059b6']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:54Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1c711a40-77c2-5160-acc1-5b4df0c171d6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:42ffb8181322558154ad4d2a3f9b453b",
      "pattern": "[file:hashes.'MD5' = '42ffb8181322558154ad4d2a3f9b453b']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:54Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--40935e8e-cdbd-50e8-8077-64e34d9dd271",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:084860512b7fe21de201bbda9c969864dd79c639",
      "pattern": "[file:hashes.'SHA-1' = '084860512b7fe21de201bbda9c969864dd79c639']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:54Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--267835f3-8eaa-5337-9a9e-039018253f87",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:885e153ed113c7cff48e7c2b1f36f4bf",
      "pattern": "[file:hashes.'MD5' = '885e153ed113c7cff48e7c2b1f36f4bf']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:53Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--75972a67-b4b2-5202-9787-cbbfc0cbb81d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:7d86cc665d90a040c3c05eec249137146e5c034d",
      "pattern": "[file:hashes.'SHA-1' = '7d86cc665d90a040c3c05eec249137146e5c034d']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:53Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1429e116-43e8-569a-bc80-c8c1d11aad9d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:6834b8799efa25ce8a5e707b3bdc23c550ac0f06",
      "pattern": "[file:hashes.'SHA-1' = '6834b8799efa25ce8a5e707b3bdc23c550ac0f06']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:52Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9ff8e359-b78a-5b9d-8554-6a4cae5be173",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:5474b8a5b10f6f7eb3d546eb822cd74c",
      "pattern": "[file:hashes.'MD5' = '5474b8a5b10f6f7eb3d546eb822cd74c']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:52Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--61b36a6e-1736-5766-8079-5683bdb861c5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:50bc77b546bdd09b2e04d72bdf70b30e762ebb23",
      "pattern": "[file:hashes.'SHA-1' = '50bc77b546bdd09b2e04d72bdf70b30e762ebb23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:52Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ac372582-6c7a-5116-b578-e3d9af1d96e1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:7e289a86d8ef29f24484719943d671e2",
      "pattern": "[file:hashes.'MD5' = '7e289a86d8ef29f24484719943d671e2']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:51Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e86c9937-9861-50c8-a92b-9e1ca38c83ff",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:073d400a498b10679df29c90e3cbd8f4ff5349e2",
      "pattern": "[file:hashes.'SHA-1' = '073d400a498b10679df29c90e3cbd8f4ff5349e2']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:51Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--23746964-a9d1-5395-b585-3d0782b94020",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:88da90e0ebb10fa85ea666ef2dce20fc51fa34ff",
      "pattern": "[file:hashes.'SHA-1' = '88da90e0ebb10fa85ea666ef2dce20fc51fa34ff']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:50Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4bd71a26-c9d3-54b9-b869-2b5a409a58de",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:4c5841ba2aa04daaf1cac18e05d206c7",
      "pattern": "[file:hashes.'MD5' = '4c5841ba2aa04daaf1cac18e05d206c7']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:50Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5e337264-16ea-5d26-8c9f-ef1a61fcef1c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:ecefa13b77e4648c1ce67ff06d5d19e52ecaf963",
      "pattern": "[file:hashes.'SHA-1' = 'ecefa13b77e4648c1ce67ff06d5d19e52ecaf963']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:49Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--87c9b25c-a487-5223-9ef1-e5f0cfb6f6d2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:ec8c228cfdbc1e75c9d8b33b6039ae7e",
      "pattern": "[file:hashes.'MD5' = 'ec8c228cfdbc1e75c9d8b33b6039ae7e']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:49Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c2988097-93ef-55b4-9e88-d6580c13b71c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:bf3b86f413d5ce57e2d8f1dbcd13c1a2",
      "pattern": "[file:hashes.'MD5' = 'bf3b86f413d5ce57e2d8f1dbcd13c1a2']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:49Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c2e1c3fa-c768-5070-a9ff-6b08fbafefd7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:fd249be16f00358ec374b4e7eb520258ae3bbd25",
      "pattern": "[file:hashes.'SHA-1' = 'fd249be16f00358ec374b4e7eb520258ae3bbd25']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:48Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6f279b95-8142-56c2-bfaf-f6966592e7d8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:9453806028e89be7dddd9777027f8487",
      "pattern": "[file:hashes.'MD5' = '9453806028e89be7dddd9777027f8487']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:48Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--24861407-fb73-5e66-b882-8e9277d3622d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:bffbe29481217057dfe5afa0e244254e3a71f41f",
      "pattern": "[file:hashes.'SHA-1' = 'bffbe29481217057dfe5afa0e244254e3a71f41f']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:47Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f251509e-0ac6-5c39-be3e-58817ebe84f5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:01ab970e35894f7aae5974d16799d75d",
      "pattern": "[file:hashes.'MD5' = '01ab970e35894f7aae5974d16799d75d']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:47Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--df224390-6001-5cbe-b9b2-13f0da78e7a6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:c618d443aa71463824b4b302ae2c097e256362d1",
      "pattern": "[file:hashes.'SHA-1' = 'c618d443aa71463824b4b302ae2c097e256362d1']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:46Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c6be301e-f835-5988-98c1-7a447e98ed36",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:429000990842d334df49dec819921cdb",
      "pattern": "[file:hashes.'MD5' = '429000990842d334df49dec819921cdb']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:46Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c4122536-3f37-56dc-adb3-cad554e680be",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:ee5f5e9971a0b6bf60f49411d43ecdf8",
      "pattern": "[file:hashes.'MD5' = 'ee5f5e9971a0b6bf60f49411d43ecdf8']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:45Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8c1287d7-dbd2-5763-9d05-6866c08f54d6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:6e0881537e54ac5eb9d074959bd7214270b59c14",
      "pattern": "[file:hashes.'SHA-1' = '6e0881537e54ac5eb9d074959bd7214270b59c14']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:45Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4e28c3b0-b311-5a47-b2ab-0367533b0038",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:22dbca80786e472454fd780bbdb8e682ceef3713",
      "pattern": "[file:hashes.'SHA-1' = '22dbca80786e472454fd780bbdb8e682ceef3713']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:45Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--37e60e3f-4f26-572a-99b0-b51c5b5cac8f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:acb226599f597fe5f4b46b46ebceb246",
      "pattern": "[file:hashes.'MD5' = 'acb226599f597fe5f4b46b46ebceb246']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:44Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e948485b-f996-5009-a4f9-33c9252bccb9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:59d48b983eec0e016573216551daa7f5f5939791",
      "pattern": "[file:hashes.'SHA-1' = '59d48b983eec0e016573216551daa7f5f5939791']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:44Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--041f42c7-84c0-56e7-9de7-549a8cc223b8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:d643145a05bc39c671986d73bf57e1c6",
      "pattern": "[file:hashes.'MD5' = 'd643145a05bc39c671986d73bf57e1c6']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:43Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d7ec762f-6132-5090-9ca9-7835605d5432",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:69ef58178acfe9c281398a513687508afa104e85",
      "pattern": "[file:hashes.'SHA-1' = '69ef58178acfe9c281398a513687508afa104e85']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:43Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--20dfb1dd-f12d-55fa-8045-c9d0f900be94",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:331d183a570848a2da3d0d1164da65fe",
      "pattern": "[file:hashes.'MD5' = '331d183a570848a2da3d0d1164da65fe']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:43Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ab1425bf-9c4f-5561-818e-f910a9506dff",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:fa0c60cb9b3fed5432bb2ab46393484c",
      "pattern": "[file:hashes.'MD5' = 'fa0c60cb9b3fed5432bb2ab46393484c']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:42Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ca82abdf-9048-5702-8853-007b0ca9ac61",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:ea8130ff4863a54c67e85df5b5fefe4b48097fb6",
      "pattern": "[file:hashes.'SHA-1' = 'ea8130ff4863a54c67e85df5b5fefe4b48097fb6']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:42Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1c5209a5-0136-5d05-9283-fd472f244967",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:51b0fea3cb4dd12ad9f6565c5e616563a67a7c36",
      "pattern": "[file:hashes.'SHA-1' = '51b0fea3cb4dd12ad9f6565c5e616563a67a7c36']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:42Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1f3d2ede-c147-5348-bdc6-e6d8f78e9efe",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:fdd53d081e1c3de133b7fe49580b6273e943fc0b",
      "pattern": "[file:hashes.'SHA-1' = 'fdd53d081e1c3de133b7fe49580b6273e943fc0b']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:41Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cfde99ba-1684-5306-a099-da93fa7994de",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:bc659cbb17511fc027b9ca0708068fe3",
      "pattern": "[file:hashes.'MD5' = 'bc659cbb17511fc027b9ca0708068fe3']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:41Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--198e67df-c932-5acd-a7b5-693e08ebd294",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:d066dabf47e9741faa8a4861b4e5f8d5c45fa25b",
      "pattern": "[file:hashes.'SHA-1' = 'd066dabf47e9741faa8a4861b4e5f8d5c45fa25b']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:40Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--944e08af-75b5-54eb-9774-13a103dda8e6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:ab133da759e361df9726c0242b61089b",
      "pattern": "[file:hashes.'MD5' = 'ab133da759e361df9726c0242b61089b']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:40Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d90228bb-298e-569f-8312-4531e5c444ba",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:a031f4d9e5c6e499bb4a364a0c51d318",
      "pattern": "[file:hashes.'MD5' = 'a031f4d9e5c6e499bb4a364a0c51d318']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:40Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9f065d4e-221f-587b-9634-9c366d75734e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:557ae6113a92cb947f6ca50468928901d619492c",
      "pattern": "[file:hashes.'SHA-1' = '557ae6113a92cb947f6ca50468928901d619492c']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:39Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--67cd89b6-ee40-59ec-b596-53a7e0630388",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:10279663d1607d5e32872610723c0ea0",
      "pattern": "[file:hashes.'MD5' = '10279663d1607d5e32872610723c0ea0']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:39Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b98c66bf-6299-5743-89f4-e56fc09e85df",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:0349e3f2d6e87b2944d8c33fd091f4ccd8989cda",
      "pattern": "[file:hashes.'SHA-1' = '0349e3f2d6e87b2944d8c33fd091f4ccd8989cda']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:39Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e41b9355-ba91-5019-92b9-07f1973a062f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:fd61aabc00889c5072aff88a86d170e38b66b03e",
      "pattern": "[file:hashes.'SHA-1' = 'fd61aabc00889c5072aff88a86d170e38b66b03e']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:38Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--971bf040-0f5d-5107-906c-6da8337ec2dd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:a60999eedf5fa4eafba99d74af02030e",
      "pattern": "[file:hashes.'MD5' = 'a60999eedf5fa4eafba99d74af02030e']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:38Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--63e9f0b3-c50f-50b3-83ab-4b7ff9dab82f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:8259f98526e20c1b379b361995a6af8f7cf9a57f",
      "pattern": "[file:hashes.'SHA-1' = '8259f98526e20c1b379b361995a6af8f7cf9a57f']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:37Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b54e1c2c-c243-5174-9938-784c02c63ec0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:50c15494ee156198110244e418400e22",
      "pattern": "[file:hashes.'MD5' = '50c15494ee156198110244e418400e22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:37Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8c857e69-cadd-5057-ac10-d9f54be4c994",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:3d94d292b23f88b225f2fbaccaf3bd1515e4b90b",
      "pattern": "[file:hashes.'SHA-1' = '3d94d292b23f88b225f2fbaccaf3bd1515e4b90b']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:36Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f3e067c1-131c-5d5c-84ba-8d323bc5eaab",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:30067aa7ba1c1dd67256eb3df1c36d10",
      "pattern": "[file:hashes.'MD5' = '30067aa7ba1c1dd67256eb3df1c36d10']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:36Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--de572bf4-42e6-53b0-b438-4ff56f18fcfe",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:7c9c6cf9c61c113f530fd993e1703897d8c0790c",
      "pattern": "[file:hashes.'SHA-1' = '7c9c6cf9c61c113f530fd993e1703897d8c0790c']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:35Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--36814707-2c80-5d80-9401-75d704bf730b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:33f9988ad3a9c08af73fceb0779ca7eb",
      "pattern": "[file:hashes.'MD5' = '33f9988ad3a9c08af73fceb0779ca7eb']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:35Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--52e9277b-d059-593a-bfeb-7cca7606aff0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:2a94aba32949a893bcf2c8bf7c63c165",
      "pattern": "[file:hashes.'MD5' = '2a94aba32949a893bcf2c8bf7c63c165']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:34Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2ddca9ff-7452-5b83-9791-afae347ec609",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:2a5130fc7e2e0e2f8a1c124994a2deabc1321e18",
      "pattern": "[file:hashes.'SHA-1' = '2a5130fc7e2e0e2f8a1c124994a2deabc1321e18']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:34Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a99f7124-1d27-523e-b3f8-8172aabfc451",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:d6b4745eba53e6b4fcfe176b6e3b444b0f0258b0",
      "pattern": "[file:hashes.'SHA-1' = 'd6b4745eba53e6b4fcfe176b6e3b444b0f0258b0']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:33Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--31a2a6d3-54ad-5d39-b925-2958f894c3e7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:a44b09d78e4e6dc952800197203744b6",
      "pattern": "[file:hashes.'MD5' = 'a44b09d78e4e6dc952800197203744b6']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:33Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0f96f534-72b5-5923-a5dc-c69771734ad5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:f310d8bf3615ce2877a519640775d56f8a29c493",
      "pattern": "[file:hashes.'SHA-1' = 'f310d8bf3615ce2877a519640775d56f8a29c493']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:32Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e715cebf-de33-5c99-9b41-6f17dff18012",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:e8043f0e17526caaafa67488dd5dff9d",
      "pattern": "[file:hashes.'MD5' = 'e8043f0e17526caaafa67488dd5dff9d']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:32Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6b2e6b61-1c2b-5a83-ae65-9cccb79cbcc3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:e4d9f03e6ed5705a3c76085003708672",
      "pattern": "[file:hashes.'MD5' = 'e4d9f03e6ed5705a3c76085003708672']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:31Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0b02c9bc-8ac1-590c-a742-01b7dfae96da",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:53da7d738c6ac27c3896c92e61cb950c44fbb92e",
      "pattern": "[file:hashes.'SHA-1' = '53da7d738c6ac27c3896c92e61cb950c44fbb92e']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:31Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--66159e01-5574-5143-ab79-e6a63ee7fd70",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:cec00169239d26be042583a4686a7443",
      "pattern": "[file:hashes.'MD5' = 'cec00169239d26be042583a4686a7443']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:30Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d23082dc-f244-50f1-a02b-818506d98035",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:aa3fe7778d9051e21b2c743c721ccffdb1a4ac2b",
      "pattern": "[file:hashes.'SHA-1' = 'aa3fe7778d9051e21b2c743c721ccffdb1a4ac2b']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:30Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--898ad873-4b14-5383-8b12-db49c907cccc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:6fde2e6448bd610d74350aa22d857ea2",
      "pattern": "[file:hashes.'MD5' = '6fde2e6448bd610d74350aa22d857ea2']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:29Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--01cae19a-b685-533a-80ba-7752369ad9fd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:451557402efaf5cfac916540e21840bd7c8eb8ed",
      "pattern": "[file:hashes.'SHA-1' = '451557402efaf5cfac916540e21840bd7c8eb8ed']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:29Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5ce83611-b39e-57c3-875d-3ef34aa7d687",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:61b08489f490887c33c95bcc133041f138ef16ea",
      "pattern": "[file:hashes.'SHA-1' = '61b08489f490887c33c95bcc133041f138ef16ea']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:28Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ad2d213b-ca15-5193-a98b-7aef967d66cf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:491fee22edfa785911d113c4118c7a30",
      "pattern": "[file:hashes.'MD5' = '491fee22edfa785911d113c4118c7a30']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:28Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--971a7b1b-343f-5f37-934a-d0e3ac34b750",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:b0da124d0516528253f93109f57ab11c2ddc6c0b",
      "pattern": "[file:hashes.'SHA-1' = 'b0da124d0516528253f93109f57ab11c2ddc6c0b']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:27Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--24a621fc-b35c-5f54-a296-02acd0aa0536",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:4902f4ba2bd67972289fbd9ce15ba560",
      "pattern": "[file:hashes.'MD5' = '4902f4ba2bd67972289fbd9ce15ba560']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:27Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--18a96cab-29fa-51fc-a8a8-a5c9c8383971",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:ab66b02f6d3a789452d057a87746e62e",
      "pattern": "[file:hashes.'MD5' = 'ab66b02f6d3a789452d057a87746e62e']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:26Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--906b54dd-e3f3-5b03-ba6f-b4616fbc52c0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:5a5ac9624714a1a27abac8221dabd3b3",
      "pattern": "[file:hashes.'MD5' = '5a5ac9624714a1a27abac8221dabd3b3']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:26Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f2d20573-993e-578b-bbf5-3ddfc53a38e5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:334cfc35655efcacad3ceab311e52b1181ac44a0",
      "pattern": "[file:hashes.'SHA-1' = '334cfc35655efcacad3ceab311e52b1181ac44a0']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:26Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--59347311-40b7-5318-a266-cdb77837cce9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:df4e9ed80d80d5d5cac0f2f37eb51d8eddb85626",
      "pattern": "[file:hashes.'SHA-1' = 'df4e9ed80d80d5d5cac0f2f37eb51d8eddb85626']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:25Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f55e785d-f106-5ac3-99eb-40953d57fe98",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:47eb130f82a0ed7ce09a984f92912e5b",
      "pattern": "[file:hashes.'MD5' = '47eb130f82a0ed7ce09a984f92912e5b']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:25Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--04459718-f017-5ba5-b99d-d6661820fd07",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:724ff952801621aeb96eefc38ec5e03e3214e646",
      "pattern": "[file:hashes.'SHA-1' = '724ff952801621aeb96eefc38ec5e03e3214e646']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:24Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1ef11f11-5744-5abb-a798-7e075825a98c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:3743600e163a3311adf4954b3cc16ad3",
      "pattern": "[file:hashes.'MD5' = '3743600e163a3311adf4954b3cc16ad3']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:24Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7b19dde5-3636-55d9-81c2-c12926e6eecf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:d2f26b8ac9967a86498d207936f19a3d",
      "pattern": "[file:hashes.'MD5' = 'd2f26b8ac9967a86498d207936f19a3d']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:23Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c5190da5-4999-535a-a695-a231ecc37c02",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:ce077890a42c12a856aa8bd7edb97241ad32e95d",
      "pattern": "[file:hashes.'SHA-1' = 'ce077890a42c12a856aa8bd7edb97241ad32e95d']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:23Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f3671b30-a911-5e26-ae4c-b41aaf7b8111",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:87f6e41b9c4dfe06f34caf622f4488f92f220a2c",
      "pattern": "[file:hashes.'SHA-1' = '87f6e41b9c4dfe06f34caf622f4488f92f220a2c']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:23Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f62d6cf6-d1bb-5cc1-b4c0-4c9840876d18",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:a30f6edac5bce73ab824a7789a023db3",
      "pattern": "[file:hashes.'MD5' = 'a30f6edac5bce73ab824a7789a023db3']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:22Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5855220d-135f-5a20-a4a8-007f9d5109c2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:c0383319a9b891f618489a338a632ee4",
      "pattern": "[file:hashes.'MD5' = 'c0383319a9b891f618489a338a632ee4']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:21Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0c69a3e0-bfad-565e-aba1-6357209ac0de",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:65fb746270dfe87fd860b1d3dbcacb6ae5d57273",
      "pattern": "[file:hashes.'SHA-1' = '65fb746270dfe87fd860b1d3dbcacb6ae5d57273']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:21Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6f4194ed-fdf9-5990-b45b-11ac8d2a564b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:2bb4ab437db7fe6533bef2350e4eb856cfc72a33",
      "pattern": "[file:hashes.'SHA-1' = '2bb4ab437db7fe6533bef2350e4eb856cfc72a33']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:21Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--95318e98-cf0a-5910-b956-65bd11535a0b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:6b5a5cb88328a12e9be1418a44d6d1016b4ad51e",
      "pattern": "[file:hashes.'SHA-1' = '6b5a5cb88328a12e9be1418a44d6d1016b4ad51e']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:20Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2fbc5f27-08a9-5f05-a5b5-52db6d9ad6dd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:25e32712470da7abb13f03441114edee",
      "pattern": "[file:hashes.'MD5' = '25e32712470da7abb13f03441114edee']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:20Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2ebea0ea-a5cf-5feb-9c6f-a723d5d72047",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:6caea476e8db92cb3fedaf3c6455d6da",
      "pattern": "[file:hashes.'MD5' = '6caea476e8db92cb3fedaf3c6455d6da']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:19Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6ea575b0-d225-5af6-8521-53c241ed2585",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:1eb0beec62da69e1c949f0c036e04a315639f5e7",
      "pattern": "[file:hashes.'SHA-1' = '1eb0beec62da69e1c949f0c036e04a315639f5e7']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:19Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b3ca6694-4014-5ace-b3dc-608af758bb3e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:e8def6f183ba324032a0f0ef06be0f6d",
      "pattern": "[file:hashes.'MD5' = 'e8def6f183ba324032a0f0ef06be0f6d']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:18Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5766de43-fcee-5529-bd5d-d04d31b4e72b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:92a5b2df6e497a8d5c4d8f17157834ab597d435e",
      "pattern": "[file:hashes.'SHA-1' = '92a5b2df6e497a8d5c4d8f17157834ab597d435e']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:18Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1b683f5f-161d-52a1-8503-09effbb8493f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:63a7f54344e8aa6f2d6507e7cf602249",
      "pattern": "[file:hashes.'MD5' = '63a7f54344e8aa6f2d6507e7cf602249']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:18Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--101b380d-e034-5d8b-a842-ef596cd24209",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:b167623c61805abe23fa0e98336571404e745c1d",
      "pattern": "[file:hashes.'SHA-1' = 'b167623c61805abe23fa0e98336571404e745c1d']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:17Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--868cbaaf-a099-5aa4-ac16-6b15bd74f005",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:6ae7ca51332b6d0794f59d0c7e0ec3ac",
      "pattern": "[file:hashes.'MD5' = '6ae7ca51332b6d0794f59d0c7e0ec3ac']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:17Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--15bb5dd8-0084-55b9-9e5f-a9751c3a6b34",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:7b32c0d813a104c42a48fd56612738a364e3ed3d",
      "pattern": "[file:hashes.'SHA-1' = '7b32c0d813a104c42a48fd56612738a364e3ed3d']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:16Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6c74781e-91eb-5449-a948-0461eb4c94f2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:0b7a546d1a6aab11126d57153582d629",
      "pattern": "[file:hashes.'MD5' = '0b7a546d1a6aab11126d57153582d629']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:16Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--641a650b-e6ef-5bb6-ba14-596d7f236484",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:3ef2907c4439b948aaf47c336a307234",
      "pattern": "[file:hashes.'MD5' = '3ef2907c4439b948aaf47c336a307234']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:15Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--302531be-b899-503b-a662-86d1ccb7d07f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:3ca65b3fdd48a978362b898a38f3e3cbdaf98c0b",
      "pattern": "[file:hashes.'SHA-1' = '3ca65b3fdd48a978362b898a38f3e3cbdaf98c0b']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:15Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5ff61b74-0d83-5732-87be-903738ce288c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:e427484696d340c2d9a3a5802d51a155e0748aea",
      "pattern": "[file:hashes.'SHA-1' = 'e427484696d340c2d9a3a5802d51a155e0748aea']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:14Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--af551f04-fedc-5f91-a04a-ed94136045ac",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:608ac71eb6c145880a91731acbb0279d",
      "pattern": "[file:hashes.'MD5' = '608ac71eb6c145880a91731acbb0279d']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:14Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2611447e-e00e-543c-ab79-4d86ef2ccc76",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:2b71bda1912d795a30e56927c4d06370abb25d2a",
      "pattern": "[file:hashes.'SHA-1' = '2b71bda1912d795a30e56927c4d06370abb25d2a']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:14Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--497b56b6-94e9-5333-8fe6-aa8168b4c18a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:f04fd4f78f5626382060a35bac358f7faa8906ca",
      "pattern": "[file:hashes.'SHA-1' = 'f04fd4f78f5626382060a35bac358f7faa8906ca']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:13Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a1e87609-3965-5e8f-b358-28c55a816b79",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:de33da03b9f181fe1f017e871d724acf",
      "pattern": "[file:hashes.'MD5' = 'de33da03b9f181fe1f017e871d724acf']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:13Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--36f3f432-d19a-580f-983c-053d6190e69a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:7021a317c4444eeef49f9fa9e62dfa4c",
      "pattern": "[file:hashes.'MD5' = '7021a317c4444eeef49f9fa9e62dfa4c']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:12Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c3aa2fe9-7506-546d-b17f-58ca5a444260",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:d04f58aeacf42acf7531c8a222a232b10af782d6",
      "pattern": "[file:hashes.'SHA-1' = 'd04f58aeacf42acf7531c8a222a232b10af782d6']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:11Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--81cec9c5-2f9b-5801-b313-3c9cc2f23a32",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:6a675d2436e5857b63a931a10baadd24a20cf4a0",
      "pattern": "[file:hashes.'SHA-1' = '6a675d2436e5857b63a931a10baadd24a20cf4a0']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:11Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3d9968f8-4349-5d1c-b75a-46f13dab73d4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:072d25cb7009bfe854bae28f8382b253",
      "pattern": "[file:hashes.'MD5' = '072d25cb7009bfe854bae28f8382b253']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:11Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--768cf6ba-7ffb-5edc-b9a4-1127cbb6e313",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:6f82c84c364c2f161a25e0a3166e0679aec77135",
      "pattern": "[file:hashes.'SHA-1' = '6f82c84c364c2f161a25e0a3166e0679aec77135']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:10Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--767e3654-5381-5f6a-9788-d6d8156af698",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:0dfbacf8a84c3d73c2a3795543fb66f1",
      "pattern": "[file:hashes.'MD5' = '0dfbacf8a84c3d73c2a3795543fb66f1']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:10Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--98a91b8e-7314-5c69-94bd-2eeddbede209",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:ee3aa922fba0467afe8c73ef7c564955ad681443",
      "pattern": "[file:hashes.'SHA-1' = 'ee3aa922fba0467afe8c73ef7c564955ad681443']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:09Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9b68b1ee-1ac5-5272-b491-6559bb547d91",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:5f127e09c8c5e91f1fbdcfaa08462059",
      "pattern": "[file:hashes.'MD5' = '5f127e09c8c5e91f1fbdcfaa08462059']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:09Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d02343e3-9348-5fb6-a12d-a4b5d0714de6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:b759c9d4d1309f3c442a4471cad09711a74bea31",
      "pattern": "[file:hashes.'SHA-1' = 'b759c9d4d1309f3c442a4471cad09711a74bea31']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:08Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7001a28f-1b47-5d77-9340-8bbb15f8acdb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:5b1bdeb7475422628c597027bfffdc90",
      "pattern": "[file:hashes.'MD5' = '5b1bdeb7475422628c597027bfffdc90']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:08Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--51282917-d76b-529e-b5f0-8b89cfab779a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:24b441f6ebcb14058d7e9006d5be4285",
      "pattern": "[file:hashes.'MD5' = '24b441f6ebcb14058d7e9006d5be4285']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:08Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--46e87175-3628-5d7c-9ff6-f85fb9179fa7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:f52e4f1752d545273542ea05e6ebf75aebb2f63a",
      "pattern": "[file:hashes.'SHA-1' = 'f52e4f1752d545273542ea05e6ebf75aebb2f63a']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:07Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--df52853c-857c-51d5-a13b-ef66d36232a5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:e2729e74cf561ba987df7fc29af950f4",
      "pattern": "[file:hashes.'MD5' = 'e2729e74cf561ba987df7fc29af950f4']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:07Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--80edc595-7c05-5d07-9f09-9a6e23a6a71f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:e679c84bd93c7d1eb9c45f9da590010b",
      "pattern": "[file:hashes.'MD5' = 'e679c84bd93c7d1eb9c45f9da590010b']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:06Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b97b6cd3-7998-5cff-acbe-685eb14cebab",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:dcdeb963a57fef605e253b78eae083dc612459ba",
      "pattern": "[file:hashes.'SHA-1' = 'dcdeb963a57fef605e253b78eae083dc612459ba']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:06Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9ea21177-4c5d-56df-b11d-92ab7d388560",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:27edcf340cec5a7cb309752d2e8253d49fcf77ec",
      "pattern": "[file:hashes.'SHA-1' = '27edcf340cec5a7cb309752d2e8253d49fcf77ec']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:06Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9e0fae1e-0cdd-5b0d-bc34-aa3d97c13869",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:6424a2ca76457d5453a521b8a0fae2bdca1344b8",
      "pattern": "[file:hashes.'SHA-1' = '6424a2ca76457d5453a521b8a0fae2bdca1344b8']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:05Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2c87bd6a-59f1-5f76-a30f-0911785ec414",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:55b4155240cd59c52333dc0f071cbd3c",
      "pattern": "[file:hashes.'MD5' = '55b4155240cd59c52333dc0f071cbd3c']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:05Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d13655f1-c3c8-5276-bf31-2c8ba58dab18",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:cccb0e3bde07ed5c0fa9862a04bfca73",
      "pattern": "[file:hashes.'MD5' = 'cccb0e3bde07ed5c0fa9862a04bfca73']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:04Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b5c63e48-77ac-5bf3-b8ba-fe104fd13650",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:4b50132b8f454347247fc9421f165c447953383b",
      "pattern": "[file:hashes.'SHA-1' = '4b50132b8f454347247fc9421f165c447953383b']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:04Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8d5a8fcb-a6c1-5553-8bb4-66053e65892a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:ce055d1cd5d4a6c06e77b738262b1ec2",
      "pattern": "[file:hashes.'MD5' = 'ce055d1cd5d4a6c06e77b738262b1ec2']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:03Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0a601c3f-70bb-5353-8512-5f2266452e31",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:46ae8e6bd561048c7b30df49071f37b10cfff828",
      "pattern": "[file:hashes.'SHA-1' = '46ae8e6bd561048c7b30df49071f37b10cfff828']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:03Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0eaa32f6-ec25-560f-a224-b8dc283f5286",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:f13966a82ad0e1fb0f66ea0761ff0a45",
      "pattern": "[file:hashes.'MD5' = 'f13966a82ad0e1fb0f66ea0761ff0a45']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:02Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--73c58394-c3da-5ff0-b395-94fe7959e8d1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:8a3a8d5c9cec6606aebfd28307d3c7c8da8de547",
      "pattern": "[file:hashes.'SHA-1' = '8a3a8d5c9cec6606aebfd28307d3c7c8da8de547']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:02Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4501789e-2612-5de4-8882-74761cdf10b3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:bf1f9f377585e81d78d1709cccaff04b",
      "pattern": "[file:hashes.'MD5' = 'bf1f9f377585e81d78d1709cccaff04b']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:01Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2bd93553-eaf3-507d-bedc-f150844fd300",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:b076622c6585d018730db6693a24831412a7152f",
      "pattern": "[file:hashes.'SHA-1' = 'b076622c6585d018730db6693a24831412a7152f']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:01Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8aeb779e-cc19-5f82-a773-60fcefb8e2e2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:791a44436714e7161445fe00c24e491f",
      "pattern": "[file:hashes.'MD5' = '791a44436714e7161445fe00c24e491f']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:01Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0f106cb9-a13f-5eb9-b44d-4b156612146a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha1:64b6de32c3d98184ed3e7fd810ab761dd4132ac8",
      "pattern": "[file:hashes.'SHA-1' = '64b6de32c3d98184ed3e7fd810ab761dd4132ac8']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:23:00Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6b246463-32a3-5815-a21c-65312cacae48",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:aaca23f8317f5622a51d771b840e87097da489804519fdb5b3ca267fadeb630c",
      "pattern": "[file:hashes.'SHA-256' = 'aaca23f8317f5622a51d771b840e87097da489804519fdb5b3ca267fadeb630c']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:21:44Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "macOS",
        "threatfox",
        "willow"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--73634fbf-21f0-5a8b-a822-99fdd270f4dc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://bzf168[.]com/loader[.]ps1",
      "pattern": "[url:value = 'https://bzf168.com/loader.ps1']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:20:22Z",
      "confidence": 80,
      "labels": [
        "ClickFix",
        "HuntCore",
        "powershell",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b3644cb7-dfe0-5777-a72b-6047abb22ebf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://orienttaxtile[.]com/tues/crypted[.]ps1",
      "pattern": "[url:value = 'https://orienttaxtile.com/tues/crypted.ps1']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:20:21Z",
      "confidence": 80,
      "labels": [
        "ClickFix",
        "HuntCore",
        "powershell",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--856bbe77-f97d-5352-8208-48c8e860922d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://vivid-roam-cove-gleon[.]life/t[.]js?site=7f469927630a01245c8e1125bfe9f9cc",
      "pattern": "[url:value = 'https://vivid-roam-cove-gleon.life/t.js?site=7f469927630a01245c8e1125bfe9f9cc']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:19:54Z",
      "confidence": 80,
      "labels": [
        "ClickFix",
        "HuntCore",
        "TDS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7ab19594-b979-5ef9-bb46-226c1b85030a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://pixxarting21[.]life/t[.]js?site=8877e14b1cd4aa573aea550c2ae9c73d",
      "pattern": "[url:value = 'https://pixxarting21.life/t.js?site=8877e14b1cd4aa573aea550c2ae9c73d']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:19:54Z",
      "confidence": 80,
      "labels": [
        "ClickFix",
        "HuntCore",
        "TDS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f172f333-4cb9-5a57-9ffa-6183d70797a1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://mesa-zaimmuen[.]life/t[.]js?site=22bb70d66057a56d34dc29c5b847ae83",
      "pattern": "[url:value = 'https://mesa-zaimmuen.life/t.js?site=22bb70d66057a56d34dc29c5b847ae83']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:19:54Z",
      "confidence": 80,
      "labels": [
        "ClickFix",
        "HuntCore",
        "TDS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c79bc153-a5fe-5691-8833-5999fa71fe3d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://indigo-finch-misgoaen[.]life/t[.]js?site=07c3730c3a7e0cdc33104bbd16e756a9",
      "pattern": "[url:value = 'https://indigo-finch-misgoaen.life/t.js?site=07c3730c3a7e0cdc33104bbd16e756a9']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:19:54Z",
      "confidence": 80,
      "labels": [
        "ClickFix",
        "HuntCore",
        "TDS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6bc7fa2a-aa48-575e-a4a3-4d6bfd23c7d3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://satin-burst19[.]pages[.]dev/win/index[.]php?vq=nxsYfEh3AmI4Wjjxn7UwD1FtbWJnMGE1WkFoODN4d1ZaTy9LSlVSMXE0L25QQTR5TnR3Q3lqcVdLY201ZUtEMVNPNXpKcjRrSE4zeEZLUzQvT3R3QXQ2aWFWVXZ1bzJISWRscVhuVXg5eG9nL2w4TmNpckpneCtrRzZONTFiaFVrb0FxNzF0dSswbjFydEw0V3QwTENwZkk5VW02ZlVLcktZeUlWRmZLOENja2JlYVphK2NJblBhZmFPQStNK2ZLYndvNGl0ZXd3N0V0Q3ZpUQ==",
      "pattern": "[url:value = 'https://satin-burst19.pages.dev/win/index.php?vq=nxsYfEh3AmI4Wjjxn7UwD1FtbWJnMGE1WkFoODN4d1ZaTy9LSlVSMXE0L25QQTR5TnR3Q3lqcVdLY201ZUtEMVNPNXpKcjRrSE4zeEZLUzQvT3R3QXQ2aWFWVXZ1bzJISWRscVhuVXg5eG9nL2w4TmNpckpneCtrRzZONTFiaFVrb0FxNzF0dSswbjFydEw0V3QwTENwZkk5VW02ZlVLcktZeUlWRmZLOENja2JlYVphK2NJblBhZmFPQStNK2ZLYndvNGl0ZXd3N0V0Q3ZpUQ==']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:19:53Z",
      "confidence": 80,
      "labels": [
        "HuntCore",
        "StrelaStealer",
        "TDS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8454baed-ef13-5bf1-87c0-2b422f896400",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://petal2380[.]pages[.]dev/win/index[.]php?vq=dC9lIgV5hOV093/k8lLF6jRCWG1OQ25vaDlCbU9vSmVlaDlBN3JYWXowek8wMENYZ0JMN3UzaVJVdWdqNFpMalJtRU5WalE1RVV4QnBDMEE4R29Da1oyamtQa21xQ01ZdCtaTGIybjhzQlN3T2tLT28rMy9pU1FDSGxWcWxkam9lVUtHY1JSa3NKdm0vTzZQVkF4L0FscDNFOHdkalZ6Smg2Y1lYZzBWM045dDlQMVJJOWNjVFJRU3VsU2Uwd2RxeGRjWkdLNTBsZjh4RnJ2TA==",
      "pattern": "[url:value = 'https://petal2380.pages.dev/win/index.php?vq=dC9lIgV5hOV093/k8lLF6jRCWG1OQ25vaDlCbU9vSmVlaDlBN3JYWXowek8wMENYZ0JMN3UzaVJVdWdqNFpMalJtRU5WalE1RVV4QnBDMEE4R29Da1oyamtQa21xQ01ZdCtaTGIybjhzQlN3T2tLT28rMy9pU1FDSGxWcWxkam9lVUtHY1JSa3NKdm0vTzZQVkF4L0FscDNFOHdkalZ6Smg2Y1lYZzBWM045dDlQMVJJOWNjVFJRU3VsU2Uwd2RxeGRjWkdLNTBsZjh4RnJ2TA==']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:19:53Z",
      "confidence": 80,
      "labels": [
        "HuntCore",
        "StrelaStealer",
        "TDS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c3e9a8f3-d5d7-508a-905e-c4d02ffdf07f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://becheglokevevetoglo[.]beiksk[.]my[.]id/win/index[.]php?vq=p3XT5sNwHLY0JhBAxOGqE2dNbXFDMGZsWERNelRTWTh6V1BFUXlINTZQWnpqb2lHVGFIZ0wyTlB0bGlCSUFyOE9RdGxkbmpFTHc1U3A3dFZMUzN0MUdJZkhFWDY1c3U0YjU4cDdRKytsc2U0dC84eCtDb0tseTdqcGhML3lYQ0haZDF3ZVhMNXdBU1RUWmIyR3E3WUtYTCtHUFVDS0RsaGFtOFI1bjVIV2ZVbk9zN045WVhhdlF4WjIrQldHdVEwbjFCdDU4bHdHcVFEQUgvSw==",
      "pattern": "[url:value = 'https://becheglokevevetoglo.beiksk.my.id/win/index.php?vq=p3XT5sNwHLY0JhBAxOGqE2dNbXFDMGZsWERNelRTWTh6V1BFUXlINTZQWnpqb2lHVGFIZ0wyTlB0bGlCSUFyOE9RdGxkbmpFTHc1U3A3dFZMUzN0MUdJZkhFWDY1c3U0YjU4cDdRKytsc2U0dC84eCtDb0tseTdqcGhML3lYQ0haZDF3ZVhMNXdBU1RUWmIyR3E3WUtYTCtHUFVDS0RsaGFtOFI1bjVIV2ZVbk9zN045WVhhdlF4WjIrQldHdVEwbjFCdDU4bHdHcVFEQUgvSw==']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:19:53Z",
      "confidence": 80,
      "labels": [
        "HuntCore",
        "StrelaStealer",
        "TDS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--64ab31c1-d18d-53e2-a241-2f4b551e570e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:723bf9af34bb6eb9dee369d61aaad2b801cebdf1ebc1840b6100309a93a10234",
      "pattern": "[file:hashes.'SHA-256' = '723bf9af34bb6eb9dee369d61aaad2b801cebdf1ebc1840b6100309a93a10234']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:18:53Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "macOS",
        "quill",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aeb768cb-3dfd-5492-a8ef-bcf857449c12",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://42[.]235[.]93[.]57:36329/i",
      "pattern": "[url:value = 'http://42.235.93.57:36329/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:17:07Z",
      "confidence": 80,
      "labels": [
        "Mozi",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c1f13f90-5ab4-50b2-b433-6075fceb924f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://219[.]155[.]25[.]66:49844/bin[.]sh",
      "pattern": "[url:value = 'http://219.155.25.66:49844/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:17:07Z",
      "confidence": 80,
      "labels": [
        "None",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6493688b-d42d-530c-96f7-47978edb60a8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://119[.]167[.]6[.]233:42241/bin[.]sh",
      "pattern": "[url:value = 'http://119.167.6.233:42241/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:17:07Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "mirai"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ac1a715a-0a7c-517d-a76e-a2cea9a04443",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://36[.]64[.]184[.]26:58931/bin[.]sh",
      "pattern": "[url:value = 'http://36.64.184.26:58931/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:17:06Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "mirai"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--29170c97-1fde-5d05-8104-fd47a80a382d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://113[.]239[.]215[.]5:39653/bin[.]sh",
      "pattern": "[url:value = 'http://113.239.215.5:39653/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:17:06Z",
      "confidence": 80,
      "labels": [
        "None",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3fdd4db1-09a7-5c39-a520-7c518e3bad33",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:838f3f24867b7ec93a6ad13c225b50f34959e7ed558175f9bc1be2a62337e7b7",
      "pattern": "[file:hashes.'SHA-256' = '838f3f24867b7ec93a6ad13c225b50f34959e7ed558175f9bc1be2a62337e7b7']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:16:36Z",
      "confidence": 80,
      "labels": [
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a24da3c2-cb8b-554c-9251-66e1dfce0757",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:1d68dac879f13efe3661f4ec3afcd561962c6388f3bcd595a4579390eb3741d7",
      "pattern": "[file:hashes.'SHA-256' = '1d68dac879f13efe3661f4ec3afcd561962c6388f3bcd595a4579390eb3741d7']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:15:23Z",
      "confidence": 80,
      "labels": [
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--78d28482-579c-57a6-9eaa-d72734c10f2e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:www[.]keithkloor[.]com",
      "pattern": "[domain-name:value = 'www.keithkloor.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:13:10Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--93efd46e-9526-5f3e-9176-b3be43ac2fde",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:www[.]cloudespacios[.]com",
      "pattern": "[domain-name:value = 'www.cloudespacios.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:13:10Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a4f2e216-46a0-5ec1-b763-b58bd4aa5d96",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:festwirte[.]at",
      "pattern": "[domain-name:value = 'festwirte.at']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:13:10Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a1fa78cd-da61-5379-b6c1-e0fc864ae452",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:www[.]neumaticosmarsili[.]com",
      "pattern": "[domain-name:value = 'www.neumaticosmarsili.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:13:09Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--62ef6fc1-786e-54bb-885b-7a60249b6e81",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:www[.]kurbad-st-leonhard[.]de",
      "pattern": "[domain-name:value = 'www.kurbad-st-leonhard.de']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:13:09Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e8d7db45-47cd-5c13-9680-65354fea4268",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:www[.]adrenalinedesign[.]ca",
      "pattern": "[domain-name:value = 'www.adrenalinedesign.ca']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:13:09Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fccffc77-1f7e-522d-8d64-994321c09aec",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:www[.]bluegeneration[.]es",
      "pattern": "[domain-name:value = 'www.bluegeneration.es']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:13:08Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--beaa86b4-d00d-5b64-83a7-e36aba29ac02",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:www[.]ampaescolapalcam[.]com",
      "pattern": "[domain-name:value = 'www.ampaescolapalcam.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:13:08Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6578af1f-55cd-59ff-b700-cb1488a1cd92",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:andrewresearchgroup[.]com",
      "pattern": "[domain-name:value = 'andrewresearchgroup.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:13:08Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4538c515-a6d5-58ec-acda-b1977e9431e2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:sequoia[.]aulasequoia[.]com",
      "pattern": "[domain-name:value = 'sequoia.aulasequoia.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:12:38Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--69f348f6-7608-53cb-bbfd-28ea59847924",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:176[.]121[.]51[.]1",
      "pattern": "[ipv4-addr:value = '176.121.51.1']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:05:06Z",
      "confidence": 80,
      "labels": [
        "CobaltStrike",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e98f6006-ea62-5d12-8e41-60df3f0163b5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:c1512ef000b9eae519fb8e7faac4e941ef07327c927b42aaa6556020b1ff940d",
      "pattern": "[file:hashes.'SHA-256' = 'c1512ef000b9eae519fb8e7faac4e941ef07327c927b42aaa6556020b1ff940d']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:02:50Z",
      "confidence": 80,
      "labels": [
        "Mirai",
        "elf",
        "malware",
        "threatfox"
      ],
      "x_swiftioc_source": "malwarebazaar_recent,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--136739f8-7e3e-5f26-b9b3-35879efbdb57",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://222[.]138[.]181[.]116:57700/i",
      "pattern": "[url:value = 'http://222.138.181.116:57700/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:02:06Z",
      "confidence": 80,
      "labels": [
        "None",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6488d13f-0786-5d20-9f0c-aeb25901493a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://milliondollaradjuster[.]com/",
      "pattern": "[url:value = 'https://milliondollaradjuster.com/']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T17:00:37Z",
      "confidence": 80,
      "labels": [
        "ClickFix",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ccfc42f4-93cc-5eef-a347-c2200de19d64",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:secrets[.]digistag[.]com",
      "pattern": "[domain-name:value = 'secrets.digistag.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T16:59:47Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--12b02b7d-5a86-5038-a179-4523ba1ed978",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:185[.]193[.]125[.]201",
      "pattern": "[ipv4-addr:value = '185.193.125.201']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T16:58:50Z",
      "confidence": 80,
      "labels": [
        "shodan",
        "sliver",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5d8d82ac-10bb-5c63-b8e8-a3f9aad104fb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:168[.]138[.]40[.]244",
      "pattern": "[ipv4-addr:value = '168.138.40.244']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T16:58:50Z",
      "confidence": 80,
      "labels": [
        "shodan",
        "sliver",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--65b831a2-1234-56d4-a122-a9545846b420",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:151[.]245[.]121[.]241",
      "pattern": "[ipv4-addr:value = '151.245.121.241']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T16:58:50Z",
      "confidence": 80,
      "labels": [
        "shodan",
        "sliver",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1c55ad16-181a-57cc-9904-6c829d4dd0a9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://45[.]168[.]132[.]19:52930/bin[.]sh",
      "pattern": "[url:value = 'http://45.168.132.19:52930/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T16:57:09Z",
      "confidence": 80,
      "labels": [
        "32-bit",
        "Mozi",
        "arm",
        "elf",
        "malware",
        "malware_download",
        "mirai"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--475c2201-5a0f-54be-8391-df72b68c9db6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:f2d1d180f8965ccb3fb7f8484d32f36606c2def8e0e77151d06994c97b99a1cf",
      "pattern": "[file:hashes.'SHA-256' = 'f2d1d180f8965ccb3fb7f8484d32f36606c2def8e0e77151d06994c97b99a1cf']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T16:55:09Z",
      "confidence": 80,
      "labels": [
        "Dropper",
        "Loader",
        "SmartLoader",
        "threatfox",
        "trojan",
        "zip"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dd5460fa-b7ec-5644-b03e-6483cfe7eef6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:3bc8f5abac7902afc33890e63375ab4b0e964bbb34c5d90f62f4684c267a9a81",
      "pattern": "[file:hashes.'SHA-256' = '3bc8f5abac7902afc33890e63375ab4b0e964bbb34c5d90f62f4684c267a9a81']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T16:54:52Z",
      "confidence": 80,
      "labels": [
        "Mirai",
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fb4d4aef-8d63-53f0-8379-cd91fef88539",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:arclight[.]pipesnmetals[.]com",
      "pattern": "[domain-name:value = 'arclight.pipesnmetals.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T16:49:50Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f58ab8f6-8f40-5fda-afcc-9067d0cf79e3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://175[.]165[.]85[.]124:39259/bin[.]sh",
      "pattern": "[url:value = 'http://175.165.85.124:39259/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T16:47:05Z",
      "confidence": 80,
      "labels": [
        "None",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f762bca5-c1cb-5cd7-a1cb-08d73cff8348",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:17795cb14f6439fd0e582965092462a5e2712c0be7595de9ebbef82955d2d6f7",
      "pattern": "[file:hashes.'SHA-256' = '17795cb14f6439fd0e582965092462a5e2712c0be7595de9ebbef82955d2d6f7']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T16:43:34Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "macOS",
        "quill",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b87146e3-4d58-5591-b02f-4574e271877d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:74fec4a8c642eaa88b425fd531660e8522a5b789c26a2bf3fc75fef1031d63d9",
      "pattern": "[file:hashes.'SHA-256' = '74fec4a8c642eaa88b425fd531660e8522a5b789c26a2bf3fc75fef1031d63d9']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T16:42:57Z",
      "confidence": 80,
      "labels": [
        "Mirai",
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--095109e7-d188-5858-9d92-9afaf6419309",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:1274915e5b08b24be73bb4d7e55d1cc66784d719f23e1d40b28b41fe7e8eaff6",
      "pattern": "[file:hashes.'SHA-256' = '1274915e5b08b24be73bb4d7e55d1cc66784d719f23e1d40b28b41fe7e8eaff6']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T16:40:01Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "forge",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ccf411b6-cd85-5fea-a89e-f6c6bb0c2630",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:4beec0e6bee458e08302f47523f715adc0e022580961f23ca1949d424bf3286c",
      "pattern": "[file:hashes.'SHA-256' = '4beec0e6bee458e08302f47523f715adc0e022580961f23ca1949d424bf3286c']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T16:35:41Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "boost",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5d29d56a-aa1f-5219-a1a9-5ee08161b16a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:f1f746717376e41575fec18ad5b87b2afce1b685372b2c467880c74f324b8665",
      "pattern": "[file:hashes.'SHA-256' = 'f1f746717376e41575fec18ad5b87b2afce1b685372b2c467880c74f324b8665']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T16:35:09Z",
      "confidence": 80,
      "labels": [
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d6e4b1d0-6d18-5f17-91ac-4a4150bc7479",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:7c106bee72c67ed07bb4b5cdf7638b9bdb89dd1bceacb53b2fd7099411419ff7",
      "pattern": "[file:hashes.'SHA-256' = '7c106bee72c67ed07bb4b5cdf7638b9bdb89dd1bceacb53b2fd7099411419ff7']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T16:34:24Z",
      "confidence": 80,
      "labels": [
        "asyncrat",
        "cloaked",
        "exe",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--20110933-ce4a-5a88-ae8a-4bccd5a29846",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:2f8d04858dcd75554f00bb5fd9011126665f90b91428222c29897275662f6619",
      "pattern": "[file:hashes.'SHA-256' = '2f8d04858dcd75554f00bb5fd9011126665f90b91428222c29897275662f6619']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T16:34:07Z",
      "confidence": 80,
      "labels": [
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cd903c71-d96e-5906-a133-7aa0de9bbde0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:1pbwy4ua[.]yellohotelsharmoni[.]com",
      "pattern": "[domain-name:value = '1pbwy4ua.yellohotelsharmoni.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T16:33:01Z",
      "confidence": 80,
      "labels": [
        "ClearFake",
        "mac-0xdcf2",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2100a476-d7be-5f86-9d9b-01f1b544cbe5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:0504b06803101b636501015a222db8c5cc9b74380df9c1794ea1f426cbc0e077",
      "pattern": "[file:hashes.'SHA-256' = '0504b06803101b636501015a222db8c5cc9b74380df9c1794ea1f426cbc0e077']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T16:32:51Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "macOS",
        "stratos",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b09068b7-13ba-5522-9d6e-4811a651a6fb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://115[.]58[.]83[.]67:35603/bin[.]sh",
      "pattern": "[url:value = 'http://115.58.83.67:35603/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T16:32:06Z",
      "confidence": 80,
      "labels": [
        "Mozi",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--34bb1f7c-3ed2-5fbc-8137-9751dbaf807d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://58[.]209[.]25[.]64:46787/bin[.]sh",
      "pattern": "[url:value = 'http://58.209.25.64:46787/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T16:30:18Z",
      "confidence": 80,
      "labels": [
        "32-bit",
        "Mozi",
        "arm",
        "elf",
        "malware",
        "malware_download",
        "mirai"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--368d63bb-a2de-5e3a-bd41-f1e580259c30",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:64283a6ff8e44d5e0a5245d7aaeffaed6cd7e717ee5d18602e6f3065f30e5331",
      "pattern": "[file:hashes.'SHA-256' = '64283a6ff8e44d5e0a5245d7aaeffaed6cd7e717ee5d18602e6f3065f30e5331']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T16:29:49Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "grove",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e873cfc6-c533-57d4-8247-5deced72bc69",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:4ff3bf776ed2d9d62f056bd9d7a6c4a835bd6dabb13d881fe0d42bd76146bbea",
      "pattern": "[file:hashes.'SHA-256' = '4ff3bf776ed2d9d62f056bd9d7a6c4a835bd6dabb13d881fe0d42bd76146bbea']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T16:28:18Z",
      "confidence": 80,
      "labels": [
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--68541972-5644-51f4-8a4f-c15fec00ab85",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:658e5607fc552a94892c0fe0fa8f23a9642ebcce9b676ee59d450333c87325c7",
      "pattern": "[file:hashes.'SHA-256' = '658e5607fc552a94892c0fe0fa8f23a9642ebcce9b676ee59d450333c87325c7']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T16:26:57Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "frame97",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--690d78cf-a894-56df-b5ce-f7f058cab405",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://45[.]168[.]132[.]19:52930/i",
      "pattern": "[url:value = 'http://45.168.132.19:52930/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T16:26:18Z",
      "confidence": 80,
      "labels": [
        "Mozi",
        "arm",
        "cowrie",
        "elf",
        "honeypot",
        "malware",
        "malware_download",
        "mirai"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--37bdfc0e-6902-5c5e-a10c-6187cfe932da",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://182[.]119[.]196[.]49:35839/i",
      "pattern": "[url:value = 'http://182.119.196.49:35839/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T16:24:15Z",
      "confidence": 80,
      "labels": [
        "32-bit",
        "Mozi",
        "arm",
        "elf",
        "malware",
        "malware_download",
        "mirai"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f161f4a9-95b5-557d-8661-513d50233613",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:cfc034f436aa8212f587f421ee6abd59ba805d48553604d183c0ec432a79450b",
      "pattern": "[file:hashes.'SHA-256' = 'cfc034f436aa8212f587f421ee6abd59ba805d48553604d183c0ec432a79450b']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T16:24:00Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "frame",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3eaa478b-e7fd-532a-8c44-93689c81b42d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:srv45056[.]seohost[.]com[.]pl",
      "pattern": "[domain-name:value = 'srv45056.seohost.com.pl']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T16:23:52Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--81474887-0f5d-5773-be62-9fe241783d36",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://60[.]22[.]253[.]0:39746/bin[.]sh",
      "pattern": "[url:value = 'http://60.22.253.0:39746/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T16:21:13Z",
      "confidence": 80,
      "labels": [
        "32-bit",
        "Mozi",
        "elf",
        "malware",
        "malware_download",
        "mips"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--26fe74e5-68e6-55e3-b2aa-8d6c6773df92",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:e1b9cdc533e3794ccf8248a2acf3f2f4f316c9330169559e6231ccf8faa22883",
      "pattern": "[file:hashes.'SHA-256' = 'e1b9cdc533e3794ccf8248a2acf3f2f4f316c9330169559e6231ccf8faa22883']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T16:20:55Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "macOS",
        "nova",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2c12c916-7c2a-5ad6-a7ef-643ab6ef3d6d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:sm8gy4u6[.]ozabet[.]promo",
      "pattern": "[domain-name:value = 'sm8gy4u6.ozabet.promo']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T16:19:35Z",
      "confidence": 80,
      "labels": [
        "ClearFake",
        "mac-0x0f14",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c4ec368a-dbbe-554c-b4cc-065b4615401c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:d2101be936ffcb1184de51f9752ca24923e4317bbc9b3b0f7809de65d4d1cd00",
      "pattern": "[file:hashes.'SHA-256' = 'd2101be936ffcb1184de51f9752ca24923e4317bbc9b3b0f7809de65d4d1cd00']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T16:18:08Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "haven",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--08e1d401-d915-51e0-8ef1-7f83ffb4c7ef",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:63ba3a7317f12efb1090152c900234cbe86477b81ceefac2987055d289d8fe1d",
      "pattern": "[file:hashes.'SHA-256' = '63ba3a7317f12efb1090152c900234cbe86477b81ceefac2987055d289d8fe1d']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T16:17:49Z",
      "confidence": 80,
      "labels": [
        "Stealc",
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--17cb717d-98bc-5aa3-a64c-99d69e56a6d4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:82061fd122570b8403a7586ece50917c1c9a59d0b3b19430fb6b6aae0c9bfa97",
      "pattern": "[file:hashes.'SHA-256' = '82061fd122570b8403a7586ece50917c1c9a59d0b3b19430fb6b6aae0c9bfa97']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T16:17:43Z",
      "confidence": 80,
      "labels": [
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--93c14bb5-8394-5912-aef3-ae54442bc418",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://182[.]121[.]86[.]173:53303/i",
      "pattern": "[url:value = 'http://182.121.86.173:53303/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T16:17:06Z",
      "confidence": 80,
      "labels": [
        "Mozi",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--71dd183c-3ed7-5e9e-b638-d1743f066666",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://182[.]121[.]86[.]173:53303/bin[.]sh",
      "pattern": "[url:value = 'http://182.121.86.173:53303/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T16:17:06Z",
      "confidence": 80,
      "labels": [
        "Mozi",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--94cacda9-5617-5e27-844b-7a10ff3ef0d5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:5fb388930a0fd3fc0173a8bd64356ca7fb558c53bf16a4b241e6c843d5937d68",
      "pattern": "[file:hashes.'SHA-256' = '5fb388930a0fd3fc0173a8bd64356ca7fb558c53bf16a4b241e6c843d5937d68']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T16:15:20Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "chant",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c6636844-8a56-5d93-b291-f42c01dd3e80",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:2d2a95ddad86b51aceba55a10dc9d66489e7188f50cb8cd1eff7af115d136966",
      "pattern": "[file:hashes.'SHA-256' = '2d2a95ddad86b51aceba55a10dc9d66489e7188f50cb8cd1eff7af115d136966']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T16:14:46Z",
      "confidence": 80,
      "labels": [
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0963d21b-bcee-507e-8475-d958238b646e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Srilaxman05/simple-tag-game/refs/heads/main/my-game/simple-tag-game_v2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Srilaxman05/simple-tag-game/refs/heads/main/my-game/simple-tag-game_v2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T16:14:05Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--36904be5-71a5-5acf-afbd-2c2e8aea2b1e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://106[.]57[.]1[.]7:33626/i",
      "pattern": "[url:value = 'http://106.57.1.7:33626/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T16:13:21Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "mirai"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d067836d-b05c-5236-9ab5-d7f2a6ff0935",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://106[.]57[.]1[.]7:33626/bin[.]sh",
      "pattern": "[url:value = 'http://106.57.1.7:33626/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T16:13:19Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "mirai"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7a7031ec-9515-57b6-86fd-37a1e7bd2cbf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://113[.]228[.]159[.]90:52051/i",
      "pattern": "[url:value = 'http://113.228.159.90:52051/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T16:13:16Z",
      "confidence": 80,
      "labels": [
        "32-bit",
        "Mozi",
        "elf",
        "malware",
        "malware_download",
        "mips"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--43af3e0c-e417-5fbc-9103-c1833982104c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://119[.]116[.]39[.]44:41890/i",
      "pattern": "[url:value = 'http://119.116.39.44:41890/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T16:13:06Z",
      "confidence": 80,
      "labels": [
        "None",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5680d15a-5e30-5bd7-b459-294618d15ef6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:477ce161da70a3c0c05eb3d5ffa710f10e20423f6c9bf416a4f4c637d3a59e3f",
      "pattern": "[file:hashes.'SHA-256' = '477ce161da70a3c0c05eb3d5ffa710f10e20423f6c9bf416a4f4c637d3a59e3f']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T16:12:32Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "macOS",
        "threatfox",
        "willow"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a71ef18b-0877-5439-b0b2-3617f2728c71",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:42[.]51[.]33[.]180",
      "pattern": "[ipv4-addr:value = '42.51.33.180']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T16:05:06Z",
      "confidence": 80,
      "labels": [
        "Vshell",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f4f35308-1b88-567d-bba2-764a297a90fe",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:dewa898slot[.]co",
      "pattern": "[domain-name:value = 'dewa898slot.co']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T16:03:34Z",
      "confidence": 80,
      "labels": [
        "exe",
        "malware",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5751ef0c-a762-5457-a932-07e9290800d1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:5f7153d8aed32a5f40279a229a189cd44a8a9dbb900c0dd850ceb5066ee640b4",
      "pattern": "[file:hashes.'SHA-256' = '5f7153d8aed32a5f40279a229a189cd44a8a9dbb900c0dd850ceb5066ee640b4']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T16:01:01Z",
      "confidence": 80,
      "labels": [
        "Mirai",
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ba20815d-9dc5-5540-b33b-9803d4a81170",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:98win[.]tools",
      "pattern": "[domain-name:value = '98win.tools']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T16:00:30Z",
      "confidence": 80,
      "labels": [
        "asyncrat",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4869f7a8-0c27-5972-b4cc-6b0c53bc9b1d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/iplProject/refs/heads/main/component/Project-ipl-v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/iplProject/refs/heads/main/component/Project-ipl-v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c1c9b113-7df8-52f7-8f6c-20ff7dc253bf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Santex12/santex12[.]github[.]io/refs/heads/main/mistakeful/santex-github-io-v2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Santex12/santex12.github.io/refs/heads/main/mistakeful/santex-github-io-v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e854cd5d-f08b-5925-99e0-07832acf9136",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/999xavier/999xavier[.]github[.]io/refs/heads/main/bulky/github_io_xavier_v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/999xavier/999xavier.github.io/refs/heads/main/bulky/github_io_xavier_v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--682e4eff-c543-58d1-bd55-3338d0d1f268",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/devang-p12/devang-p12[.]github[.]io/refs/heads/main/Seljukian/devang-p-io-github-v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/devang-p12/devang-p12.github.io/refs/heads/main/Seljukian/devang-p-io-github-v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--58b6b3dd-1b0e-51d0-b6ae-f3efaa4f1349",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/agnet57/HMS/refs/heads/main/Zoanthacea/Software-v1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/agnet57/HMS/refs/heads/main/Zoanthacea/Software-v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ab96a6ef-f56d-565f-ac04-68d6cd129eb4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tanikai-Ganesh/first_end_to_end_ml/refs/heads/main/notebook/first_end_to_end_ml-v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tanikai-Ganesh/first_end_to_end_ml/refs/heads/main/notebook/first_end_to_end_ml-v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fc77b0ec-8bc3-5ce0-8844-61af4816aefa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Shaswat0/spotify-project/refs/heads/main/project/project-spotify-2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Shaswat0/spotify-project/refs/heads/main/project/project-spotify-2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--84d241e4-0720-5200-a5bb-2b25e68dfa16",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ramningwal1/ramningwal1[.]github[.]io/refs/heads/main/arratel/io-ramningwal-github-1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ramningwal1/ramningwal1.github.io/refs/heads/main/arratel/io-ramningwal-github-1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0a7834d3-177d-5e84-af0c-325f0befeaab",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/zuqorl/aaaaaaa/refs/heads/main/thackless/Software_v1[.]5-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/zuqorl/aaaaaaa/refs/heads/main/thackless/Software_v1.5-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3addf49e-ef16-51fe-8a47-32e8ec47130c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ryrydagoat/AUTODEALER/refs/heads/main/subdue/Software_2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ryrydagoat/AUTODEALER/refs/heads/main/subdue/Software_2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f11c90c7-4c88-5753-b5c6-b7ac7e5b8c8d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rajan-raj-22/Project_6_AI-Powered-Social-Media-Post-Generator/refs/heads/main/papaw/Project_6_AI-Powered-Social-Media-Post-Generator_ludicrosity[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rajan-raj-22/Project_6_AI-Powered-Social-Media-Post-Generator/refs/heads/main/papaw/Project_6_AI-Powered-Social-Media-Post-Generator_ludicrosity.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f1bcde6d-bb74-5987-8228-8efb86d5838d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/lyser07/lyser07[.]github[.]io/refs/heads/main/outstorm/io_lyser_github_Aventine[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/lyser07/lyser07.github.io/refs/heads/main/outstorm/io_lyser_github_Aventine.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--81d65aa2-4607-556c-9563-8e59127de00d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/weather-app/refs/heads/main/Schrund/weather_app_v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/weather-app/refs/heads/main/Schrund/weather_app_v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--79e19250-b2e1-5fbf-9d39-41ef2c9020b4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/YUNOSTAR444/Ape-Labs/refs/heads/main/Assets/Samples/XR%20Interaction%20Toolkit/3[.]0[.]1/Starter%20Assets/DemoSceneAssets/Textures/Ape-Labs_2[.]0-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/YUNOSTAR444/Ape-Labs/refs/heads/main/Assets/Samples/XR%20Interaction%20Toolkit/3.0.1/Starter%20Assets/DemoSceneAssets/Textures/Ape-Labs_2.0-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--54393c46-bda0-5629-b89c-1b401178cc5b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tanikai-Ganesh/mlproject_new/refs/heads/main/notebook/catboost_info/learn/mlproject_new-v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tanikai-Ganesh/mlproject_new/refs/heads/main/notebook/catboost_info/learn/mlproject_new-v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dd05449f-d3af-5923-a468-05b1fd4a8d7e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Selvaprakash-Ramalingam/MyProject/refs/heads/main/MyProject/My_Project_1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Selvaprakash-Ramalingam/MyProject/refs/heads/main/MyProject/My_Project_1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ada61a0a-d0f6-593e-83a8-c0f03c9129e9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/FutureGenerationHub/refs/heads/master/Areas/Identity/Pages/Generation-Future-Hub-v1[.]2-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/FutureGenerationHub/refs/heads/master/Areas/Identity/Pages/Generation-Future-Hub-v1.2-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--83725de0-d156-5548-958c-cc074b9e6f87",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://182[.]233[.]3[.]133:43326/bin[.]sh",
      "pattern": "[url:value = 'http://182.233.3.133:43326/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:45Z",
      "confidence": 80,
      "labels": [
        "Mozi",
        "arm",
        "cowrie",
        "elf",
        "honeypot",
        "malware",
        "malware_download",
        "mirai"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--613981ae-d769-5095-9efe-af097d0906c3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/tauheedsavage/tauheedsavage[.]github[.]io/refs/heads/main/Aristarch/github_io_tauheedsavage_1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/tauheedsavage/tauheedsavage.github.io/refs/heads/main/Aristarch/github_io_tauheedsavage_1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--004b07f1-cbeb-5f22-b1fd-3dab1cc33cf8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/shirshakrb/bo3-mxt-mod-menu-suite/refs/heads/branch/cacuminal/bo3-mxt-mod-menu-suite-1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/shirshakrb/bo3-mxt-mod-menu-suite/refs/heads/branch/cacuminal/bo3-mxt-mod-menu-suite-1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--50ab0e4e-ea46-5428-aad7-fe5252d331da",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/neshat73/WebApp/refs/heads/main/amanitine/App-Web-1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/neshat73/WebApp/refs/heads/main/amanitine/App-Web-1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--69052e6c-b70b-52f1-b3de-b4ebb0d6fb3f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kushal0451/vargaiptv0/refs/heads/main/executiveness/vargaiptv-3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kushal0451/vargaiptv0/refs/heads/main/executiveness/vargaiptv-3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e117034a-7ae9-5880-bdce-11ca6a9f1b70",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/bajaputih/NeuroAi/refs/heads/main/azobacter/Ai_Neuro_v2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/bajaputih/NeuroAi/refs/heads/main/azobacter/Ai_Neuro_v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ded62ec0-1553-5716-8c6a-96865c6834ae",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/abdulhamidali1/abdulhamidali1[.]github[.]io/refs/heads/main/agglutination/io_abdulhamidali_github_3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/abdulhamidali1/abdulhamidali1.github.io/refs/heads/main/agglutination/io_abdulhamidali_github_3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e6754614-86b5-5373-b966-1813b7425de6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Amine123-fd/amine123-fd[.]github[.]io/refs/heads/main/lacepiece/github_fd_amine_io_3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Amine123-fd/amine123-fd.github.io/refs/heads/main/lacepiece/github_fd_amine_io_3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7476dceb-6dc2-512c-9ef8-9b8512733d9e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AlejandroVelezGuillermo/ArbolesBinario/refs/heads/main/arboles%20binarios%20busqueda/Binario_Arboles_v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AlejandroVelezGuillermo/ArbolesBinario/refs/heads/main/arboles%20binarios%20busqueda/Binario_Arboles_v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2b8de583-cb86-5b0b-a708-029525a92cd2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://files[.]8weeksaverage[.]xyz/sylant[.]class",
      "pattern": "[url:value = 'https://files.8weeksaverage.xyz/sylant.class']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:43Z",
      "confidence": 80,
      "labels": [
        "java",
        "malware",
        "malware_download",
        "minecraft",
        "stealer"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c860ceb3-6e21-5573-bafa-139b80727122",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/peterodhiamboo/public_snippets/refs/heads/master/lux/public_snippets[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/peterodhiamboo/public_snippets/refs/heads/master/lux/public_snippets.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a6f8e8e2-748f-5e56-8f42-56f3008e1c3d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ratmik893/ratmik893[.]github[.]io/refs/heads/main/ixodic/ratmik-io-github-1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ratmik893/ratmik893.github.io/refs/heads/main/ixodic/ratmik-io-github-1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--09bf1914-8af2-56a2-810b-a0716990e3d8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/matiaslanza99/Portfolio/refs/heads/main/src/Software_2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/matiaslanza99/Portfolio/refs/heads/main/src/Software_2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:41Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9a29eb79-1f3e-545b-818d-fe72464707dc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/janachure/proyecto_filtros/refs/heads/main/semitechnical/filtros-proyecto-v1[.]6-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/janachure/proyecto_filtros/refs/heads/main/semitechnical/filtros-proyecto-v1.6-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:41Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--08fa9d81-c95e-51e4-8f6c-f6eed700156b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tarkov-creates/tarkov-creates[.]github[.]io/refs/heads/main/fannier/io-github-tarkov-creates-3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tarkov-creates/tarkov-creates.github.io/refs/heads/main/fannier/io-github-tarkov-creates-3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:41Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--86cae56e-edf3-5df9-969d-08e14a78ad43",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Pinquei/Meter-dectector/refs/heads/master/224/Meter-dectector-v3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Pinquei/Meter-dectector/refs/heads/master/224/Meter-dectector-v3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:41Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9e532c40-e8a0-559f-9201-2bfb0e079be5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Dr4gon42/dr4gon42[.]github[.]io/refs/heads/main/Magyar/github_dr_io_gon_v3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Dr4gon42/dr4gon42.github.io/refs/heads/main/Magyar/github_dr_io_gon_v3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:41Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e7853ffc-918c-57f8-b8ac-c915200c1f38",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Amaldas1243/amaldas1243[.]github[.]io/refs/heads/main/sawed/amaldas_github_io_3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Amaldas1243/amaldas1243.github.io/refs/heads/main/sawed/amaldas_github_io_3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:41Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1eb816c5-0f13-5636-84d3-8a1b4e596eca",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ryrydagoat/AUTO-STEAL/refs/heads/main/oilproof/AUT-STEAL-v1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ryrydagoat/AUTO-STEAL/refs/heads/main/oilproof/AUT-STEAL-v1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1e289eb5-0f9a-59fd-b637-64672dc9bad6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SEVORDW/SEVORDW/refs/heads/main/pontiff/Software_v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SEVORDW/SEVORDW/refs/heads/main/pontiff/Software_v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1d1fab41-faef-55d2-a93b-60d7886eff28",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Alvin1231231231/alvin1231231231[.]github[.]io/refs/heads/main/ungassed/github_alvin_io_v1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Alvin1231231231/alvin1231231231.github.io/refs/heads/main/ungassed/github_alvin_io_v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b2cbfbec-a8f1-591c-9756-a7a705913d56",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sanjay18066/sanjay18066[.]github[.]io/refs/heads/main/aureously/github_io_sanjay_v3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sanjay18066/sanjay18066.github.io/refs/heads/main/aureously/github_io_sanjay_v3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1b0e8eae-c992-5055-8a63-fcea678313a7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/reitage/reitage[.]github[.]io/refs/heads/main/unmisunderstanding/reitage_github_io_v3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/reitage/reitage.github.io/refs/heads/main/unmisunderstanding/reitage_github_io_v3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8dc998a3-be85-501b-ad88-00984473edd9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/To-Do-List/refs/heads/main/images/List-Do-To-v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/To-Do-List/refs/heads/main/images/List-Do-To-v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ebcaa331-3687-556c-9a6c-ce6a039120e8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Cookiewoolv/Allen-Animations/refs/heads/main/Echinosphaeritidae/Allen-Animations_v2[.]7-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Cookiewoolv/Allen-Animations/refs/heads/main/Echinosphaeritidae/Allen-Animations_v2.7-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--25da5520-c7f0-539a-a154-2492c21d1a72",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GauravSharmaXD/Resume/refs/heads/main/lib/counterup/Software_2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GauravSharmaXD/Resume/refs/heads/main/lib/counterup/Software_2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--347f7131-31d3-5b29-8aa0-b5b4d25ebd34",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AliAhmed031104/BoyfriendDungeon-UnlockedEdition/refs/heads/main/slummocky/Dungeon_Edition_Unlocked_Boyfriend_v2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AliAhmed031104/BoyfriendDungeon-UnlockedEdition/refs/heads/main/slummocky/Dungeon_Edition_Unlocked_Boyfriend_v2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8cff212a-ed6f-54b5-80a7-4fe006aae024",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/andry06/andry06[.]github[.]io/raw/main/linguistically/andry06[.]github[.]io[.]zip",
      "pattern": "[url:value = 'https://github.com/andry06/andry06.github.io/raw/main/linguistically/andry06.github.io.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:38Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4c22aa02-fd2f-53ea-bce4-a6595ff806c0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://115[.]55[.]181[.]109:57147/Mozi[.]a",
      "pattern": "[url:value = 'http://115.55.181.109:57147/Mozi.a']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:38Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "mirai"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--04c3f4b1-fb8d-5b19-a4c7-057a0c525bfb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/wagehmohamed/wagehmohamed[.]github[.]io/refs/heads/main/collusion/github-wagehmohamed-io-v1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/wagehmohamed/wagehmohamed.github.io/refs/heads/main/collusion/github-wagehmohamed-io-v1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c8835bc3-4ea6-50a3-8bb9-7d856b3ddc0a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nimsangsyangb/nimsangsyangb[.]github[.]io/refs/heads/main/cynography/nimsangsyangb_github_io_v1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nimsangsyangb/nimsangsyangb.github.io/refs/heads/main/cynography/nimsangsyangb_github_io_v1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3a7fb013-3fad-5cef-a97a-0587426a2a86",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/flydeas/flydeas[.]github[.]io/refs/heads/main/Elamite/flydeas_github_io_3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/flydeas/flydeas.github.io/refs/heads/main/Elamite/flydeas_github_io_3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e3ead70d-660e-5fda-b245-ccf162318046",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Hikaru17zx/hikaru17zx[.]github[.]io/refs/heads/main/cleidohyoid/github-io-hikaru-zx-2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Hikaru17zx/hikaru17zx.github.io/refs/heads/main/cleidohyoid/github-io-hikaru-zx-2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d7869dcd-cbcd-5aaa-9cec-35c67f0cf2af",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AlejandroVelezGuillermo/GrafosVB/refs/heads/main/GrafosVB/GrafosVB/obj/Debug/net6[.]0-windows/refint/VB_Grafos_v1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AlejandroVelezGuillermo/GrafosVB/refs/heads/main/GrafosVB/GrafosVB/obj/Debug/net6.0-windows/refint/VB_Grafos_v1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6ab7fd6e-9f56-5c29-b93d-1a44c2adaaa6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/setbica/setbica[.]github[.]io/refs/heads/main/ductileness/io-github-setbica-2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/setbica/setbica.github.io/refs/heads/main/ductileness/io-github-setbica-2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--51025552-5733-59ac-a63c-df5e7897dd26",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ocriadorai/caixa/refs/heads/main/evaluative/Software_1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ocriadorai/caixa/refs/heads/main/evaluative/Software_1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ccd2122c-be43-5df3-a5d6-ed8b3ecbb46f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ErissonSilverioN/Tarea-3-EjerciciosLibro/refs/heads/master/Tarea-3-EjerciciosLibros/Tarea_Ejercicios_Libro_1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ErissonSilverioN/Tarea-3-EjerciciosLibro/refs/heads/master/Tarea-3-EjerciciosLibros/Tarea_Ejercicios_Libro_1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c14ec545-44e2-52b8-b277-d835bd7a5686",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/zuqorl/testaaa/refs/heads/main/Odontaspidae/Software-v1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/zuqorl/testaaa/refs/heads/main/Odontaspidae/Software-v1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:35Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--10599350-35ec-5da2-b40f-f9c9ff330bf4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/valentin001-77/valentin001-77[.]github[.]io/refs/heads/main/Staatsrat/github_valentin_io_1[.]1-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/valentin001-77/valentin001-77.github.io/refs/heads/main/Staatsrat/github_valentin_io_1.1-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:35Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d57451de-d181-5023-8f79-17279cfd5cae",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/legend401/legend401[.]github[.]io/refs/heads/main/overgenerosity/legend-github-io-v1[.]0-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/legend401/legend401.github.io/refs/heads/main/overgenerosity/legend-github-io-v1.0-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:35Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5ad239f0-2ee1-5537-8ca7-d16dc33ac547",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Sajin46/anime[.]java/refs/heads/main/sportswomanship/anime_java_holometabolian[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Sajin46/anime.java/refs/heads/main/sportswomanship/anime_java_holometabolian.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:35Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e5378a4b-7e63-5999-bf06-373b0a066a57",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/NkosikhonaHlalukane/Nkosikhona-Portfolio/refs/heads/main/subprefecture/Nkosikhona-Portfolio_3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/NkosikhonaHlalukane/Nkosikhona-Portfolio/refs/heads/main/subprefecture/Nkosikhona-Portfolio_3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:35Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6701fa0b-70ea-5fb0-bf02-fdcbf05121a3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Kaiga-kun/climb-jump-tower-roblox-toolkit/refs/heads/branch/gadling/climb-jump-tower-roblox-toolkit_3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Kaiga-kun/climb-jump-tower-roblox-toolkit/refs/heads/branch/gadling/climb-jump-tower-roblox-toolkit_3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:35Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--85989242-dc4d-58a3-8251-930917816290",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/ZainabEman/Smart-Drone-Delivery-Planner/raw/main/schmaltz/Smart-Drone-Delivery-Planner[.]zip",
      "pattern": "[url:value = 'https://github.com/ZainabEman/Smart-Drone-Delivery-Planner/raw/main/schmaltz/Smart-Drone-Delivery-Planner.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:35Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d8adc9f3-9858-59d8-8703-c5bc45e816ad",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://www[.]mxh4h[.]com/lod018",
      "pattern": "[url:value = 'https://www.mxh4h.com/lod018']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:34Z",
      "confidence": 80,
      "labels": [
        "PatchedHostLoader",
        "SilverFox",
        "ValleyRAT",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5840a89e-ae82-5374-9ada-9dbc7718ce0a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/proneo/proneo[.]github[.]io/refs/heads/main/collared/github_io_proneo_v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/proneo/proneo.github.io/refs/heads/main/collared/github_io_proneo_v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:33Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4ee0dd60-5cc7-5ec4-a6ab-3f5d9f29f0ea",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/aqbor888/aqbor888[.]github[.]io/refs/heads/main/samiresite/io-github-aqbor-v3[.]2-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/aqbor888/aqbor888.github.io/refs/heads/main/samiresite/io-github-aqbor-v3.2-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:33Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2b6f4091-dd82-5cfe-8ac5-1af872ddb77b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/olszefsky/olszefsky[.]github[.]io/refs/heads/main/tervalency/olszefsky-github-io-2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/olszefsky/olszefsky.github.io/refs/heads/main/tervalency/olszefsky-github-io-2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ac662aea-79b5-5c26-97ec-738392eb7f36",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/Github-profile-viewer/refs/heads/main/taxation/viewer-profile-Github-v1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/Github-profile-viewer/refs/heads/main/taxation/viewer-profile-Github-v1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b92d7304-b2bf-5ddc-a678-1c4be1ebd361",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/harshpatel001/illustrator/refs/heads/main/erythrulose/illustrator-v2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/harshpatel001/illustrator/refs/heads/main/erythrulose/illustrator-v2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--38ecda19-8f58-5c4f-8860-c6a19fa2e1cd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/clumsyklutz/clumsyklutz[.]github[.]io/refs/heads/main/whorled/io-github-clumsyklutz-v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/clumsyklutz/clumsyklutz.github.io/refs/heads/main/whorled/io-github-clumsyklutz-v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b41a9be5-fb23-5316-bde6-077e0cb1f7b3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/alejandrogiga98/adsi-2231424/refs/heads/main/14-laravel/larapp/storage/framework/sessions/adsi-v3[.]4-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/alejandrogiga98/adsi-2231424/refs/heads/main/14-laravel/larapp/storage/framework/sessions/adsi-v3.4-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c1b00874-a7dc-5543-8380-500ba4e7a67a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Akash9345/akash9345[.]github[.]io/refs/heads/main/middlemost/github_akash_io_v1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Akash9345/akash9345.github.io/refs/heads/main/middlemost/github_akash_io_v1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--815894a6-7f3d-5e80-b521-5d52020af580",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rajan-raj-22/Amazon-Dashboard/refs/heads/main/teratoblastoma/Dashboard_Amazon_v3[.]5-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rajan-raj-22/Amazon-Dashboard/refs/heads/main/teratoblastoma/Dashboard_Amazon_v3.5-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e4c32c63-e504-550d-af2e-873200940e1a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Abdelmalik9/Predicting-Healthcare-Insurance-Costs/refs/heads/main/Script/Costs-Insurance-Predicting-Healthcare-2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Abdelmalik9/Predicting-Healthcare-Insurance-Costs/refs/heads/main/Script/Costs-Insurance-Predicting-Healthcare-2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--71dc1242-8b30-596d-8601-e858b22e6b23",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Jaemsyien-Devgan/toko/raw/main/talking/toko[.]zip",
      "pattern": "[url:value = 'https://github.com/Jaemsyien-Devgan/toko/raw/main/talking/toko.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:31Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cd14dbdd-df42-5c54-8486-c5a4369dc76d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rajan-raj-22/Project-5--Document-Extraction-and-Conversion-Pipeline-using-Docling-and-Colab-Interface/refs/heads/main/acouophonia/Project-5--Document-Extraction-and-Conversion-Pipeline-using-Docling-and-Colab-Interface_v1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rajan-raj-22/Project-5--Document-Extraction-and-Conversion-Pipeline-using-Docling-and-Colab-Interface/refs/heads/main/acouophonia/Project-5--Document-Extraction-and-Conversion-Pipeline-using-Docling-and-Colab-Interface_v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cab2da8f-4d9a-59dc-9f95-8199a5b63d3c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rajan-raj-22/Project-3-AI-Powered-RAG-System-with-Langflow-using-FAISS-Vector-Database/refs/heads/main/spathaceous/Project-3-AI-Powered-RAG-System-with-Langflow-using-FAISS-Vector-Database_expend[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rajan-raj-22/Project-3-AI-Powered-RAG-System-with-Langflow-using-FAISS-Vector-Database/refs/heads/main/spathaceous/Project-3-AI-Powered-RAG-System-with-Langflow-using-FAISS-Vector-Database_expend.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2378f745-5f41-59f2-a63a-f7d4effb1dc1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/jeliasrm/crud-react_server/refs/heads/main/uncrediting/crud-react_server[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/jeliasrm/crud-react_server/refs/heads/main/uncrediting/crud-react_server.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c20e7858-f9f7-5b5f-ab50-e798b0e654d6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/pedrocruz2202/pedrocruz2202[.]github[.]io/refs/heads/main/quinoidine/github_io_pedrocruz_suasiveness[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/pedrocruz2202/pedrocruz2202.github.io/refs/heads/main/quinoidine/github_io_pedrocruz_suasiveness.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f42490f3-11c5-5e9f-8490-6eb25f51d3e2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/obi19999/Discord-Quest/refs/heads/main/unwired/Quest-Discord-v1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/obi19999/Discord-Quest/refs/heads/main/unwired/Quest-Discord-v1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6668d553-0d0a-5111-8d5d-cda93328f779",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Joharskie/joharskie[.]github[.]io/refs/heads/main/untemperate/io-joharskie-github-2[.]6-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Joharskie/joharskie.github.io/refs/heads/main/untemperate/io-joharskie-github-2.6-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--40d20ff4-e5eb-5cb1-bd4e-325cf398383e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/vawlez/vawlez[.]github[.]io/refs/heads/main/improcreant/io_vawlez_github_2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/vawlez/vawlez.github.io/refs/heads/main/improcreant/io_vawlez_github_2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0e6a579a-6284-5270-b5a6-62f98416e6b1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ALI-FAHD/ali-fahd[.]github[.]io/refs/heads/main/homunculus/ali-io-fahd-github-v3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ALI-FAHD/ali-fahd.github.io/refs/heads/main/homunculus/ali-io-fahd-github-v3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3ab77326-d187-52df-8b2c-04dfcb34e9a3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/zu1-pvp/zu1-pvp[.]github[.]io/refs/heads/main/tabut/zu-pvp-io-github-2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/zu1-pvp/zu1-pvp.github.io/refs/heads/main/tabut/zu-pvp-io-github-2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--89f53e5d-5f2e-5bcd-9da2-99c204cefe9d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/polygram3/polygram3[.]github[.]io/refs/heads/main/playwriting/io-github-polygram-v2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/polygram3/polygram3.github.io/refs/heads/main/playwriting/io-github-polygram-v2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--83cd1eb9-c736-585d-a077-d92bb3102eca",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Visshwa96/Portfolio/refs/heads/main/src/assets/Software_noncongruent[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Visshwa96/Portfolio/refs/heads/main/src/assets/Software_noncongruent.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--651ec07d-2336-5692-944e-facf112ddb24",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/MaybeVatsal/S[.]A[.]M-System-for-Award-Managment/refs/heads/main/flasklet/for_System_Award_Managment_3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/MaybeVatsal/S.A.M-System-for-Award-Managment/refs/heads/main/flasklet/for_System_Award_Managment_3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c9551bbf-429e-5707-af06-67be526ab9c3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Jamil5566/jamil-portfolio/refs/heads/main/counterriposte/jamil-portfolio-v3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Jamil5566/jamil-portfolio/refs/heads/main/counterriposte/jamil-portfolio-v3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9d7917d7-a74a-5681-9ae0-cce0de35305d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Whotz1320/communication-protocols-with-pic16f877a/raw/master/Images/f-a-pic-with-protocols-communication-v3[.]5[.]zip",
      "pattern": "[url:value = 'https://github.com/Whotz1320/communication-protocols-with-pic16f877a/raw/master/Images/f-a-pic-with-protocols-communication-v3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:27Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e29bec46-2d34-5f59-9a35-53812cb4654f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Gabrielyop50/Gabrielit/raw/master/stik/Software_v3[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/Gabrielyop50/Gabrielit/raw/master/stik/Software_v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:27Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d19e45a8-9e1c-5117-b729-a8cbcf057dff",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/leeit07/leeit07[.]github[.]io/refs/heads/main/sizzard/io_github_leeit_1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/leeit07/leeit07.github.io/refs/heads/main/sizzard/io_github_leeit_1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--75d8c062-73fa-5b92-bc02-91cc1329c37d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/harrystark01/Student-Record-Management-System-main/refs/heads/main/titoki/Record-main-System-Management-Student-3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/harrystark01/Student-Record-Management-System-main/refs/heads/main/titoki/Record-main-System-Management-Student-3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--694389b2-69ec-589f-821d-ffa997d39a21",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/vawlez/vawlez[.]github[.]io/refs/heads/main/improcreant/vawlez_github_io_1[.]9-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/vawlez/vawlez.github.io/refs/heads/main/improcreant/vawlez_github_io_1.9-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:25Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6d4a73e4-2de2-5213-8bbe-d4d0c56a18c5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rajan-raj-22/SOCIAL_MEDIA_POST_GENRATOR/refs/heads/main/intellectualizer/SOCIAL_MEDIA_POST_GENRATOR-v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rajan-raj-22/SOCIAL_MEDIA_POST_GENRATOR/refs/heads/main/intellectualizer/SOCIAL_MEDIA_POST_GENRATOR-v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:25Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4e7a7fed-1478-50b4-a5fb-9598da0c47f3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartiksir/kartiksir[.]github[.]io/refs/heads/main/clownship/io_github_kartiksir_1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartiksir/kartiksir.github.io/refs/heads/main/clownship/io_github_kartiksir_1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:25Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--85659399-1cb0-548c-9304-8924d96db1f4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/yedoww/HBD-MY-GIRL/refs/heads/main/baptistery/HB-M-GIRL-1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/yedoww/HBD-MY-GIRL/refs/heads/main/baptistery/HB-M-GIRL-1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:24Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--72a2b49d-fa5b-5364-958f-f11732cfbd6e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/me-rishi/me-rishi[.]github[.]io/refs/heads/main/cosession/me-github-io-rishi-3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/me-rishi/me-rishi.github.io/refs/heads/main/cosession/me-github-io-rishi-3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:23Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bf856d0e-5881-588f-a249-394c9c6ad3c4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Pratham-Bhayana/newportfolio/refs/heads/main/dist/assets/Software-1[.]3-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Pratham-Bhayana/newportfolio/refs/heads/main/dist/assets/Software-1.3-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:23Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a76b5e09-9ff9-5cb6-a011-636c5cb3abd1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ObaidQadri/Deep-Learning/refs/heads/main/blanda/Learning-Deep-1[.]8-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ObaidQadri/Deep-Learning/refs/heads/main/blanda/Learning-Deep-1.8-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:23Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--39bb16b8-174a-5a97-bcf7-6b3fe886ebec",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ASN-Lab/Python-Praktikum/refs/heads/main/__pycache__/Praktikum_Python_overbase[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ASN-Lab/Python-Praktikum/refs/heads/main/__pycache__/Praktikum_Python_overbase.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:23Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7725eea9-98d8-5115-a8d4-7a9ff60672ff",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/devang-p12/rock-paper-scissors-game/refs/heads/main/earthenware/rock_game_scissors_paper_v1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/devang-p12/rock-paper-scissors-game/refs/heads/main/earthenware/rock_game_scissors_paper_v1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--96a918bd-34d8-5bfe-b061-8deddcac53be",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/DeepKalsariya09/PCA-form-scratch/refs/heads/main/remora/PC_form_scratch_1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/DeepKalsariya09/PCA-form-scratch/refs/heads/main/remora/PC_form_scratch_1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--af78d5dd-dc75-5cec-8946-1a3cf96d7348",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ArmanKyro/Student-Management-System/refs/heads/main/data/Management-System-Student-v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ArmanKyro/Student-Management-System/refs/heads/main/data/Management-System-Student-v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bc348b5f-f674-5b10-a658-0ed5db5698c0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Alakaroud/github-slideshow/refs/heads/main/node_modules/reveal[.]js/plugin/math/github_slideshow_v2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Alakaroud/github-slideshow/refs/heads/main/node_modules/reveal.js/plugin/math/github_slideshow_v2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7a7ddc96-18e7-5946-897e-3fe1d5b4825a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Visshwa96/garbage_sql/refs/heads/main/apatient/assets/libs/moment/sql_garbage_2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Visshwa96/garbage_sql/refs/heads/main/apatient/assets/libs/moment/sql_garbage_2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:21Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0c0a2d2b-2dd2-5735-b1bd-4e87deb2091f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Huzaifa-kha/Quizapp/refs/heads/master/bonework/Quizapp_v2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Huzaifa-kha/Quizapp/refs/heads/master/bonework/Quizapp_v2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:21Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c75f67a5-93ab-5899-bef4-225af1d69171",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/xwyuan-sg/xwyuan-sg[.]github[.]io/refs/heads/main/barbarism/sg_github_io_xwyuan_2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/xwyuan-sg/xwyuan-sg.github.io/refs/heads/main/barbarism/sg_github_io_xwyuan_2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a8f048a5-389e-56a4-807c-4ddc66203334",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/tashin666/Martial_Arts-_and_Meditation_App/refs/heads/main/wait/Martial_App_Arts_Meditation_and_1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/tashin666/Martial_Arts-_and_Meditation_App/refs/heads/main/wait/Martial_App_Arts_Meditation_and_1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fe7861e7-c2e3-5d21-8c78-519ebcbbd6dd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sshmoon/test111/refs/heads/main/public/send/test_v3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sshmoon/test111/refs/heads/main/public/send/test_v3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8bae7bdf-e589-5dd7-ad24-1553418c53ef",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Nestor53top/BOT_shgsh/refs/heads/main/Chopunnish/BO-shgsh-v2[.]0-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Nestor53top/BOT_shgsh/refs/heads/main/Chopunnish/BO-shgsh-v2.0-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2c2f0ce3-266e-56d0-bb1b-05ebc578038d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/DiningPhiloProblem/refs/heads/master/musky/Dining_Philo_Problem_1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/DiningPhiloProblem/refs/heads/master/musky/Dining_Philo_Problem_1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d85b47d3-5d98-572b-b886-72e3060e551e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/factornine/GrowingInFaith/refs/heads/main/duffing/Growing_Faith_In_Injun[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/factornine/GrowingInFaith/refs/heads/main/duffing/Growing_Faith_In_Injun.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--012e7110-1f30-5d09-bbea-384bfebd5e13",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/dilnalopez/dilnalopez[.]github[.]io/refs/heads/main/inkmaker/github-dilnalopez-io-3[.]4-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/dilnalopez/dilnalopez.github.io/refs/heads/main/inkmaker/github-dilnalopez-io-3.4-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a37e75e5-c64c-51dd-92ea-09761a9d5814",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/diegoluis91360/nier-automata-adult-enhancements/refs/heads/branch/Numenius/adult-automata-enhancements-nier-v3[.]7-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/diegoluis91360/nier-automata-adult-enhancements/refs/heads/branch/Numenius/adult-automata-enhancements-nier-v3.7-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f3bc2403-448d-5038-b01f-648650f28308",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/cbe07883/cbe07883[.]github[.]io/refs/heads/main/unchristianity/github_cbe_io_v2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/cbe07883/cbe07883.github.io/refs/heads/main/unchristianity/github_cbe_io_v2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--afd00568-4a3a-5d60-985c-d62a682c9dbc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Kirtan132003/PWSkills-Statistics-M1-Assignment/refs/heads/main/pardonable/Skills_Statistics_PW_Assignment_v3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Kirtan132003/PWSkills-Statistics-M1-Assignment/refs/heads/main/pardonable/Skills_Statistics_PW_Assignment_v3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--33ca91cd-0f35-50de-8ff7-8650e0dad270",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/IrhamFajrianto/TubesMachineLearning/refs/heads/main/graben/Learning_Machine_Tubes_v3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/IrhamFajrianto/TubesMachineLearning/refs/heads/main/graben/Learning_Machine_Tubes_v3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--31410b98-ca54-5ee7-b9f1-1c008378a34d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/EL-HAMDAOUI-Othmane/partie2-el-hamdaoui/refs/heads/main/decapitalization/el-hamdaoui-partie-3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/EL-HAMDAOUI-Othmane/partie2-el-hamdaoui/refs/heads/main/decapitalization/el-hamdaoui-partie-3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6553721d-957c-50aa-b79b-20288eafdd5e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Dinesh3184/dinesh3184[.]github[.]io/refs/heads/main/choller/io_github_dinesh_1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Dinesh3184/dinesh3184.github.io/refs/heads/main/choller/io_github_dinesh_1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--59106750-3ec3-5cca-951a-7892b772903d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ArmanKyro/armankyro[.]github[.]io/refs/heads/main/brazilin/io_github_armankyro_v1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ArmanKyro/armankyro.github.io/refs/heads/main/brazilin/io_github_armankyro_v1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--de77bc2c-2474-5162-b037-29f3ccd6baa8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/humongus69/humongus69[.]github[.]io/refs/heads/main/monobutyrin/github_humongus_io_v2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/humongus69/humongus69.github.io/refs/heads/main/monobutyrin/github_humongus_io_v2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ba952147-e3ae-5cbf-81ed-b863901f55d6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/youssoufbochra/youssoufbochra[.]github[.]io/refs/heads/main/macroscelia/io_youssoufbochra_github_v3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/youssoufbochra/youssoufbochra.github.io/refs/heads/main/macroscelia/io_youssoufbochra_github_v3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--380d2ac1-ff50-519a-96b5-312f4d2379bf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/xPUKDORx/xpukdorx[.]github[.]io/refs/heads/main/swat/xpukdorx-io-github-1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/xPUKDORx/xpukdorx.github.io/refs/heads/main/swat/xpukdorx-io-github-1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3ad172bb-3646-553b-aae7-06f238a6e171",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/harshit06-code/Realtime-Chat-App/refs/heads/main/cerebromeningeal/Realtime_Chat_App_v2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/harshit06-code/Realtime-Chat-App/refs/heads/main/cerebromeningeal/Realtime_Chat_App_v2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--faf38a7d-f854-5fdc-a123-70d1a8c857d3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ashshidieqyaldin/ashshidieqyaldin[.]github[.]io/refs/heads/main/agitation/ashshidieqyaldin_github_io_v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ashshidieqyaldin/ashshidieqyaldin.github.io/refs/heads/main/agitation/ashshidieqyaldin_github_io_v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ba504dda-b43b-580f-87fa-97aa971996d9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AyushPallod/LoanCalc/refs/heads/main/chandleress/Loan-Calc-v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AyushPallod/LoanCalc/refs/heads/main/chandleress/Loan-Calc-v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--30054596-e089-5786-a8ff-11039abd7b24",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://42[.]229[.]217[.]205:55970/i",
      "pattern": "[url:value = 'http://42.229.217.205:55970/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:17Z",
      "confidence": 80,
      "labels": [
        "Mozi",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--785b9425-2496-52ae-9db7-909dd7dde6b3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/muhnawaz/Smfb-Laf/refs/heads/main/interspersion/Smfb_Laf_v2[.]8-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/muhnawaz/Smfb-Laf/refs/heads/main/interspersion/Smfb_Laf_v2.8-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e384baec-93d0-585b-b891-fb7f3db83b2f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/didik93/didik93[.]github[.]io/refs/heads/main/unprenticed/didik_io_github_3[.]8-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/didik93/didik93.github.io/refs/heads/main/unprenticed/didik_io_github_3.8-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1d9bad28-cbfc-5bff-95d6-962a026a9758",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tanikai-Ganesh/Application/refs/heads/main/diadermic/Software_2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tanikai-Ganesh/Application/refs/heads/main/diadermic/Software_2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fc189eb2-1e52-54da-b87c-97348e078ed0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Brothers15691/brothers15691[.]github[.]io/refs/heads/main/villus/io_github_brothers_v2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Brothers15691/brothers15691.github.io/refs/heads/main/villus/io_github_brothers_v2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cee6f9dd-2022-5db5-972d-3edf241e0c4f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ishant415/c11/refs/heads/main/c11/c_v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ishant415/c11/refs/heads/main/c11/c_v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--90c839ea-63af-50a0-82f1-9fe472520c37",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/abc509791-svg/abc509791-svg[.]github[.]io/refs/heads/main/interfriction/abc-io-svg-github-v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/abc509791-svg/abc509791-svg.github.io/refs/heads/main/interfriction/abc-io-svg-github-v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c2f3d8a4-7651-5fb4-bede-ea5579562f9b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/MitsuakiTora/mitsuakitora[.]github[.]io/refs/heads/main/interopercle/github_io_mitsuakitora_3[.]1-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/MitsuakiTora/mitsuakitora.github.io/refs/heads/main/interopercle/github_io_mitsuakitora_3.1-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4a34c65d-fff0-5ae7-a46c-d5640e66e0a8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Aleksa1982/aleksa1982[.]github[.]io/refs/heads/main/anormality/aleksa-github-io-v1[.]0-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Aleksa1982/aleksa1982.github.io/refs/heads/main/anormality/aleksa-github-io-v1.0-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--061c898b-7520-56df-b785-10c2319041c4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://42[.]7[.]237[.]75:44682/i",
      "pattern": "[url:value = 'http://42.7.237.75:44682/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:14Z",
      "confidence": 80,
      "labels": [
        "None",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8bcf90c1-a234-569b-b554-f571a665fe9b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tanikai-Ganesh/flask_d/refs/heads/main/static/css/flask_d_3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tanikai-Ganesh/flask_d/refs/heads/main/static/css/flask_d_3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6652638d-feb3-5603-92a0-2098194d73bf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Rania2010r/rania2010r[.]github[.]io/refs/heads/main/pleaproof/github-r-io-rania-v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Rania2010r/rania2010r.github.io/refs/heads/main/pleaproof/github-r-io-rania-v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b2622510-a58a-5d54-8311-f28523a39904",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/zvfas/zvfas[.]github[.]io/refs/heads/main/victorine/github-zvfas-io-v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/zvfas/zvfas.github.io/refs/heads/main/victorine/github-zvfas-io-v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4b10d931-1b12-574d-8a40-262a84bf64d8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Srilaxman05/Green-cart-application/refs/heads/main/client/src/pages/seller/cart_Green_application_1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Srilaxman05/Green-cart-application/refs/heads/main/client/src/pages/seller/cart_Green_application_1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f5b10bd5-f27c-5866-bd9a-e3417bf5106f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/JayasimhaDev/practice-repo/refs/heads/master/src/Emmar/repo_practice_v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/JayasimhaDev/practice-repo/refs/heads/master/src/Emmar/repo_practice_v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--80aca0b9-43d2-57ea-8847-251205ef1e22",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ocriadorai/HOTCD/refs/heads/main/swallowpipe/Software-3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ocriadorai/HOTCD/refs/heads/main/swallowpipe/Software-3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--591c9b47-2457-5fa9-8ad7-f005c333cff5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ljkjhgfc/ljkjhgfc[.]github[.]io/refs/heads/main/pleurobranchiate/io_ljkjhgfc_github_bombycine[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ljkjhgfc/ljkjhgfc.github.io/refs/heads/main/pleurobranchiate/io_ljkjhgfc_github_bombycine.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--95be44ba-a062-532a-84dd-87af331ca9a6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Selvaprakash-Ramalingam/Real-time-Image-Analyzer---MRV/refs/heads/main/src/services/MRV_Analyzer_time_Real_Image_1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Selvaprakash-Ramalingam/Real-time-Image-Analyzer---MRV/refs/heads/main/src/services/MRV_Analyzer_time_Real_Image_1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f14f7e3a-9cee-536a-ae9e-0f685a1e5109",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/fitwan2011-code/fitwan2011-code[.]github[.]io/refs/heads/main/normless/code-github-fitwan-io-v1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/fitwan2011-code/fitwan2011-code.github.io/refs/heads/main/normless/code-github-fitwan-io-v1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fdd8b9fa-9e38-572f-9176-1d4591427288",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Mohamed-Amine-Yakoubi/Autopro/refs/heads/main/client/src/app/api/auth/%5B[.][.][.]nextauth%5D/Software-3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Mohamed-Amine-Yakoubi/Autopro/refs/heads/main/client/src/app/api/auth/%5B...nextauth%5D/Software-3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--54853b4d-cffd-51cd-b407-99268b5633d8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Melazeetech/TechtrailTeam-Portfolio/refs/heads/main/secondhandedly/Team_Portfolio_Techtrail_3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Melazeetech/TechtrailTeam-Portfolio/refs/heads/main/secondhandedly/Team_Portfolio_Techtrail_3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0a8d5d49-ea90-53e3-83ca-645c990fe058",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Zaid-daoud/currency_converter/raw/main/ios/Runner[.]xcodeproj/currency-converter-v2[.]4[.]zip",
      "pattern": "[url:value = 'https://github.com/Zaid-daoud/currency_converter/raw/main/ios/Runner.xcodeproj/currency-converter-v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:09Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f8451116-6657-50ba-a9a4-1467e3e7a160",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Mohamed-Amine-Yakoubi/foodNinja/refs/heads/master/app/src/androidTest/java/food-Ninja-2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Mohamed-Amine-Yakoubi/foodNinja/refs/heads/master/app/src/androidTest/java/food-Ninja-2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b751e40d-e602-575a-a394-fb9a19c6a17f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Kirtan132003/Python-OOPS/refs/heads/main/Bert/Python-OOPS-v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Kirtan132003/Python-OOPS/refs/heads/main/Bert/Python-OOPS-v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--86f772f6-23cf-509b-8b2c-52b31ea04cb2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ChaaruYuvaraj/chaaruyuvaraj[.]github[.]io/refs/heads/main/fadridden/chaaruyuvaraj-github-io-1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ChaaruYuvaraj/chaaruyuvaraj.github.io/refs/heads/main/fadridden/chaaruyuvaraj-github-io-1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2b13c5ca-f7bd-5c78-a0b7-77716425151c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/irfanmaulana17/Counting_Vechile_Plat_Recognition/raw/main/unsilvered/Counting_Vechile_Plat_Recognition[.]zip",
      "pattern": "[url:value = 'https://github.com/irfanmaulana17/Counting_Vechile_Plat_Recognition/raw/main/unsilvered/Counting_Vechile_Plat_Recognition.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:08Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--50ac679b-dbc9-5a73-8e0e-0c8f0170788c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/redbuttonsa/redbuttonsa[.]github[.]io/refs/heads/main/semiproselyte/redbuttonsa-github-io-1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/redbuttonsa/redbuttonsa.github.io/refs/heads/main/semiproselyte/redbuttonsa-github-io-1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:07Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f4107120-171b-5538-90c1-e31d9bf82bcf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tanikai-Ganesh/mlflowexperiments/refs/heads/main/romancing/mlflowexperiments-v2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tanikai-Ganesh/mlflowexperiments/refs/heads/main/romancing/mlflowexperiments-v2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:07Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--111f8854-5d9d-502a-a5fa-93ffd2da29d6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/DeepKalsariya09/deepkalsariya09[.]github[.]io/refs/heads/main/mintage/deepkalsariya-github-io-3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/DeepKalsariya09/deepkalsariya09.github.io/refs/heads/main/mintage/deepkalsariya-github-io-3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:07Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--baedae4e-805b-56d4-bdfd-62359e0faefb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mukeshkannan18/assignment15/refs/heads/main/unreprievable/assignment_v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mukeshkannan18/assignment15/refs/heads/main/unreprievable/assignment_v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:06Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fd57e176-a541-512c-af23-62098c7d856c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/laradamerji-arch/laradamerji-arch[.]github[.]io/refs/heads/main/exogastric/io-laradamerji-github-arch-2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/laradamerji-arch/laradamerji-arch.github.io/refs/heads/main/exogastric/io-laradamerji-github-arch-2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:06Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--21333411-f9e5-5bf5-afe8-f638e4d4fb4f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/cereal2111/HTMLKU/refs/heads/main/Pertemuan%201/Software_v1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/cereal2111/HTMLKU/refs/heads/main/Pertemuan%201/Software_v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:06Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f50a38a3-6dec-593e-bc84-2ca4a4dac6e8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GDuip/ANTICHEAT/refs/heads/main/pseudopoetic/Software_2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GDuip/ANTICHEAT/refs/heads/main/pseudopoetic/Software_2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:06Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--50fd0f4c-4ca2-532b-9aff-7558aa6b32a0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ErissonSilverioN/SegundoParcial-Aplicada2/refs/heads/master/SegundoParcial_Aplicada2/Segundo-Parcial-Aplicada-1[.]3-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ErissonSilverioN/SegundoParcial-Aplicada2/refs/heads/master/SegundoParcial_Aplicada2/Segundo-Parcial-Aplicada-1.3-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:06Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e2d7a805-1b1a-5fd9-88c5-d158521d449b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://208[.]87[.]241[.]147/bins[.]sh",
      "pattern": "[url:value = 'http://208.87.241.147/bins.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:06Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "mirai",
        "script"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4377e9dd-3608-5677-87fc-e5189dfb1096",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/bernardotmr/bernardotmr[.]github[.]io/refs/heads/main/alcoholomania/github-bernardotmr-io-2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/bernardotmr/bernardotmr.github.io/refs/heads/main/alcoholomania/github-bernardotmr-io-2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:05Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--802808e4-5a7a-5772-b3a3-50131adcbbd8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/OOP-Task2/refs/heads/master/Properties/OO_Task_vacabond[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/OOP-Task2/refs/heads/master/Properties/OO_Task_vacabond.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:05Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--49120b00-35b3-5d41-ba81-9c006e653ea4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Arthur-devrole/belgium-planner/refs/heads/main/sleek/planner_belgium_v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Arthur-devrole/belgium-planner/refs/heads/main/sleek/planner_belgium_v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:05Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0ab95fdb-40fb-5fbf-b55d-78655d60c96d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AlieykerJx-Dev/Ghost-Widgets-Pro/refs/heads/main/config/Widgets-Pro-Ghost-v1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AlieykerJx-Dev/Ghost-Widgets-Pro/refs/heads/main/config/Widgets-Pro-Ghost-v1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:05Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--054b71b6-9d4c-5372-bff7-ca1c8e8bba91",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/realbabafingo/realbabafingo[.]github[.]io/refs/heads/main/hydrotimeter/github_realbabafingo_io_1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/realbabafingo/realbabafingo.github.io/refs/heads/main/hydrotimeter/github_realbabafingo_io_1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:04Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cbb64da3-fc3e-5395-be34-b0ec9b094000",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nhatanh6900/nhatanh6900[.]github[.]io/refs/heads/main/disorient/github-io-nhatanh-1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nhatanh6900/nhatanh6900.github.io/refs/heads/main/disorient/github-io-nhatanh-1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:04Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--21857a5f-03b3-511a-8051-19ec557d69a5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mukeshkannan18/assignment5/refs/heads/main/week2day1/assignment_v2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mukeshkannan18/assignment5/refs/heads/main/week2day1/assignment_v2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:04Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--40150a3e-e4d3-544d-8e4c-7a1b89f31463",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mahmoudar/mahmoudar[.]github[.]io/refs/heads/main/inimical/github_mahmoudar_io_2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mahmoudar/mahmoudar.github.io/refs/heads/main/inimical/github_mahmoudar_io_2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:04Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2b12d71b-b911-5545-ac7b-bd673e411640",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tanikai-Ganesh/Deploy_Heroku_Class/refs/heads/main/capistrate/Deploy_Heroku_Class_vasculature[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tanikai-Ganesh/Deploy_Heroku_Class/refs/heads/main/capistrate/Deploy_Heroku_Class_vasculature.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:03Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7a74f80a-0cc1-5bdc-9409-64472cdb2e2f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/NotTropical/nottropical[.]github[.]io/refs/heads/main/hemochromometry/nottropical-github-io-1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/NotTropical/nottropical.github.io/refs/heads/main/hemochromometry/nottropical-github-io-1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:58:01Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--416b135d-3b76-579f-87ec-9f278c2ea16f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Sajin46/notes-apllication-/refs/heads/main/sneeshing/apllication-notes-v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Sajin46/notes-apllication-/refs/heads/main/sneeshing/apllication-notes-v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2c8fb82c-885d-5462-8f5a-227cab967a0b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Kirissof/kirissof[.]github[.]io/refs/heads/main/nonlixiviated/github_kirissof_io_v2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Kirissof/kirissof.github.io/refs/heads/main/nonlixiviated/github_kirissof_io_v2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b4aa5f1b-6c55-5b2e-b673-90f535a25ba6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SistemasTecTlaxiaco/actividad-3-sintesis-Rufino07/refs/heads/main/[.]github/sintesis_Rufino_actividad_1[.]2-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SistemasTecTlaxiaco/actividad-3-sintesis-Rufino07/refs/heads/main/.github/sintesis_Rufino_actividad_1.2-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e8d7e760-a26a-53de-9b48-dc5383c784cf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Sajin46/online-notes-application-frontend-and-backend/refs/heads/main/taled/and_backend_frontend_online_notes_application_v1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Sajin46/online-notes-application-frontend-and-backend/refs/heads/main/taled/and_backend_frontend_online_notes_application_v1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--559ab1d7-60b9-50a1-92ef-c5aa5784faa2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/vgiappnee-web/vgiappnee-web[.]github[.]io/refs/heads/main/claimless/io_github_web_vgiappnee_3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/vgiappnee-web/vgiappnee-web.github.io/refs/heads/main/claimless/io_github_web_vgiappnee_3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fba8d701-1d93-5c83-97d3-976b64b979b5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ahmed7890-byte/ahmed7890-byte[.]github[.]io/refs/heads/main/ultimatum/io_byte_github_ahmed_2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ahmed7890-byte/ahmed7890-byte.github.io/refs/heads/main/ultimatum/io_byte_github_ahmed_2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b97ce0aa-fe8f-5ac2-a3aa-03033c3c2448",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Sodihee/sodihee[.]github[.]io/refs/heads/main/extraovular/io_sodihee_github_1[.]4-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Sodihee/sodihee.github.io/refs/heads/main/extraovular/io_sodihee_github_1.4-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d3bfc667-1fd5-5a4a-a6ce-a7ac6ccc1a16",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Shaswat0/Calculator/refs/heads/main/chalazion/Software_1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Shaswat0/Calculator/refs/heads/main/chalazion/Software_1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7c117867-70f6-5f55-9506-dd1cd06bdddc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ASN-Lab/PBO/refs/heads/main/karyotin/Software-2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ASN-Lab/PBO/refs/heads/main/karyotin/Software-2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fea6d4ef-284b-5e3c-b215-efecb5008431",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/harddubber/harddubber[.]github[.]io/refs/heads/main/eider/github_harddubber_io_1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/harddubber/harddubber.github.io/refs/heads/main/eider/github_harddubber_io_1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:54Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--56ae6a2a-cf6a-5923-a377-6b1e73c33706",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/serges-gbakayoro/serges-gbakayoro[.]github[.]io/refs/heads/main/melonlike/gbakayoro_io_github_serges_v1[.]0-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/serges-gbakayoro/serges-gbakayoro.github.io/refs/heads/main/melonlike/gbakayoro_io_github_serges_v1.0-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:53Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--449256ea-66e4-5345-9838-6812c46e7932",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mohdumar009/mohdumar009[.]github[.]io/refs/heads/main/psychokyme/io_github_mohdumar_2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mohdumar009/mohdumar009.github.io/refs/heads/main/psychokyme/io_github_mohdumar_2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:53Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a75c1fd1-11e1-515b-b1e5-0f230e071589",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tanikai-Ganesh/flask-ecs-demo/refs/heads/main/[.]github/flask-ecs-demo-v3[.]1-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tanikai-Ganesh/flask-ecs-demo/refs/heads/main/.github/flask-ecs-demo-v3.1-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:53Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c575aa81-87cd-5502-b726-71a6c08048a5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Mont-ikayo2302/mont-ikayo2302[.]github[.]io/refs/heads/main/quadragenarious/io_ikayo_mont_github_v2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Mont-ikayo2302/mont-ikayo2302.github.io/refs/heads/main/quadragenarious/io_ikayo_mont_github_v2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:53Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--40a7bfe4-b6ed-5142-8648-7eb400babdb9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AyushPallod/Payments_Manager/refs/heads/main/embryophyte/Payments_Manager_v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AyushPallod/Payments_Manager/refs/heads/main/embryophyte/Payments_Manager_v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:53Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a72117ae-050d-5ea8-ab56-53fd32b84a5d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://appset[.]autos/hex/github-app-setup",
      "pattern": "[url:value = 'https://appset.autos/hex/github-app-setup']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:53Z",
      "confidence": 80,
      "labels": [
        "None",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--62b84c78-b49f-5641-929e-60477897581f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/obi19999/MJHOL_911/refs/heads/main/cardipericarditis/MJHO_2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/obi19999/MJHOL_911/refs/heads/main/cardipericarditis/MJHO_2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:52Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--00cd3eda-136d-53c7-9fa2-f9fc0f7638c7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/gabrielathayes/DinerLife/refs/heads/main/unjoking/Life_Diner_v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/gabrielathayes/DinerLife/refs/heads/main/unjoking/Life_Diner_v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:52Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7b871e40-d078-5e84-a982-65da5941e2a3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/awpggexcutor-beep/getluna/refs/heads/main/trowelman/Software-v1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/awpggexcutor-beep/getluna/refs/heads/main/trowelman/Software-v1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:52Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6f351103-7b6c-5092-ba61-379b1d44e307",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tarunkanth3223/tarunkanth3223[.]github[.]io/refs/heads/main/angiostegnosis/github-tarunkanth-io-3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tarunkanth3223/tarunkanth3223.github.io/refs/heads/main/angiostegnosis/github-tarunkanth-io-3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:52Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dd8b841b-4d18-5cb1-9a6a-7ab907345b44",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AngelJulio1331/angeljulio1331[.]github[.]io/refs/heads/main/athrive/github_io_angeljulio_2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AngelJulio1331/angeljulio1331.github.io/refs/heads/main/athrive/github_io_angeljulio_2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:52Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--529b9038-5c52-588f-a07b-bc128afe4caa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/privatebugcorp/ConveyorBelt-mqtt/raw/main/Venv/templates/mqtt_Belt_Conveyor_3[.]1[.]zip",
      "pattern": "[url:value = 'https://github.com/privatebugcorp/ConveyorBelt-mqtt/raw/main/Venv/templates/mqtt_Belt_Conveyor_3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:52Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--28664227-1762-545b-81c2-967cd5150f12",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/shajaruth/solo-leveling-arise-advantage-tool/refs/heads/branch/terrorize/solo-advantage-tool-leveling-arise-2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/shajaruth/solo-leveling-arise-advantage-tool/refs/heads/branch/terrorize/solo-advantage-tool-leveling-arise-2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9334c499-bb70-5089-ab2e-f354b7a99d6f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/musaed807/musaed807[.]github[.]io/refs/heads/main/uninterlarded/io_musaed_github_1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/musaed807/musaed807.github.io/refs/heads/main/uninterlarded/io_musaed_github_1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--62258c36-30ae-5cbd-8db8-4801e7d9c624",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/loiphanvan171/loiphanvan171[.]github[.]io/refs/heads/main/nonmercantile/loiphanvan_github_io_1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/loiphanvan171/loiphanvan171.github.io/refs/heads/main/nonmercantile/loiphanvan_github_io_1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b837ee02-2696-55eb-a9f0-1dd1add4123f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ivodikarlolo/ivodikarlolo[.]github[.]io/refs/heads/main/decan/github_ivodikarlolo_io_v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ivodikarlolo/ivodikarlolo.github.io/refs/heads/main/decan/github_ivodikarlolo_io_v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ff1a1f70-8ba0-59c9-9fc2-70ee9aa373bf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ethan123450/ethan123450[.]github[.]io/refs/heads/main/roentgenoscopic/io_ethan_github_v1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ethan123450/ethan123450.github.io/refs/heads/main/roentgenoscopic/io_ethan_github_v1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dbd73b1a-4e35-5780-9617-c3ef7a6da8d3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Riohari07/Python-Day-3/refs/heads/main/explosible/Day_Python_v2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Riohari07/Python-Day-3/refs/heads/main/explosible/Day_Python_v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e63c5fb5-36f3-57cf-8956-36d2f8f383f7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Riohari07/MACHINE-LEARNING-PRACTCALS/refs/heads/main/aiguille/PRACTCALS_LEARNIN_MACHIN_3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Riohari07/MACHINE-LEARNING-PRACTCALS/refs/heads/main/aiguille/PRACTCALS_LEARNIN_MACHIN_3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--35f35726-1d54-52ad-b7dc-1d97ad122efc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/KarlCalupaz/fakenewsdetection321/refs/heads/main/static/fakenewsdetection-v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/KarlCalupaz/fakenewsdetection321/refs/heads/main/static/fakenewsdetection-v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6496fa3f-06e1-508c-b133-5bec64612ebf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Jimit6921/portfolio/refs/heads/main/project-cards/Software_v2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Jimit6921/portfolio/refs/heads/main/project-cards/Software_v2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--609cdd71-a11a-5c9a-81e9-793ef397d225",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/ChatAppTol/refs/heads/master/wwwroot/Chat_Tol_App_1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/ChatAppTol/refs/heads/master/wwwroot/Chat_Tol_App_1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--17eb7188-7583-526f-8c07-07107ef0f60b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Abdelmalik9/Volkswagen-CO2-scandal/refs/heads/main/Script/Volkswagen-C-scandal-3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Abdelmalik9/Volkswagen-CO2-scandal/refs/heads/main/Script/Volkswagen-C-scandal-3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8b8f2317-6144-529a-b26e-f5dd93dde18d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kidsadapotay/kidsadapotay[.]github[.]io/refs/heads/main/distant/github-kidsadapotay-io-v2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kidsadapotay/kidsadapotay.github.io/refs/heads/main/distant/github-kidsadapotay-io-v2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0797a83e-5cfb-5b6e-8165-60de4f61bc5b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/karwito03/tracking-tutorial/refs/heads/main/outsert/tutorial_tracking_2[.]4-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/karwito03/tracking-tutorial/refs/heads/main/outsert/tutorial_tracking_2.4-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f69af45a-21b6-5027-b41b-5aaab17f506e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/PHalla0/phalla0[.]github[.]io/refs/heads/main/orificial/phalla_github_io_v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/PHalla0/phalla0.github.io/refs/heads/main/orificial/phalla_github_io_v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5ba99e87-a81d-5a4f-b53a-7669e7be8def",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/BlindMizuri/Tishk_SIS/refs/heads/main/Hildebrand/Tishk_SIS[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/BlindMizuri/Tishk_SIS/refs/heads/main/Hildebrand/Tishk_SIS.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c721d413-9eaa-5f38-b838-80aa8d341730",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/tashin666/Martial_Arts-_and_Meditation_App/refs/heads/main/goli/Martial_Arts-_and_Meditation_App[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/tashin666/Martial_Arts-_and_Meditation_App/refs/heads/main/goli/Martial_Arts-_and_Meditation_App.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:49Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2253bb96-5141-570f-af55-a92f6272e6b2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/epha4real/epha4real[.]github[.]io/refs/heads/main/cageless/io_epha_real_github_freshman[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/epha4real/epha4real.github.io/refs/heads/main/cageless/io_epha_real_github_freshman.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:49Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--26f2a229-6d42-50ab-abad-ad72254b5caa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://files[.]8weeksaverage[.]xyz/sodium[.]jar",
      "pattern": "[url:value = 'https://files.8weeksaverage.xyz/sodium.jar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:49Z",
      "confidence": 80,
      "labels": [
        "jar",
        "malware",
        "malware_download",
        "minecraft",
        "rat",
        "stealer"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b43b5353-e1e6-5ae0-b191-685accb0bfa5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/yadhavshetty/yadhavshetty[.]github[.]io/refs/heads/main/marrowsky/github_yadhavshetty_io_v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/yadhavshetty/yadhavshetty.github.io/refs/heads/main/marrowsky/github_yadhavshetty_io_v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--188eae8b-3922-5ac2-87f0-61f77c4f8969",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/devoumes01/jenkinstp/refs/heads/main/incubational/Software_v2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/devoumes01/jenkinstp/refs/heads/main/incubational/Software_v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--64d9c973-ac4e-58cd-a601-7935ccfc807c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Amaldas1243/amaldas1243[.]github[.]io/refs/heads/main/sawed/github-amaldas-io-v2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Amaldas1243/amaldas1243.github.io/refs/heads/main/sawed/github-amaldas-io-v2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6dc9c1ee-b721-51d2-adac-b3b24d8ac8dd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/harshpatel001/figma/refs/heads/main/Sabbatical/Software-1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/harshpatel001/figma/refs/heads/main/Sabbatical/Software-1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--da9f4dd8-4248-516e-aefa-def375d1194e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tanikai-Ganesh/Gemini-LLM-LIM/refs/heads/main/succorer/Gemini_LIM_LL_v3[.]3-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tanikai-Ganesh/Gemini-LLM-LIM/refs/heads/main/succorer/Gemini_LIM_LL_v3.3-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3123dad0-7b47-59ec-a1de-3be174d0309b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/DIEGO879112/diego879112[.]github[.]io/refs/heads/main/unopened/io-github-diego-1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/DIEGO879112/diego879112.github.io/refs/heads/main/unopened/io-github-diego-1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cddd2772-c98f-5c7a-bdba-2f4f12e1e4da",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Pequenopolis/Desafio_Raking/refs/heads/main/supercredit/Desafio-Raking-v3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Pequenopolis/Desafio_Raking/refs/heads/main/supercredit/Desafio-Raking-v3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--318b69c7-df45-5ea8-b297-87105b321e61",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GaneshTBiradar/Smart-City-Traveller-Application/refs/heads/master/app/src/Application-Traveller-Smart-City-1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GaneshTBiradar/Smart-City-Traveller-Application/refs/heads/master/app/src/Application-Traveller-Smart-City-1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ee9f6e8f-a344-58be-ac72-e2fa5d99cc1f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/iamlucass/iamlucass[.]github[.]io/refs/heads/main/outhue/iamlucass-github-io-v2[.]5-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/iamlucass/iamlucass.github.io/refs/heads/main/outhue/iamlucass-github-io-v2.5-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fc70fd2f-d9e0-5efe-ac7e-40091053db3c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/adonis109/adonis109[.]github[.]io/refs/heads/main/pablo/io_adonis_github_v3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/adonis109/adonis109.github.io/refs/heads/main/pablo/io_adonis_github_v3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ec18b937-5691-538d-ac92-feaf085d7e3f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ThanhVutn/thanhvutn[.]github[.]io/refs/heads/main/ungraveled/io_github_thanhvutn_3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ThanhVutn/thanhvutn.github.io/refs/heads/main/ungraveled/io_github_thanhvutn_3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2951feda-277f-5d19-8ff9-1dd7b6907584",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/TheRealAnakin/ZyBooks-Projects/refs/heads/main/boeotarch/Zy-Books-Projects-v3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/TheRealAnakin/ZyBooks-Projects/refs/heads/main/boeotarch/Zy-Books-Projects-v3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5fde176e-78db-59e8-bbdd-7371aba9eae2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/0xIbbe/0xibbe[.]github[.]io/refs/heads/main/tonguer/github_io_xibbe_1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/0xIbbe/0xibbe.github.io/refs/heads/main/tonguer/github_io_xibbe_1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:43Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--35f0ddd3-dc99-5e70-b72b-f05a15245436",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/trxstack/royalearn/refs/heads/main/interloculus/Software-1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/trxstack/royalearn/refs/heads/main/interloculus/Software-1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9726186c-7e8a-52e1-b74e-c98a8e4f0cc8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Pinquei/watermelon_chess/refs/heads/main/xmltopython/chess_watermelon_v3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Pinquei/watermelon_chess/refs/heads/main/xmltopython/chess_watermelon_v3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8fb7b68b-6614-598c-a1dc-eac7081312fd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/tashin666/Martial_Arts_and_Meditation_App/refs/heads/main/reorientation/Martial_Arts_and_Meditation_App[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/tashin666/Martial_Arts_and_Meditation_App/refs/heads/main/reorientation/Martial_Arts_and_Meditation_App.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--982a4e7b-65ec-52d2-b550-d1ef1f5e322b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/oznni12/skeet-loader-menu/refs/heads/main/nonmonastic/loader_menu_skeet_v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/oznni12/skeet-loader-menu/refs/heads/main/nonmonastic/loader_menu_skeet_v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8147b53d-d48f-5888-871a-d8c0837e41f0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/gopi703/gopi703[.]github[.]io/refs/heads/main/brushman/gopi-github-io-v3[.]4-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/gopi703/gopi703.github.io/refs/heads/main/brushman/gopi-github-io-v3.4-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fe11e8e3-5fd4-54ca-8246-5a754ef0acb3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/gabrielathayes/ChatGPT/refs/heads/main/Galax/GPT_Chat_slashy[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/gabrielathayes/ChatGPT/refs/heads/main/Galax/GPT_Chat_slashy.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d49174f4-829b-5902-a393-bc7d5f775a6f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/factornine/factornine[.]github[.]io/refs/heads/main/postvelar/github-factornine-io-2[.]9-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/factornine/factornine.github.io/refs/heads/main/postvelar/github-factornine-io-2.9-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f2fd6a38-4af0-5a8b-a832-6d9cd751d8f8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wackodacko/class130/refs/heads/main/superstage/class_v3[.]4-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wackodacko/class130/refs/heads/main/superstage/class_v3.4-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0c531cc2-7acc-5f6f-b6ce-847b9f3eb290",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Danizolo/booking_frontend/refs/heads/main/public/booking_frontend_3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Danizolo/booking_frontend/refs/heads/main/public/booking_frontend_3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--adccc033-7ae7-5656-8da7-b33ba5bfe356",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/5haled23/5haled23[.]github[.]io/refs/heads/main/mudar/github-haled-io-2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/5haled23/5haled23.github.io/refs/heads/main/mudar/github-haled-io-2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bb699859-e938-54a2-b798-c9b7f23b990d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sachinrai308/sachinrai308[.]github[.]io/refs/heads/main/hangby/io-sachinrai-github-3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sachinrai308/sachinrai308.github.io/refs/heads/main/hangby/io-sachinrai-github-3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9d5330b3-0947-5fb5-9596-d3e408349ab3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/raghu-veluchamy/save-and-buy-me/refs/heads/main/hemiablepsia/save-and-buy-me_2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/raghu-veluchamy/save-and-buy-me/refs/heads/main/hemiablepsia/save-and-buy-me_2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fa0f24c6-3052-5084-a607-8a1e3134400b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nikeshRajbanshi231/Simple-Website/refs/heads/main/Ascomycetes/Website_Simple_v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nikeshRajbanshi231/Simple-Website/refs/heads/main/Ascomycetes/Website_Simple_v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--03c1abde-3511-58af-be71-d5ade2661634",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mykewkymap/mykewkymap[.]github[.]io/refs/heads/main/snagged/github_io_mykewkymap_2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mykewkymap/mykewkymap.github.io/refs/heads/main/snagged/github_io_mykewkymap_2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e4a95a59-1bad-5e15-b481-fa629a0c3c86",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/muhzars/web-programming-course/refs/heads/main/php-html/web_programming_course_v1[.]6-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/muhzars/web-programming-course/refs/heads/main/php-html/web_programming_course_v1.6-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--575abf59-9d4c-5b9a-925b-70ef39e8e640",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/meuxlugh/cms-oop-php/refs/heads/main/public/plugins/datatables-buttons/js/cms-php-oop-v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/meuxlugh/cms-oop-php/refs/heads/main/public/plugins/datatables-buttons/js/cms-php-oop-v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8d416bb3-0c3f-5c74-a4f4-21c46508f1ee",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/edwardkenway03/edwardkenway03[.]github[.]io/refs/heads/main/Garo/edwardkenway-io-github-1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/edwardkenway03/edwardkenway03.github.io/refs/heads/main/Garo/edwardkenway-io-github-1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--be87d4c1-6a83-57da-8819-5be3aba96a2b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Visshwa96/WaterFall_Model/refs/heads/main/node_modules/camelcase-css/Model-Fall-Water-2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Visshwa96/WaterFall_Model/refs/heads/main/node_modules/camelcase-css/Model-Fall-Water-2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--935be05f-de9b-518d-bc20-b218d0ccc229",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Visshwa96/STUDENT-DATABASE/refs/heads/main/src/DATABASE-STUDEN-1[.]0-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Visshwa96/STUDENT-DATABASE/refs/heads/main/src/DATABASE-STUDEN-1.0-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--161f04fd-1a9f-5040-b56e-223aa9dd9335",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tanikai-Ganesh/Gemini-DocQA/refs/heads/main/us_census/Doc_QA_Gemini_1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tanikai-Ganesh/Gemini-DocQA/refs/heads/main/us_census/Doc_QA_Gemini_1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d92d49ff-3c63-5dc3-baec-7a5294d45cd5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Negm2027/negm2027[.]github[.]io/refs/heads/main/enthralldom/io-github-negm-3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Negm2027/negm2027.github.io/refs/heads/main/enthralldom/io-github-negm-3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e00ddf92-208f-5dea-999f-69767351c0cb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AyushPallod/ayushpallod[.]github[.]io/refs/heads/main/miller/ayushpallod_github_io_v2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AyushPallod/ayushpallod.github.io/refs/heads/main/miller/ayushpallod_github_io_v2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e8d572ac-49be-51dd-b50b-07a560b6d051",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AlejandroVelezGuillermo/Datos-de-persona-en-VB_Consola/refs/heads/main/Datos%20De%20Persona%20VB_Consola/Tarea_VB_Consola/obj/en_de_Datos_persona_V_Consola_semiarch[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AlejandroVelezGuillermo/Datos-de-persona-en-VB_Consola/refs/heads/main/Datos%20De%20Persona%20VB_Consola/Tarea_VB_Consola/obj/en_de_Datos_persona_V_Consola_semiarch.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d33f08bf-aaa6-53e1-97f0-caaf3e299699",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Gajendrakmt9079/gajendra-portfolio-/raw/main/hooks/gajendra-portfolio-antisine[.]zip",
      "pattern": "[url:value = 'https://github.com/Gajendrakmt9079/gajendra-portfolio-/raw/main/hooks/gajendra-portfolio-antisine.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:37Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--973f8203-c0d6-5b43-9e7e-6a416f23c98a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://60[.]18[.]97[.]62:51110/bin[.]sh",
      "pattern": "[url:value = 'http://60.18.97.62:51110/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:37Z",
      "confidence": 80,
      "labels": [
        "Mozi",
        "cowrie",
        "elf",
        "honeypot",
        "malware",
        "malware_download",
        "mipsel"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c5b76ea6-e7eb-586e-ba8e-dfb51331b26a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/zemoma/zemoma[.]github[.]io/refs/heads/main/eisteddfod/zemoma_github_io_2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/zemoma/zemoma.github.io/refs/heads/main/eisteddfod/zemoma_github_io_2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eba62805-a644-5f92-ab62-2a1b80cac0b5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/tusharakhare5/tusharakhare5[.]github[.]io/refs/heads/main/fixtureless/io_tusharakhare_github_3[.]3-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/tusharakhare5/tusharakhare5.github.io/refs/heads/main/fixtureless/io_tusharakhare_github_3.3-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bdfecd50-a46f-5d4e-9b02-0074eeecf3ce",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ocriadorai/caixa3/refs/heads/main/diaconicum/caixa-3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ocriadorai/caixa3/refs/heads/main/diaconicum/caixa-3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--51831471-5403-5113-9b5d-f0b3d7849742",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nikeshRajbanshi231/myntra/refs/heads/main/Insectivora/Software-3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nikeshRajbanshi231/myntra/refs/heads/main/Insectivora/Software-3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bad861c9-8108-5b1a-aea1-8cd47f0e1387",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/StudySyns-website-clone/refs/heads/main/unwithholding/Syns_website_Study_clone_1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/StudySyns-website-clone/refs/heads/main/unwithholding/Syns_website_Study_clone_1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a17192c8-892d-5b92-b3dc-bb9d5761f818",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/adammc769/ASW/refs/heads/main/toxicodermatosis/Software_v3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/adammc769/ASW/refs/heads/main/toxicodermatosis/Software_v3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d2987392-6d59-5e49-aa1b-701b28852dcb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Visshwa96/CashFlowMin/refs/heads/main/Samantha/Min_Cash_Flow_2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Visshwa96/CashFlowMin/refs/heads/main/Samantha/Min_Cash_Flow_2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--331996b8-dcce-5b34-9b47-efaed9cb9aea",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AriakaHS/DeadRailsScriptHub/refs/heads/main/expenthesis/Dead_Script_Rails_Hub_v1[.]3-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AriakaHS/DeadRailsScriptHub/refs/heads/main/expenthesis/Dead_Script_Rails_Hub_v1.3-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b59d167c-476b-597e-b9f3-3f99e801f48d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Abdullah3122004/Frontend-final-hackathon/raw/main/src/routes/hackathon_Frontend_final_v1[.]2-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://github.com/Abdullah3122004/Frontend-final-hackathon/raw/main/src/routes/hackathon_Frontend_final_v1.2-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:36Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6edfc1bf-8820-5428-9cb5-210d6f3adc74",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Garmode3073/gg_resume/refs/heads/master/windows/runner/gg_resume_1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Garmode3073/gg_resume/refs/heads/master/windows/runner/gg_resume_1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:35Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--48e2ae24-d8a0-566b-adea-782273d3fd91",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Anamalikay/anamalikay[.]github[.]io/refs/heads/main/passable/anamalikay-github-io-v2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Anamalikay/anamalikay.github.io/refs/heads/main/passable/anamalikay-github-io-v2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:35Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1ebd7145-7166-5b31-a119-587a832c6dee",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ryzax1507/sidebar-template/refs/heads/main/uteromania/template-sidebar-3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ryzax1507/sidebar-template/refs/heads/main/uteromania/template-sidebar-3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b3e65b34-a238-540e-87ad-491e18d261b7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/diegoluis91360/diegoluis91360[.]github[.]io/refs/heads/main/ergatogyny/diegoluis-io-github-2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/diegoluis91360/diegoluis91360.github.io/refs/heads/main/ergatogyny/diegoluis-io-github-2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ab7116a3-0371-58b6-b32f-caccd37f5f09",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/BlindMizuri/SIS_UNI_Projrct/refs/heads/main/prosthenic/SIS_UNI_Projrct[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/BlindMizuri/SIS_UNI_Projrct/refs/heads/main/prosthenic/SIS_UNI_Projrct.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dbb0f3ff-722c-5a99-bc83-55387542b4be",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Aryan0199/Heart-Stroke-Prediction-using-Ensemble-Learning-with-various-ML-algorithms/refs/heads/main/rinderpest/with_Stroke_Learning_Heart_Prediction_M_Ensemble_various_using_algorithms_3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Aryan0199/Heart-Stroke-Prediction-using-Ensemble-Learning-with-various-ML-algorithms/refs/heads/main/rinderpest/with_Stroke_Learning_Heart_Prediction_M_Ensemble_various_using_algorithms_3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ffdbfe8f-5a23-58f8-9e6b-bba6c3e6d3df",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/zuqorl/Test1/refs/heads/main/coutumier/Test_v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/zuqorl/Test1/refs/heads/main/coutumier/Test_v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e155f24d-1c43-5231-9326-46e4ef4bec9c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GPshadow56/gpshadow56[.]github[.]io/refs/heads/main/glair/io_github_gpshadow_v1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GPshadow56/gpshadow56.github.io/refs/heads/main/glair/io_github_gpshadow_v1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fcd879c3-7c15-54ee-9bbd-510a2e26da71",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/trxstack/VirtueCoin/refs/heads/main/huddup/Virtue-Coin-2[.]1-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/trxstack/VirtueCoin/refs/heads/main/huddup/Virtue-Coin-2.1-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e57321ef-637b-57de-8c98-807dc1b9cfee",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/me-rishi/guilty-as-sock-mod-toolkit/refs/heads/branch/repositary/toolkit_as_mod_sock_guilty_v1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/me-rishi/guilty-as-sock-mod-toolkit/refs/heads/branch/repositary/toolkit_as_mod_sock_guilty_v1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c22032c2-edf4-57a1-9f7a-c3676bf4a534",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/layanalhrby/layan/refs/heads/main/bathochromic/Software_v3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/layanalhrby/layan/refs/heads/main/bathochromic/Software_v3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9593da5e-15a8-5af1-adfe-cad81059a55c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/jhyshy/jhyshy[.]github[.]io/refs/heads/main/comical/jhyshy_io_github_v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/jhyshy/jhyshy.github.io/refs/heads/main/comical/jhyshy_io_github_v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4cfc1e4a-a669-522c-81d4-1142cc25ed28",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wackodacko/DATA-SAMPLING/refs/heads/main/raticide/DAT-SAMPLING-3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wackodacko/DATA-SAMPLING/refs/heads/main/raticide/DAT-SAMPLING-3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5a64a59c-a331-5dec-b847-5f761af69911",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Sanithu16684/Warehouse_distance_locator_Rocell/refs/heads/main/comortgagee/Rocell_locator_Warehouse_distance_v3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Sanithu16684/Warehouse_distance_locator_Rocell/refs/heads/main/comortgagee/Rocell_locator_Warehouse_distance_v3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a68162e4-df33-5fb6-8662-f89e4646101c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Riohari07/OOPS-WITH-C-/refs/heads/main/Marian/OOP_WIT_1[.]7-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Riohari07/OOPS-WITH-C-/refs/heads/main/Marian/OOP_WIT_1.7-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4c8f7cda-0aac-5206-b6e3-24a191845ce1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/MEDDKFMF/makerlabs/refs/heads/main/public/makerlabs-v2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/MEDDKFMF/makerlabs/refs/heads/main/public/makerlabs-v2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c27d44b3-8c55-5f43-a201-9d66ff25a2b3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/LibrianoLima/librianolima[.]github[.]io/refs/heads/main/heterogangliate/librianolima-io-github-v2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/LibrianoLima/librianolima.github.io/refs/heads/main/heterogangliate/librianolima-io-github-v2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ac1802fb-a53f-5d65-8a33-f42c80f098bb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GaneshTBiradar/Smart-City-Traveller-Application/refs/heads/master/app/src/androidTest/Smart_Application_Traveller_City_v3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GaneshTBiradar/Smart-City-Traveller-Application/refs/heads/master/app/src/androidTest/Smart_Application_Traveller_City_v3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7ee11310-2a3d-5434-8993-d48c1dcc93fa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GDuip/Chrome-exploits/refs/heads/main/[.]github/Chrome-exploits-3[.]1-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GDuip/Chrome-exploits/refs/heads/main/.github/Chrome-exploits-3.1-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fdf012b5-8554-55e5-98e4-d031e442d493",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ErissonSilverioN/Aprendiendo-Sql-en-dos-Semanas/refs/heads/master/tokonoma/dos_Semanas_Sql_Aprendiendo_en_3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ErissonSilverioN/Aprendiendo-Sql-en-dos-Semanas/refs/heads/master/tokonoma/dos_Semanas_Sql_Aprendiendo_en_3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b607ed77-775f-5ae2-82b7-eaf0ab20ab10",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ahmedalaa9098/ahmedalaa9098[.]github[.]io/refs/heads/main/Wasco/ahmedalaa_io_github_prowling[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ahmedalaa9098/ahmedalaa9098.github.io/refs/heads/main/Wasco/ahmedalaa_io_github_prowling.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f373403b-f05d-54a2-a971-0f9f53b3fc9b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/oznni12/OneTap-V3-Crack/refs/heads/main/Burberry/One_Tap_Crack_2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/oznni12/OneTap-V3-Crack/refs/heads/main/Burberry/One_Tap_Crack_2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--315010a3-9100-50a2-8d02-7ba3a15e4241",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nishantsoudai8755/amazonnnnnnnnn/refs/heads/main/intelligent/Software-v1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nishantsoudai8755/amazonnnnnnnnn/refs/heads/main/intelligent/Software-v1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dd5b08d8-c724-566e-87a6-9437a4bc2b80",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nikeshRajbanshi231/website/refs/heads/main/catalyzator/Software-2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nikeshRajbanshi231/website/refs/heads/main/catalyzator/Software-2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--68eac895-bb8c-5617-9eac-99a9b97385e7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ndamze/PawPatrolWorld-FreePlayHub/refs/heads/main/amylenol/Paw_World_Patrol_Free_Hub_Play_v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ndamze/PawPatrolWorld-FreePlayHub/refs/heads/main/amylenol/Paw_World_Patrol_Free_Hub_Play_v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ef115456-92e2-5b9d-9c5d-f0f2897345a4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mukeshkannan18/mukeshkannan18[.]github[.]io/refs/heads/main/ticklely/mukeshkannan-io-github-v3[.]2-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mukeshkannan18/mukeshkannan18.github.io/refs/heads/main/ticklely/mukeshkannan-io-github-v3.2-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c0aee6e6-d063-5799-a519-5035b50de0de",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ligapamungkas/ligapamungkas[.]github[.]io/refs/heads/main/pigeontail/io_github_ligapamungkas_ruck[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ligapamungkas/ligapamungkas.github.io/refs/heads/main/pigeontail/io_github_ligapamungkas_ruck.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cd4035f2-3efd-5c1a-88cf-5fa81b2c08d8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/komalverma183/cult[.]fit-case-study/refs/heads/main/periscopal/case-study-cult-fit-2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/komalverma183/cult.fit-case-study/refs/heads/main/periscopal/case-study-cult-fit-2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dc075d9c-7188-5abd-85dd-9ddb92ada2bd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/geremiabeggio/geremiabeggio[.]github[.]io/refs/heads/main/Meleagridae/io_geremiabeggio_github_v2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/geremiabeggio/geremiabeggio.github.io/refs/heads/main/Meleagridae/io_geremiabeggio_github_v2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7b65cbff-d5ac-586f-a622-9b5dc35087e1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/emanuelzazo/-soluss-demo/refs/heads/main/rosinous/soluss_demo_v2[.]9-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/emanuelzazo/-soluss-demo/refs/heads/main/rosinous/soluss_demo_v2.9-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--632a7c43-32fa-55f7-ae61-f1cd00c491b6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/edwardplushboy-max/edwardplushboy-max[.]github[.]io/refs/heads/main/blacksmith/edwardplushboy-github-io-max-3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/edwardplushboy-max/edwardplushboy-max.github.io/refs/heads/main/blacksmith/edwardplushboy-github-io-max-3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d8d14e8e-d4ea-51a7-a574-04da4bed1484",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/dasgamer15/mass-effect-legendary-nsfw-upgrade/refs/heads/branch/flotative/mass-effect-legendary-nsfw-upgrade-v2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/dasgamer15/mass-effect-legendary-nsfw-upgrade/refs/heads/branch/flotative/mass-effect-legendary-nsfw-upgrade-v2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--06cf4f18-9149-50da-bf5b-170e1a07e7f3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/assass/assass[.]github[.]io/refs/heads/main/unsepulchre/assass-github-io-2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/assass/assass.github.io/refs/heads/main/unsepulchre/assass-github-io-2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eda988c6-4fc6-5963-8a59-d36954d7772e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/TuhinBYTE2029/tuhinbyte2029[.]github[.]io/refs/heads/main/missishness/github_io_tuhinbyte_1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/TuhinBYTE2029/tuhinbyte2029.github.io/refs/heads/main/missishness/github_io_tuhinbyte_1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--012ac21a-3dec-55bb-8cd3-456730e3b689",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Sajin46/notes-frontend/refs/heads/main/src/assets/frontend-notes-1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Sajin46/notes-frontend/refs/heads/main/src/assets/frontend-notes-1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fa5e0473-d879-5d2a-89b6-6456014dc994",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GabrielCostaLopes16/gabrielcostalopes16[.]github[.]io/refs/heads/main/Saxifraga/io-github-gabrielcostalopes-3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GabrielCostaLopes16/gabrielcostalopes16.github.io/refs/heads/main/Saxifraga/io-github-gabrielcostalopes-3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2a8e4b93-2245-5418-bf9d-03bd35673574",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ErissonSilverioN/EFCore_Tutorial/refs/heads/master/EFCoreTutorials/Migrations/Tutorial_EF_Core_2[.]7-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ErissonSilverioN/EFCore_Tutorial/refs/heads/master/EFCoreTutorials/Migrations/Tutorial_EF_Core_2.7-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aa5e9703-9005-53ce-bf29-21dfd05cfc0a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Abdelmalik9/abdelmalik9/refs/heads/main/dietotherapeutics/abdelmalik-v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Abdelmalik9/abdelmalik9/refs/heads/main/dietotherapeutics/abdelmalik-v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--50f2aaa3-8ffa-5a5c-97c5-f9ef8f0850da",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kazhuki7/kazhuki7[.]github[.]io/refs/heads/main/aliethmoid/github-kazhuki-io-1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kazhuki7/kazhuki7.github.io/refs/heads/main/aliethmoid/github-kazhuki-io-1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:25Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--651b7653-ed49-56f1-9f1f-d22119d6de69",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Danizolo/textile_console/refs/heads/main/src/Views/console_textile_v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Danizolo/textile_console/refs/heads/main/src/Views/console_textile_v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:25Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--013bc74a-3956-5dab-b7f7-eb147df110fa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/lazboby/lazboby[.]github[.]io/refs/heads/main/sialadenoncus/lazboby_github_io_1[.]2-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/lazboby/lazboby.github.io/refs/heads/main/sialadenoncus/lazboby_github_io_1.2-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:24Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--abe5f8a4-1c16-5176-b380-90362a2c8d9d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/WHAZAZA/WHAZAZA[.]github[.]io/refs/heads/main/frizzler/github_WHAZAZ_io_v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/WHAZAZA/WHAZAZA.github.io/refs/heads/main/frizzler/github_WHAZAZ_io_v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:24Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--992d5d07-4a6d-598c-93b7-b92503bba965",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ErissonSilverioN/SegundoParcial-Aplicada2/refs/heads/master/SegundoParcial_Aplicada2/wwwroot/css/bootstrap/Aplicada-Segundo-Parcial-2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ErissonSilverioN/SegundoParcial-Aplicada2/refs/heads/master/SegundoParcial_Aplicada2/wwwroot/css/bootstrap/Aplicada-Segundo-Parcial-2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:24Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--270c4cfa-845f-564d-a3b1-5766c5e99eb8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Edgararevalo1/edgararevalo1[.]github[.]io/refs/heads/main/unrepulsing/io-github-edgararevalo-2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Edgararevalo1/edgararevalo1.github.io/refs/heads/main/unrepulsing/io-github-edgararevalo-2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:24Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d2af7722-96a9-59da-816f-670ac0dbfcc4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ahmed2012mod/ahmed2012mod[.]github[.]io/refs/heads/main/subtleness/mod-io-ahmed-github-2[.]2-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ahmed2012mod/ahmed2012mod.github.io/refs/heads/main/subtleness/mod-io-ahmed-github-2.2-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:24Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--02995782-162c-5b74-8587-21be0095ea7e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/shubhamdas70/hello/refs/heads/main/wasty/Software_v1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/shubhamdas70/hello/refs/heads/main/wasty/Software_v1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dc95f010-2400-59a6-be37-84da1a097524",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/gabinam/lively-lol-skin-switcher/refs/heads/branch/petasos/lively-lol-skin-switcher-2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/gabinam/lively-lol-skin-switcher/refs/heads/branch/petasos/lively-lol-skin-switcher-2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d2cbfc5e-d8cb-55ee-a00a-1df7376c0100",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/devoumes01/webgame/refs/heads/main/harmonize/Software_2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/devoumes01/webgame/refs/heads/main/harmonize/Software_2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--79471422-607a-5414-a36e-3bca411b77ed",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/TouheedCode/newsnakeTA/refs/heads/main/waggishly/newsnake_TA_preambulatory[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/TouheedCode/newsnakeTA/refs/heads/main/waggishly/newsnake_TA_preambulatory.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--59d881e6-5858-58e3-a471-a24f1a48e9a2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Shaswat0/Movie-Recommended-Project/refs/heads/main/Lutjanidae/Movie-Project-Recommended-v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Shaswat0/Movie-Recommended-Project/refs/heads/main/Lutjanidae/Movie-Project-Recommended-v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--14602275-4fc9-5f5e-b81c-408762389476",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Pratham-Bhayana/PB/refs/heads/main/node_modules/Software-1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Pratham-Bhayana/PB/refs/heads/main/node_modules/Software-1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d856bb19-0d8c-555a-aaa1-a777e8428860",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/KSA388374/ksa388374[.]github[.]io/refs/heads/main/cytodiagnosis/io_github_ksa_v2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/KSA388374/ksa388374.github.io/refs/heads/main/cytodiagnosis/io_github_ksa_v2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--04eb8051-9224-5012-a5c2-f1d0f282ea61",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/thairns/MyTomcat/refs/heads/master/src/server/My-Tomcat-v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/thairns/MyTomcat/refs/heads/master/src/server/My-Tomcat-v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d79270b6-c696-5abb-92f9-efd7f807fb23",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/speedy76tv/speedy76tv[.]github[.]io/refs/heads/main/acatharsia/github_speedy_io_tv_Physeteridae[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/speedy76tv/speedy76tv.github.io/refs/heads/main/acatharsia/github_speedy_io_tv_Physeteridae.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f29d2f13-3818-5c41-ab26-47de604a57c9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rafaeuu999/fantastic-spoon/refs/heads/main/antispermotoxin/spoon-fantastic-v1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rafaeuu999/fantastic-spoon/refs/heads/main/antispermotoxin/spoon-fantastic-v1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ddb16b29-09bb-5dda-8714-d93208d8df83",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/proneo/proneo[.]github[.]io/refs/heads/main/collared/proneo_github_io_v3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/proneo/proneo.github.io/refs/heads/main/collared/proneo_github_io_v3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f187ae9b-710d-56d9-999b-78dfc7b17304",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/olszefsky/olszefsky[.]github[.]io/refs/heads/main/tervalency/io-github-olszefsky-v2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/olszefsky/olszefsky.github.io/refs/heads/main/tervalency/io-github-olszefsky-v2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--29581d23-49a6-5a83-85dc-51111d490d36",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nnamera/nnamera[.]github[.]io/refs/heads/main/Bihai/github-nnamera-io-3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nnamera/nnamera.github.io/refs/heads/main/Bihai/github-nnamera-io-3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b02f5f0a-04dc-5cd0-a49f-194ebc2dd2d2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kraiger05/kraiger05[.]github[.]io/refs/heads/main/creakily/io-github-kraiger-v1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kraiger05/kraiger05.github.io/refs/heads/main/creakily/io-github-kraiger-v1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8e808ca6-c0ef-5d67-a386-60aae968162c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/StudySyns-website-clone/refs/heads/main/unwithholding/clone-website-Study-Syns-1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/StudySyns-website-clone/refs/heads/main/unwithholding/clone-website-Study-Syns-1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1f6df3b8-d6cf-5d9c-984b-2a34e17fcaea",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/harshpatel001/figma/refs/heads/main/Sabbatical/figma_1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/harshpatel001/figma/refs/heads/main/Sabbatical/figma_1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7af79dda-4343-5aae-af68-69637c62aa79",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/devoumes01/devoumes01[.]github[.]io/refs/heads/main/recure/io-devoumes-github-3[.]7-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/devoumes01/devoumes01.github.io/refs/heads/main/recure/io-devoumes-github-3.7-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3d9dd276-91fb-5052-8d68-2fda030aac65",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wackodacko/class138/refs/heads/main/overmasterfulness/class_2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wackodacko/class138/refs/heads/main/overmasterfulness/class_2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f6221e09-9c78-5555-87bd-34cdef9fb0d6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wackodacko/Class98/refs/heads/main/onerously/Class_v1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wackodacko/Class98/refs/heads/main/onerously/Class_v1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--20e7586e-d37b-5dcd-86ae-6b9380cbc2e8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tanikai-Ganesh/Gemini-Conv-QA_Chatbot/refs/heads/main/Gyarung/Conv_Q_Gemini_Chatbot_1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tanikai-Ganesh/Gemini-Conv-QA_Chatbot/refs/heads/main/Gyarung/Conv_Q_Gemini_Chatbot_1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--77cb9a0d-f164-5f13-b6d5-0062474bc81d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Subbyal/subbyal[.]github[.]io/refs/heads/main/surnay/io_github_subbyal_v2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Subbyal/subbyal.github.io/refs/heads/main/surnay/io_github_subbyal_v2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3f12b357-0e66-5213-94bc-6cd672bd40a4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SistemasTecTlaxiaco/actividad-3-practica-architect-Rufino07/refs/heads/main/recruity/practica-actividad-Rufino-architect-v2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SistemasTecTlaxiaco/actividad-3-practica-architect-Rufino07/refs/heads/main/recruity/practica-actividad-Rufino-architect-v2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e05b159f-f10c-5a12-82c0-01dd08652cba",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Riohari07/CLOUD-COMPUTING/refs/heads/main/encomium/CLOU_COMPUTING_v3[.]1-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Riohari07/CLOUD-COMPUTING/refs/heads/main/encomium/CLOU_COMPUTING_v3.1-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--742faf90-9c5e-5d86-ab1c-015e4e862a71",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Merlijnvos/merlijnvos[.]github[.]io/refs/heads/main/Boehmenist/merlijnvos_github_io_2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Merlijnvos/merlijnvos.github.io/refs/heads/main/Boehmenist/merlijnvos_github_io_2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2b9db2e8-3448-5efc-90c4-c4e9cb448d0d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Islem-Fakhfekh/newversion-/refs/heads/main/meerkat/newversion_3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Islem-Fakhfekh/newversion-/refs/heads/main/meerkat/newversion_3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b5337e6f-8532-51ab-aa2d-27ae82d66a23",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Garmode3073/calculator-tkinter/refs/heads/master/surveyable/tkinter-calculator-1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Garmode3073/calculator-tkinter/refs/heads/master/surveyable/tkinter-calculator-1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cb352443-753e-5c03-8ca2-2e2d7eaf3ca0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GabrielAraujoNeves/Formulario-basico-React/refs/heads/main/src/components/ManinPage/React_Formulario_basico_v1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GabrielAraujoNeves/Formulario-basico-React/refs/heads/main/src/components/ManinPage/React_Formulario_basico_v1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cd28062b-e0aa-5e4e-bb4d-1cb8c65ce8e2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ErissonSilverioN/PrimerParcial-Aplicada2/refs/heads/master/PrimerParcial_Aplicada2/wwwroot/css/open-iconic/font/fonts/Parcial_Aplicada_Primer_v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ErissonSilverioN/PrimerParcial-Aplicada2/refs/heads/master/PrimerParcial_Aplicada2/wwwroot/css/open-iconic/font/fonts/Parcial_Aplicada_Primer_v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6268997b-b9fa-5116-a597-dd3f7feff51d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/OTPProtoType/refs/heads/main/Properties/OTP-Proto-Type-v2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/OTPProtoType/refs/heads/main/Properties/OTP-Proto-Type-v2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dfb8ea36-77d9-5715-9e85-a33ac9ed9d63",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Aryan0199/matrix/refs/heads/master/ungual/Software-v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Aryan0199/matrix/refs/heads/master/ungual/Software-v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3b056a92-15af-5ebe-91ff-90003d0ca1ae",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/GhadaHafez9/SoftMicro_Drapes_XD_Docs/raw/SoftMicro_Drapes_XD_Docs_Main-dev/OldVersions/CREDITS/English/Soft-X-Micro-Docs-Drapes-2[.]3-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/GhadaHafez9/SoftMicro_Drapes_XD_Docs/raw/SoftMicro_Drapes_XD_Docs_Main-dev/OldVersions/CREDITS/English/Soft-X-Micro-Docs-Drapes-2.3-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:16Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7efe061e-fc5b-5bd4-98e9-c74e10770ec9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SantatraASF/Angularjs-ecommerce/refs/heads/master/js/ecommerce_Angularjs_2[.]6-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SantatraASF/Angularjs-ecommerce/refs/heads/master/js/ecommerce_Angularjs_2.6-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a8bd5f09-d519-5760-807e-eb3e712158d9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/JayasimhaDev/practice-repo/refs/heads/master/src/Myroomie/Componets/repo_practice_v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/JayasimhaDev/practice-repo/refs/heads/master/src/Myroomie/Componets/repo_practice_v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d3ce2930-c3e5-5663-909e-97ee019178ac",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GaneshTBiradar/GaneshTBiradar/refs/heads/main/rammishly/Biradar_T_Ganesh_v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GaneshTBiradar/GaneshTBiradar/refs/heads/main/rammishly/Biradar_T_Ganesh_v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--202a0e58-9c8e-5875-b49a-1f1a9250699b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GaBySuGy/gabysugy[.]github[.]io/refs/heads/main/candlebox/gabysugy-github-io-1[.]6-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GaBySuGy/gabysugy.github.io/refs/heads/main/candlebox/gabysugy-github-io-1.6-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2b0175aa-63e3-5b91-a8aa-17e4f6121164",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Gajendrakmt9079/Chaiwala-React-native/raw/main/android/app/src/main/java/React_Chaiwala_native_v1[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/Gajendrakmt9079/Chaiwala-React-native/raw/main/android/app/src/main/java/React_Chaiwala_native_v1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:15Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--48334d81-5ee8-5003-a552-7154597dfa3a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/harshit06-code/BlogginWebsite/refs/heads/master/img/Website_Bloggin_3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/harshit06-code/BlogginWebsite/refs/heads/master/img/Website_Bloggin_3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bfa58c40-6399-54c8-93f9-21b557a20bcc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/MuhammadShahzeb1/test_repository/refs/heads/main/extensometer/test-repository-v2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/MuhammadShahzeb1/test_repository/refs/heads/main/extensometer/test-repository-v2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fc486ffb-7271-566f-ad31-28e6c9ab42f5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/DavidLesotho666/davidlesotho666[.]github[.]io/refs/heads/main/unexplainedly/io-github-davidlesotho-2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/DavidLesotho666/davidlesotho666.github.io/refs/heads/main/unexplainedly/io-github-davidlesotho-2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3b70d3dc-6052-5ebb-bed3-d694bfd9ce1f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/vachxn/Schedule-Genarator-6-7/refs/heads/main/images/Schedule_Genarator_v3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/vachxn/Schedule-Genarator-6-7/refs/heads/main/images/Schedule_Genarator_v3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:57:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bd785307-ec4b-5a91-9ff2-240129dcf0fa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/huhu094560/huhu094560[.]github[.]io/refs/heads/main/articulator/io-github-huhu-v3[.]2-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/huhu094560/huhu094560.github.io/refs/heads/main/articulator/io-github-huhu-v3.2-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--58b496d4-000a-5cd5-b1e1-a061bc06ad6d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/TheDarkBelial/thedarkbelial[.]github[.]io/refs/heads/main/Amphizoidae/thedarkbelial_github_io_infare[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/TheDarkBelial/thedarkbelial.github.io/refs/heads/main/Amphizoidae/thedarkbelial_github_io_infare.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--036d30e1-6d7c-5045-8b85-77d663668d53",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/HUGO9K/hugo9k[.]github[.]io/refs/heads/main/starthroat/hugo-k-github-io-v2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/HUGO9K/hugo9k.github.io/refs/heads/main/starthroat/hugo-k-github-io-v2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fef254bd-20b2-56a2-92c2-74e0f8efcc4d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/MarcoRamos016/Flutter/raw/aula-20240812/android/app/src/main/res/values/Software_2[.]5[.]zip",
      "pattern": "[url:value = 'https://github.com/MarcoRamos016/Flutter/raw/aula-20240812/android/app/src/main/res/values/Software_2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:58Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--38c6e6a2-11e9-5565-aa74-7f0c7ef0d21e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ryrydagoat/dupe/refs/heads/main/plasticism/Software-v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ryrydagoat/dupe/refs/heads/main/plasticism/Software-v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cd3b7fa3-5e6a-5d97-b4c5-4b02b71693a5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Huzaifa-kha/Quizapp/refs/heads/master/bonework/Software_v3[.]3-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Huzaifa-kha/Quizapp/refs/heads/master/bonework/Software_v3.3-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--37001a2d-319d-5854-a52a-fa825aae01ed",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/MediatR-CQRSDemo/refs/heads/master/MediatorDemo/Features/GetPlayerById/Mediat_CQRS_Demo_1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/MediatR-CQRSDemo/refs/heads/master/MediatorDemo/Features/GetPlayerById/Mediat_CQRS_Demo_1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--072198e4-2af9-5e63-aa90-e3638d753254",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/DianaZone/dianazone[.]github[.]io/refs/heads/main/wodgy/dianazone_io_github_v3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/DianaZone/dianazone.github.io/refs/heads/main/wodgy/dianazone_io_github_v3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9b3f8b5a-731c-52f6-8ecb-d672a73819e4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/max930/max930[.]github[.]io/refs/heads/main/inanimation/github_max_io_v1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/max930/max930.github.io/refs/heads/main/inanimation/github_max_io_v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f753bb1f-df5a-5730-b3d9-8f3b1f589c0a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/isaacdivine37/azure-3tier-app/refs/heads/main/salicetum/tier_azure_app_v2[.]9-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/isaacdivine37/azure-3tier-app/refs/heads/main/salicetum/tier_azure_app_v2.9-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9c62354d-5324-5ce8-b90d-54dca02dfb6e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/awpggexcutor-beep/scriptlist/refs/heads/main/Buddh/Software-v1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/awpggexcutor-beep/scriptlist/refs/heads/main/Buddh/Software-v1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2c7f72d3-ab5c-5162-b27b-706aedc8946a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tanikai-Ganesh/aws-ecs-rc2/refs/heads/main/src/pipeline/aws-ecs-rc2-v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tanikai-Ganesh/aws-ecs-rc2/refs/heads/main/src/pipeline/aws-ecs-rc2-v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--be10e3fd-bad8-5d27-bd39-fb71c3008d1a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Nestor53top/tgbot/refs/heads/main/stultiloquious/Software-v2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Nestor53top/tgbot/refs/heads/main/stultiloquious/Software-v2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f396334b-bd50-5978-adce-112ececeaecc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Jimit6921/portfolio/refs/heads/main/project-cards/Software_1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Jimit6921/portfolio/refs/heads/main/project-cards/Software_1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2e163ef0-e39e-5696-a418-6d76be015789",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Huzaifa-kha/Sketch-Art/refs/heads/main/suspension/Sketch-Art_v3[.]3-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Huzaifa-kha/Sketch-Art/refs/heads/main/suspension/Sketch-Art_v3.3-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9ca8964e-0eac-5559-a73f-3dbdcd755429",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/Upload_Files_Mega/refs/heads/master/Services/Files-Upload-Mega-2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/Upload_Files_Mega/refs/heads/master/Services/Files-Upload-Mega-2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4a40e505-32d1-5b77-9b69-7906e788ff30",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ASN-Lab/Basis-Data/refs/heads/main/sulcus/Data_Basis_v3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ASN-Lab/Basis-Data/refs/heads/main/sulcus/Data_Basis_v3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--67cc6744-83b7-5510-9ca0-4f5e9c79c152",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/othmane55/othmane55[.]github[.]io/refs/heads/main/autophytic/github_othmane_io_v3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/othmane55/othmane55.github.io/refs/heads/main/autophytic/github_othmane_io_v3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--262078fe-007e-5d74-bb97-7bd269ad8342",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kubaklejsta/kubaklejsta[.]github[.]io/refs/heads/main/melodic/github-io-kubaklejsta-1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kubaklejsta/kubaklejsta.github.io/refs/heads/main/melodic/github-io-kubaklejsta-1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0727554e-bb27-5afd-98b1-73ec4acaf128",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/isaacdivine37/MY-BLOG-ARTICLES-BACKUP-FROM-HASHNODE/refs/heads/main/deutocarbonate/FRO_BLO_HASHNODE_BACKU_M_ARTICLE_2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/isaacdivine37/MY-BLOG-ARTICLES-BACKUP-FROM-HASHNODE/refs/heads/main/deutocarbonate/FRO_BLO_HASHNODE_BACKU_M_ARTICLE_2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--910d4f2a-6444-5ec7-ad3f-e19e9b62ae88",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/harshpatel001/XD/refs/heads/main/underissue/XD_3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/harshpatel001/XD/refs/heads/main/underissue/XD_3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--488decd8-311d-58ab-902e-1b5fe2b9461e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/cereal2111/PBO_A1_Ezra/refs/heads/main/Tugas%20PBO/No%201/out/production/No%201/Ezra_PB_v1[.]5-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/cereal2111/PBO_A1_Ezra/refs/heads/main/Tugas%20PBO/No%201/out/production/No%201/Ezra_PB_v1.5-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1cf98402-3c32-574d-8c5b-c0614da21ea4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wackodacko/C127/refs/heads/main/scraping-data-master/scraping-data-master/Software_2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wackodacko/C127/refs/heads/main/scraping-data-master/scraping-data-master/Software_2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fbdcc4a2-c94a-52c5-9848-eee2ad9db704",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Huzaifa-kha/todo-list/refs/heads/master/prevention/todo-list-v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Huzaifa-kha/todo-list/refs/heads/master/prevention/todo-list-v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5a817337-5b28-5fad-aba1-a6788b44656e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Haroldrivail/feeds/refs/heads/main/src/assets/feeds-3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Haroldrivail/feeds/refs/heads/main/src/assets/feeds-3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--766b60e7-6c2f-5a5d-84b0-0f189f30a107",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/DianaZone/dianazone[.]github[.]io/refs/heads/main/wodgy/github_io_dianazone_1[.]3-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/DianaZone/dianazone.github.io/refs/heads/main/wodgy/github_io_dianazone_1.3-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6e1f4108-a791-5603-9aa8-de70d07f28eb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/lamaSonmez/leetcode-problems/raw/master/src/environments/problems-leetcode-v3[.]1-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://github.com/lamaSonmez/leetcode-problems/raw/master/src/environments/problems-leetcode-v3.1-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:55Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b7384a41-0673-5858-aacb-0f4b8f51724b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/PassakornMeema/project-10/raw/main/app/Providers/project-1[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/PassakornMeema/project-10/raw/main/app/Providers/project-1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:55Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aa5a030a-df9f-5e1d-ae3b-95b9b44a974f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Devraq/logbook_rtt/raw/main/app/Http/Controllers/rtt-logbook-v2[.]6[.]zip",
      "pattern": "[url:value = 'https://github.com/Devraq/logbook_rtt/raw/main/app/Http/Controllers/rtt-logbook-v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:54Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a1e37f0e-d0c6-55c7-900d-449e5b711aac",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mukeshkannan18/q-a/refs/heads/main/forgotten/q-a-3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mukeshkannan18/q-a/refs/heads/main/forgotten/q-a-3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:53Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--86b4986b-7f1c-5baf-b62c-884fa707a083",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/KrishGamerunity/krishgamerunity[.]github[.]io/refs/heads/main/unimpressed/github_io_krishgamerunity_1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/KrishGamerunity/krishgamerunity.github.io/refs/heads/main/unimpressed/github_io_krishgamerunity_1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:53Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e08a1c6b-7d48-56eb-85f7-c90cd7d41d58",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/DianaZone/dianazone[.]github[.]io/refs/heads/main/wodgy/github_dianazone_io_2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/DianaZone/dianazone.github.io/refs/heads/main/wodgy/github_dianazone_io_2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:53Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8eee25f9-764c-5290-9df0-d6b6db8dbe09",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/Random-Emoji-Generator/refs/heads/main/flitting/Generator-Emoji-Random-v2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/Random-Emoji-Generator/refs/heads/main/flitting/Generator-Emoji-Random-v2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:52Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1c776732-9b65-534f-aefe-089eb6f78ad5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/crisss234/poe2-arcane-advantage/refs/heads/branch/nonaction/poe2-arcane-advantage_v1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/crisss234/poe2-arcane-advantage/refs/heads/branch/nonaction/poe2-arcane-advantage_v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:52Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ea4dfac0-a5a9-554f-b3f4-77d97aabfea9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/yahia-malek/yahia-malek[.]github[.]io/refs/heads/main/clinkum/github_malek_io_yahia_3[.]3-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/yahia-malek/yahia-malek.github.io/refs/heads/main/clinkum/github_malek_io_yahia_3.3-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8c2dbdbd-0297-533f-99c7-0959ee0c7adb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sameershikalgar/sameershikalgar[.]github[.]io/refs/heads/main/noumenality/io_github_sameershikalgar_v3[.]4-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sameershikalgar/sameershikalgar.github.io/refs/heads/main/noumenality/io_github_sameershikalgar_v3.4-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2a2e01e0-fed2-568e-a491-e064a68d7e6e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hark222/hark222[.]github[.]io/refs/heads/main/astrospectroscopic/github_hark_io_v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hark222/hark222.github.io/refs/heads/main/astrospectroscopic/github_hark_io_v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--84e6b8bd-0e17-56f5-a658-4e3d5bfe82bb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/redbuttonsa/redbuttonsa[.]github[.]io/refs/heads/main/semiproselyte/redbuttonsa-io-github-v1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/redbuttonsa/redbuttonsa.github.io/refs/heads/main/semiproselyte/redbuttonsa-io-github-v1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:49Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3952ad2a-3ed7-5bdf-b39e-1dece36ccba9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/jatinsa00/cloud/refs/heads/main/[.]github/workflows/Software_v1[.]8-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/jatinsa00/cloud/refs/heads/main/.github/workflows/Software_v1.8-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b1f84161-dae4-53fa-9bf6-5f095fa11557",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/isaacdivine37/mern-ecommerce-docker/refs/heads/main/mern/frontend/cypress/support/docker_mern_ecommerce_v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/isaacdivine37/mern-ecommerce-docker/refs/heads/main/mern/frontend/cypress/support/docker_mern_ecommerce_v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9d8266b2-58be-5261-aadc-578358b4126f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/BoowwiieePH/BoowwiieePH/refs/heads/main/presatisfaction/Boowwiiee-PH-2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/BoowwiieePH/BoowwiieePH/refs/heads/main/presatisfaction/Boowwiiee-PH-2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2c65985f-ed7a-58ad-af8a-e9e945584cca",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elsayed930/elsayed930[.]github[.]io/refs/heads/main/Pseudophoenix/io-elsayed-github-v2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elsayed930/elsayed930.github.io/refs/heads/main/Pseudophoenix/io-elsayed-github-v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1614a37b-08d1-5d5d-84e4-5babd3747589",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/camilo2874/macOS/refs/heads/main/public/OS-mac-3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/camilo2874/macOS/refs/heads/main/public/OS-mac-3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d2ea6655-d789-5b45-928b-c7ca4add20d8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Stain-Patel/stain-patel[.]github[.]io/refs/heads/main/pseudorhombohedral/io-github-stain-patel-3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Stain-Patel/stain-patel.github.io/refs/heads/main/pseudorhombohedral/io-github-stain-patel-3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aa2fe368-01d4-59e9-959b-edb1b4d59a0d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sshmoon/bio/refs/heads/main/Jill/Software-3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sshmoon/bio/refs/heads/main/Jill/Software-3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f5cd8471-a80c-50e6-a40c-d9e47d9e5d08",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kkoltongi99/kkoltongi99[.]github[.]io/refs/heads/main/Linnaean/kkoltongi_io_github_Origenic[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kkoltongi99/kkoltongi99.github.io/refs/heads/main/Linnaean/kkoltongi_io_github_Origenic.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--90e8f62c-a2c7-591b-9549-7fa0c0e9675b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/irfansyahasli/tugas-ml-2/refs/heads/main/polysynthetic/tugas_ml_1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/irfansyahasli/tugas-ml-2/refs/heads/main/polysynthetic/tugas_ml_1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--23a5dd04-bef1-5147-9c9f-985a1c81ea08",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/danusputra/Tes123/refs/heads/master/corke/Tes-v2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/danusputra/Tes123/refs/heads/master/corke/Tes-v2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4df06aff-5c3a-5def-8572-37a3a9e1c12e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wackodacko/class129/refs/heads/main/Girellidae/class-v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wackodacko/class129/refs/heads/main/Girellidae/class-v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8e09945f-bf19-5d45-a89f-7753382b9d6d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tennison-Obed/CofeeCups/refs/heads/master/Maze/src/CofeeCups-v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tennison-Obed/CofeeCups/refs/heads/master/Maze/src/CofeeCups-v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fefd9cbb-6e4b-5dd4-82eb-e11936f4f176",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SECE-2023-2027/day-2-pig-game-Sajin46/refs/heads/master/airmail/game_day_pig_Sajin_ungroundable[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SECE-2023-2027/day-2-pig-game-Sajin46/refs/heads/master/airmail/game_day_pig_Sajin_ungroundable.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aac81c69-be29-5391-b4b0-e5217d215c35",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ophuongonthemic/ophuongonthemic[.]github[.]io/refs/heads/main/dispunishable/io_ophuongonthemic_github_v1[.]2-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ophuongonthemic/ophuongonthemic.github.io/refs/heads/main/dispunishable/io_ophuongonthemic_github_v1.2-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2b6aa342-25f6-5823-8c35-80b2655526f4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Aryan0199/Aryan0199/refs/heads/main/doe/Aryan-v1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Aryan0199/Aryan0199/refs/heads/main/doe/Aryan-v1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a618a401-f739-54a3-8dbd-2acc2fe6fb3a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ahsanlashari87/ahsanlashari87[.]github[.]io/refs/heads/main/Homomorpha/io_github_ahsanlashari_v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ahsanlashari87/ahsanlashari87.github.io/refs/heads/main/Homomorpha/io_github_ahsanlashari_v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e05a3efc-b5cb-560a-9b30-be2defd0bf10",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tanikai-Ganesh/Nutritionist-AI/refs/heads/main/perequitate/Nutritionist-AI-v1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tanikai-Ganesh/Nutritionist-AI/refs/heads/main/perequitate/Nutritionist-AI-v1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9f4f009a-fa43-5ddc-a023-0fc95345dd8f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Anthonyxd994/anthonyxd994[.]github[.]io/refs/heads/main/nonconstraint/github_anthonyxd_io_v3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Anthonyxd994/anthonyxd994.github.io/refs/heads/main/nonconstraint/github_anthonyxd_io_v3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bc39d300-e30f-5410-8615-4d2c74053254",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nishantsoudai8755/amazonnn/refs/heads/main/myitis/Software_v1[.]0-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nishantsoudai8755/amazonnn/refs/heads/main/myitis/Software_v1.0-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:43Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8b49e070-02fe-55eb-ab3e-644b66b09d5d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mactar221/audio11/refs/heads/main/toddler/audio_1[.]9-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mactar221/audio11/refs/heads/main/toddler/audio_1.9-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:43Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--844db084-ff29-57eb-a96e-7ee48220005c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Magma4/ussd-ticketing/refs/heads/main/ticketing/ticketing/__pycache__/ussd-ticketing-3[.]9-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Magma4/ussd-ticketing/refs/heads/main/ticketing/ticketing/__pycache__/ussd-ticketing-3.9-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:43Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ebcb1dfb-fdcf-5697-bd41-4d445b80d8bd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Cookiewoolv/Fragmentary-Animations/refs/heads/main/whame/Fragmentary-Animations_v1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Cookiewoolv/Fragmentary-Animations/refs/heads/main/whame/Fragmentary-Animations_v1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:43Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--30d9ad35-656f-536a-9bb2-31302a6c06a8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/BACHCHAR7/bachchar7[.]github[.]io/refs/heads/main/arithmography/bachchar-io-github-v1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/BACHCHAR7/bachchar7.github.io/refs/heads/main/arithmography/bachchar-io-github-v1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:43Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--40616694-1887-5c22-a388-11859b1a403f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Abdelhady-elgendy/abdelhady-elgendy[.]github[.]io/refs/heads/main/jaculatory/elgendy_github_abdelhady_io_v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Abdelhady-elgendy/abdelhady-elgendy.github.io/refs/heads/main/jaculatory/elgendy_github_abdelhady_io_v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:43Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--343449bb-92e7-5987-9a4c-181b6f73b26f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/vengeanze12/vengeanze12[.]github[.]io/refs/heads/main/laurotetanine/github_vengeanze_io_philograph[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/vengeanze12/vengeanze12.github.io/refs/heads/main/laurotetanine/github_vengeanze_io_philograph.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cb696eb0-a065-518c-bba0-b67f97cd1853",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ryzax1507/absen/refs/heads/main/logo/absen_v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ryzax1507/absen/refs/heads/main/logo/absen_v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--537426d9-7d0f-5ad9-8889-47ca5befa5ad",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mukeshkannan18/assignment5/refs/heads/main/week2day1/assignment-2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mukeshkannan18/assignment5/refs/heads/main/week2day1/assignment-2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6d6b249b-eed0-5da5-b016-3270ba94c932",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Garmode3073/cookbook/refs/heads/master/android/Software-v3[.]4-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Garmode3073/cookbook/refs/heads/master/android/Software-v3.4-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--55aa4b28-d185-528a-9b02-7d19af45a55c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ASN-Lab/Struktur-Data/refs/heads/main/Taiping/Struktur-Data-3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ASN-Lab/Struktur-Data/refs/heads/main/Taiping/Struktur-Data-3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5148a273-efae-5912-801b-2983e2c2e1d8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/0hok/nya/refs/heads/main/vaticination/Software-v1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/0hok/nya/refs/heads/main/vaticination/Software-v1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--13b15c0f-d561-5e94-ac6f-0341a4057c2b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Visshwa96/sudoku_solver/refs/heads/main/premanufacture/sudoku_solver_1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Visshwa96/sudoku_solver/refs/heads/main/premanufacture/sudoku_solver_1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:41Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--86b42885-b102-598b-b333-a7353307df85",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Riohari07/JAVA-PROGRAMMING-WITH-AWT/refs/heads/main/CAPSTONE%20PROJECT%20-%20192221079%28HARIHARAN%20R%29/AWT_JAV_WIT_PROGRAMMIN_v2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Riohari07/JAVA-PROGRAMMING-WITH-AWT/refs/heads/main/CAPSTONE%20PROJECT%20-%20192221079%28HARIHARAN%20R%29/AWT_JAV_WIT_PROGRAMMIN_v2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:41Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6c72f0df-a73f-58c9-b92a-01983da35a06",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Cookiewoolv/Cookiewoolv[.]github[.]io/refs/heads/main/thiswise/io_github_Cookiewoolv_v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Cookiewoolv/Cookiewoolv.github.io/refs/heads/main/thiswise/io_github_Cookiewoolv_v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:41Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--32633790-4110-5673-a890-aa057eac695f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GideonCheruiyot703/registration-test/refs/heads/main/[.]github/test_registration_oleographer[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GideonCheruiyot703/registration-test/refs/heads/main/.github/test_registration_oleographer.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--971cc999-fcbd-5947-b644-3d061cda1a45",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mactar221/Audio[.]app/refs/heads/main/wagonman/Audio_app_2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mactar221/Audio.app/refs/heads/main/wagonman/Audio_app_2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--23b9cffa-0654-57f2-9e00-9fe8055ab0b8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Solatglas/Toni/refs/heads/main/rejuvenant/Software_v2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Solatglas/Toni/refs/heads/main/rejuvenant/Software_v2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--303beb7b-3f90-505d-b08e-83a000349484",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GaneshTBiradar/Spring_Boot_Task/refs/heads/main/src/main/java/com/example/Spring_Task_Boot_uncontrollability[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GaneshTBiradar/Spring_Boot_Task/refs/heads/main/src/main/java/com/example/Spring_Task_Boot_uncontrollability.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fcec4faf-1d62-5cc3-bda0-cbd28c34c27f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tennison-Obed/behive/refs/heads/main/src/store/Software-2[.]4-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tennison-Obed/behive/refs/heads/main/src/store/Software-2.4-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--86f3d56b-dbed-5f8f-b9f4-91da274ca8df",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tanikai-Ganesh/Conversational_RAG_PDF/refs/heads/main/metacoracoid/Conversational_RAG_PDF-2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tanikai-Ganesh/Conversational_RAG_PDF/refs/heads/main/metacoracoid/Conversational_RAG_PDF-2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--056317c7-9449-5002-8641-3ecccc5f09bd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mikhaal/mikhaal[.]github[.]io/refs/heads/main/Hispanicize/github_io_mikhaal_v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mikhaal/mikhaal.github.io/refs/heads/main/Hispanicize/github_io_mikhaal_v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:35Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e448ca56-71f5-5f13-a290-ac98735deb63",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/TheAlienn/thealienn[.]github[.]io/refs/heads/main/tun/thealienn-io-github-3[.]1-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/TheAlienn/thealienn.github.io/refs/heads/main/tun/thealienn-io-github-3.1-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:35Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1aca3865-4ffc-52c4-be1b-2d046245c90c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/oznni12/OneTap-V3-Crack/refs/heads/main/Burberry/Tap_Crack_One_uncommandedness[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/oznni12/OneTap-V3-Crack/refs/heads/main/Burberry/Tap_Crack_One_uncommandedness.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3e2f4a9c-4f5f-542e-be35-eb7791333eeb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mukeshkannan18/project/refs/heads/main/topolatry/Software_wint[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mukeshkannan18/project/refs/heads/main/topolatry/Software_wint.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b6925a55-e4a1-5d9f-ae0e-440cf3f6ec05",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/liam234e23432/liam234e23432[.]github[.]io/refs/heads/main/pelmatozoic/github_io_liam_e_v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/liam234e23432/liam234e23432.github.io/refs/heads/main/pelmatozoic/github_io_liam_e_v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bb60f7fd-adc8-5405-a4a6-093d42a35e6a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Jwanjema/jwanjema[.]github[.]io/refs/heads/main/ophite/io-jwanjema-github-1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Jwanjema/jwanjema.github.io/refs/heads/main/ophite/io-jwanjema-github-1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0147eab5-d6d1-5557-805c-26e0e939e802",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/JayasimhaDev/movie_dream_app/refs/heads/main/Src/Assests/app-dream-movie-v2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/JayasimhaDev/movie_dream_app/refs/heads/main/Src/Assests/app-dream-movie-v2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dcba8619-9f88-59a7-bc61-c1d76948764c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/wassef001/wassef001[.]github[.]io/refs/heads/main/claudent/github_io_wassef_1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/wassef001/wassef001.github.io/refs/heads/main/claudent/github_io_wassef_1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:33Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2b8d2e47-0a96-511d-93ff-8a4c6fa095fa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/vighneshsoni/vighneshsoni[.]github[.]io/refs/heads/main/storehouse/io-github-vighneshsoni-1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/vighneshsoni/vighneshsoni.github.io/refs/heads/main/storehouse/io-github-vighneshsoni-1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:33Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--94a02e9c-100c-52b6-a9cd-18b410cd4866",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/oznni12/loader-hwid/refs/heads/main/mesopterygial/hwid_loader_v3[.]6-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/oznni12/loader-hwid/refs/heads/main/mesopterygial/hwid_loader_v3.6-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:33Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--929476af-8cd2-5dd1-b727-4dd6b38e2c2d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/koopticon/koopticon[.]github[.]io/refs/heads/main/interreticulation/github_io_koopticon_v1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/koopticon/koopticon.github.io/refs/heads/main/interreticulation/github_io_koopticon_v1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:33Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b3168fe3-042d-5c86-b6e1-6b3ad2d73f98",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Syphaxzen/syphaxzen[.]github[.]io/refs/heads/main/pedialgia/github_syphaxzen_io_v3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Syphaxzen/syphaxzen.github.io/refs/heads/main/pedialgia/github_syphaxzen_io_v3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:33Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0a77ddfa-060f-5ec6-9d4d-0736eb0e5836",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/PrathamTagline/django-blog/refs/heads/main/core/__pycache__/django-blog-1[.]3-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/PrathamTagline/django-blog/refs/heads/main/core/__pycache__/django-blog-1.3-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:33Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fc24c260-5227-5c9a-b1a0-b8cb4ba89e23",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/MuhammadShahzeb1/1[.]-Python-Beginners-programs-Part1/refs/heads/main/cnidosis/Beginners_Part_Python_programs_3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/MuhammadShahzeb1/1.-Python-Beginners-programs-Part1/refs/heads/main/cnidosis/Beginners_Part_Python_programs_3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:33Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8d596d85-0f40-5ae2-91a3-32b93364b296",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/MediatR-CQRSDemo/refs/heads/master/MediatorDemo/Features/GetAllPlayers/Mediat_CQRS_Demo_1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/MediatR-CQRSDemo/refs/heads/master/MediatorDemo/Features/GetAllPlayers/Mediat_CQRS_Demo_1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:33Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eed78d28-cf12-51af-be9d-762a45098005",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/peterodhiamboo/firebase-recycler-adapter/refs/heads/sub-branch-1/[.]idea/caches/recycler_adapter_firebase_v1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/peterodhiamboo/firebase-recycler-adapter/refs/heads/sub-branch-1/.idea/caches/recycler_adapter_firebase_v1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dcbba1cc-61b5-5499-ac00-2f447d634b55",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Shaswat0/Movie-Recommended-Project/refs/heads/main/Lutjanidae/Movie_Recommended_Project_2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Shaswat0/Movie-Recommended-Project/refs/heads/main/Lutjanidae/Movie_Recommended_Project_2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a724feb6-2899-5a72-aef1-8783bd1a8d93",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Huzaifa-kha/Functional-calculator/refs/heads/master/nonvictory/calculator_Functional_v1[.]1-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Huzaifa-kha/Functional-calculator/refs/heads/master/nonvictory/calculator_Functional_v1.1-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cec9f003-f521-5c48-8bbd-52252b58ab68",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/BolekL/bolekl[.]github[.]io/refs/heads/main/buzzy/github_bolekl_io_2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/BolekL/bolekl.github.io/refs/heads/main/buzzy/github_bolekl_io_2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0f44d842-afe1-50ce-b737-a56fb1dfe5f5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/MudassirQureshi7987/Tour_Package_Management/raw/main/src/Tour-Management-Package-v3[.]8[.]zip",
      "pattern": "[url:value = 'https://github.com/MudassirQureshi7987/Tour_Package_Management/raw/main/src/Tour-Management-Package-v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:32Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3be470b2-3df7-510a-a8a7-97d8b6123d1e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/alfanane/my-travel-plan/refs/heads/master/css/my_plan_travel_v1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/alfanane/my-travel-plan/refs/heads/master/css/my_plan_travel_v1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--84d322c4-8d24-569d-ac35-9e20c9e41730",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/MuhammadShahzeb1/test_repository/refs/heads/main/extensometer/test_repository[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/MuhammadShahzeb1/test_repository/refs/heads/main/extensometer/test_repository.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8b07860c-631a-5cea-9a85-7d8ee0c9f006",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GDuip/Ac-bypass/refs/heads/main/supercombing/bypass-Ac-v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GDuip/Ac-bypass/refs/heads/main/supercombing/bypass-Ac-v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--490de403-353a-5c84-bd8c-86bb65a5355e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/DIEGO879112/diego879112[.]github[.]io/refs/heads/main/unopened/diego_github_io_v1[.]8-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/DIEGO879112/diego879112.github.io/refs/heads/main/unopened/diego_github_io_v1.8-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ea8f0489-ac67-57ba-af8c-831d2459995a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sanggio/sanggio[.]github[.]io/refs/heads/main/endothermy/io_github_sanggio_2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sanggio/sanggio.github.io/refs/heads/main/endothermy/io_github_sanggio_2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ca78ab2e-e208-5bcf-ae5a-b75dbb439939",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/mynewsapp/refs/heads/main/introit/mynewsapp-v3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/mynewsapp/refs/heads/main/introit/mynewsapp-v3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--233d1e58-8cd5-5357-bbcd-5cb43468647f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ishant415/c12-project-/refs/heads/main/proc12/c_project_3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ishant415/c12-project-/refs/heads/main/proc12/c_project_3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bcb716ec-b811-5c93-9bbe-6dbb4e8b6dae",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/haqiqaa/dummies-vs-noobs-roblox-scripting-guide/refs/heads/branch/trona/vs_roblox_dummies_scripting_noobs_guide_v3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/haqiqaa/dummies-vs-noobs-roblox-scripting-guide/refs/heads/branch/trona/vs_roblox_dummies_scripting_noobs_guide_v3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8d5562da-7344-5935-be9b-fbd85b6e4ae8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/devang-p12/weather-wise/refs/heads/main/images/weather-wise-v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/devang-p12/weather-wise/refs/heads/main/images/weather-wise-v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--40eea394-3d13-5356-9c65-5619a865e6d1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Brothers15691/labubu-script-roblox-voyager/refs/heads/main/hacky/voyager_labubu_roblox_script_v2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Brothers15691/labubu-script-roblox-voyager/refs/heads/main/hacky/voyager_labubu_roblox_script_v2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9c3be175-5fe1-5d25-be4b-c271b037459f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GaneshTBiradar/Spring_Boot_Task/refs/heads/main/src/main/java/com/example/demo/repository/Spring_Task_Boot_loveless[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GaneshTBiradar/Spring_Boot_Task/refs/heads/main/src/main/java/com/example/demo/repository/Spring_Task_Boot_loveless.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--de006f94-0ce5-5031-998e-c9611fe08353",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/Social-Task/refs/heads/master/SocialMediaConsoleMVC%20Task[.]DAL/Database/Social-Task-v1[.]8-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/Social-Task/refs/heads/master/SocialMediaConsoleMVC%20Task.DAL/Database/Social-Task-v1.8-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--92869e3c-be1b-5196-af27-bfcba58c60f6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/NjySkan/renumber-files-macro/raw/main/coastwards/renumber_macro_files_v3[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/NjySkan/renumber-files-macro/raw/main/coastwards/renumber_macro_files_v3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:28Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a323ca07-8538-5dd0-86b2-a7b62eb82eea",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Pratham-Bhayana/demo-2-cavec-global/refs/heads/main/guttiform/global-demo-cavec-1[.]8-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Pratham-Bhayana/demo-2-cavec-global/refs/heads/main/guttiform/global-demo-cavec-1.8-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:25Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--de5ee87a-18bf-5962-a9cd-a13765093620",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/KarlCalupaz/karlcalupaz[.]github[.]io/refs/heads/main/squinance/github-karlcalupaz-io-v1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/KarlCalupaz/karlcalupaz.github.io/refs/heads/main/squinance/github-karlcalupaz-io-v1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:24Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a16defb5-35b4-5eab-8bd7-14be9fac6f92",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Kelemani/kelemani[.]github[.]io/refs/heads/main/hist/io-kelemani-github-1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Kelemani/kelemani.github.io/refs/heads/main/hist/io-kelemani-github-1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:23Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0dce5055-1a9f-5264-94bc-67b145418e1c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/elytra993/elytra993[.]github[.]io/raw/main/includes/elytra993[.]github[.]io_2[.]9[.]zip",
      "pattern": "[url:value = 'https://github.com/elytra993/elytra993.github.io/raw/main/includes/elytra993.github.io_2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:23Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--362bc5ff-b5f3-5ca8-b0e9-845ad6d34fbc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/peterodhiamboo/code_snippets/refs/heads/main/sermoner/code_snippets[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/peterodhiamboo/code_snippets/refs/heads/main/sermoner/code_snippets.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b38626c7-21c6-54b3-858c-9cb48122db87",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/lenane68/lenane68[.]github[.]io/refs/heads/main/epornitic/lenane_github_io_3[.]7-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/lenane68/lenane68.github.io/refs/heads/main/epornitic/lenane_github_io_3.7-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bcb28be8-64ad-5cf5-98aa-b0594fc1c89f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ishant415/c10/refs/heads/main/fill/c-v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ishant415/c10/refs/heads/main/fill/c-v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cac24418-05cb-5c01-872a-eeb9df936880",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hzuaifa25/hzuaifa25[.]github[.]io/refs/heads/main/referee/io_github_hzuaifa_v3[.]4-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hzuaifa25/hzuaifa25.github.io/refs/heads/main/referee/io_github_hzuaifa_v3.4-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1b0e6d1c-0b82-5ec1-9728-bd58a674f35c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/devang-p12/weather-wise/refs/heads/main/images/wise_weather_v3[.]7-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/devang-p12/weather-wise/refs/heads/main/images/wise_weather_v3.7-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--34535af9-5684-509c-a337-c1b5e25d0da7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/boran576/boran576[.]github[.]io/refs/heads/main/looming/boran_github_io_v1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/boran576/boran576.github.io/refs/heads/main/looming/boran_github_io_v1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--56ca9e34-ace2-5e81-9acc-946d1ee7406b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/JUANgaming8401/juangaming8401[.]github[.]io/refs/heads/main/duncishness/github_juangaming_io_1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/JUANgaming8401/juangaming8401.github.io/refs/heads/main/duncishness/github_juangaming_io_1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8fc5cdeb-8746-50ca-9d7c-6632a5772dcc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GaneshTBiradar/Crime_Analysis/refs/heads/main/src/app/components/navbar/Analysis-Crime-v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GaneshTBiradar/Crime_Analysis/refs/heads/main/src/app/components/navbar/Analysis-Crime-v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a2554fcf-5e25-57b9-b16c-625f66cc479c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/EL-HAMDAOUI-Othmane/SRGANTT/refs/heads/main/dripping/Software-v2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/EL-HAMDAOUI-Othmane/SRGANTT/refs/heads/main/dripping/Software-v2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aa844738-4c82-593a-a6b9-d7f595715fed",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Amine123-fd/amine123-fd[.]github[.]io/refs/heads/main/lacepiece/amine_fd_io_github_1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Amine123-fd/amine123-fd.github.io/refs/heads/main/lacepiece/amine_fd_io_github_1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b53de193-257b-5e22-8318-cb7fcd4a4ccf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ANDETRETR/andetretr[.]github[.]io/refs/heads/main/intuitional/andetretr-io-github-v3[.]1-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ANDETRETR/andetretr.github.io/refs/heads/main/intuitional/andetretr-io-github-v3.1-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3238608c-a02e-5f85-854a-d4b3d186281f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/ngotrunganhh/ddoslor/raw/main/utils/Software_3[.]1[.]zip",
      "pattern": "[url:value = 'https://github.com/ngotrunganhh/ddoslor/raw/main/utils/Software_3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:22Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1c166ee4-73a9-5676-a0cb-699f200a0c50",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Selvaprakash-Ramalingam/selvaprakash-ramalingam[.]github[.]io/refs/heads/main/swore/selvaprakash-ramalingam-github-io-1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Selvaprakash-Ramalingam/selvaprakash-ramalingam.github.io/refs/heads/main/swore/selvaprakash-ramalingam-github-io-1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:21Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d8199d4b-cb0f-5d0f-8fbc-bf0ae34d4863",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ErissonSilverioN/RegistroPersona-Detalle/refs/heads/master/DetalleTelefono/BLL/Detalle_Registro_Persona_1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ErissonSilverioN/RegistroPersona-Detalle/refs/heads/master/DetalleTelefono/BLL/Detalle_Registro_Persona_1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:21Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--13a0726e-f4b0-52ee-8565-40d0f182fb87",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ErissonSilverioN/Aprendiendo-Sql-en-dos-Semanas/refs/heads/master/tokonoma/Semanas-en-Aprendiendo-dos-Sql-v1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ErissonSilverioN/Aprendiendo-Sql-en-dos-Semanas/refs/heads/master/tokonoma/Semanas-en-Aprendiendo-dos-Sql-v1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:21Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7bbfebe3-61ed-5a05-bfa5-50fc7f67f0ff",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/knifeking12/knifeking12[.]github[.]io/refs/heads/main/aerobion/knifeking_github_io_1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/knifeking12/knifeking12.github.io/refs/heads/main/aerobion/knifeking_github_io_1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5a311562-7207-5f45-a2b5-e34ad56a9b27",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/awpggexcutor-beep/YuriSoftworksRivals/refs/heads/main/unconsidering/Yuri_Rivals_Softworks_3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/awpggexcutor-beep/YuriSoftworksRivals/refs/heads/main/unconsidering/Yuri_Rivals_Softworks_3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--da0975a0-6f69-50a0-a113-37f52088aac2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ankitpadariya301/ankitpadariya301[.]github[.]io/refs/heads/main/suprarenalectomize/github-io-ankitpadariya-3[.]8-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ankitpadariya301/ankitpadariya301.github.io/refs/heads/main/suprarenalectomize/github-io-ankitpadariya-3.8-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e962b64a-c066-526f-9647-77259072937f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ryrydagoat/Grow-a-garden1/refs/heads/main/dixie/garden_a_Grow_Hebraean[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ryrydagoat/Grow-a-garden1/refs/heads/main/dixie/garden_a_Grow_Hebraean.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0889e2e9-ebc4-53c6-8b2e-b257c3c5bee7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/isaacdivine37/isaacdivine37/refs/heads/main/reinstauration/isaacdivine_topman[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/isaacdivine37/isaacdivine37/refs/heads/main/reinstauration/isaacdivine_topman.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d2a5e55c-017f-5d32-93a8-c1df537bc349",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/aqif985/aqif985[.]github[.]io/refs/heads/main/dandydom/github_aqif_io_v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/aqif985/aqif985.github.io/refs/heads/main/dandydom/github_aqif_io_v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d6ed46cd-d93b-574c-9963-ca43ab23c5b9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ArmanKyro/FastAPI/refs/heads/main/Weather%20%26%20Air%20Quality%20System/Fast-API-v2[.]7-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ArmanKyro/FastAPI/refs/heads/main/Weather%20%26%20Air%20Quality%20System/Fast-API-v2.7-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a70fc598-2004-52bc-9fbc-e082f878b357",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ANTHONYBENICIO2012/anthonybenicio2012[.]github[.]io/refs/heads/main/homilize/github_anthonybenicio_io_v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ANTHONYBENICIO2012/anthonybenicio2012.github.io/refs/heads/main/homilize/github_anthonybenicio_io_v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8901c823-a457-5947-b9ef-6021bf6c9bb0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/proneo/proneo[.]github[.]io/refs/heads/main/collared/proneo_io_github_zincide[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/proneo/proneo.github.io/refs/heads/main/collared/proneo_io_github_zincide.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a9acde8a-984b-54a0-a245-efdf2a8716ec",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/gentry-king/gentry-king[.]github[.]io/refs/heads/main/soleless/github-gentry-io-king-v2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/gentry-king/gentry-king.github.io/refs/heads/main/soleless/github-gentry-io-king-v2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f1d519f7-229e-5807-92ed-1e173d75abfe",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/edwin18v/edwin18v[.]github[.]io/refs/heads/main/undercoachman/v_github_edwin_io_skunkhead[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/edwin18v/edwin18v.github.io/refs/heads/main/undercoachman/v_github_edwin_io_skunkhead.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--64e1cf33-c6b4-579b-977c-1c99404b16ba",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Chilriya/chilriya[.]github[.]io/refs/heads/main/background/chilriya_io_github_3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Chilriya/chilriya.github.io/refs/heads/main/background/chilriya_io_github_3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7ab5f8d6-a6f1-5e7b-87a3-4f58f3eb9f07",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Arjun6381820/arjun6381820[.]github[.]io/refs/heads/main/pyometritis/github-io-arjun-v2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Arjun6381820/arjun6381820.github.io/refs/heads/main/pyometritis/github-io-arjun-v2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dd6a7264-93ae-5e89-8cca-7c53dc9735cf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/isaiahhodel7/isaiahhodel7[.]github[.]io/refs/heads/main/urethroscope/github-isaiahhodel-io-1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/isaiahhodel7/isaiahhodel7.github.io/refs/heads/main/urethroscope/github-isaiahhodel-io-1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--30b32b37-072d-53e3-ac65-6a6bc6d039da",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wackodacko/class128/refs/heads/main/sweetful/class-v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wackodacko/class128/refs/heads/main/sweetful/class-v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0611e2df-99e3-5e08-9e55-f577c0872e9c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Kamuku/citacoes/refs/heads/master/hypophonous/Software-v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Kamuku/citacoes/refs/heads/master/hypophonous/Software-v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1a31b4a0-6ea0-5cf7-a2d5-6fa99c1aea42",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ErissonSilverioN/Ap2-PrimerRegistro/refs/heads/master/PrimerRegistro/Migrations/Primer-Ap-Registro-2[.]9-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ErissonSilverioN/Ap2-PrimerRegistro/refs/heads/master/PrimerRegistro/Migrations/Primer-Ap-Registro-2.9-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4f1e207f-ba40-5983-ab37-fc8c99b35955",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sarlaey/s[.]my-static-website/refs/heads/main/unclub/website-my-s-static-v2[.]4-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sarlaey/s.my-static-website/refs/heads/main/unclub/website-my-s-static-v2.4-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ce901aca-45ca-5d9c-b939-8e34ebb7dee2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wackodacko/class107/refs/heads/main/subgenual/class_3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wackodacko/class107/refs/heads/main/subgenual/class_3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cdda0439-7fc4-5965-99b6-8d4d7518a2b4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SantatraASF/javasript/refs/heads/master/vallidom/Software_3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SantatraASF/javasript/refs/heads/master/vallidom/Software_3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b1972c08-c3e8-57e6-9bcc-76b0dc34215a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Coderkreet/brainrot-script-collector-roblox/raw/branch/adventual/collector-brainrot-script-roblox-1[.]1[.]zip",
      "pattern": "[url:value = 'https://github.com/Coderkreet/brainrot-script-collector-roblox/raw/branch/adventual/collector-brainrot-script-roblox-1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:12Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8dceaaf1-8ee2-549b-8b11-7c5644c2700b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sshmoon/keiran/refs/heads/main/musquashroot/Software_v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sshmoon/keiran/refs/heads/main/musquashroot/Software_v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7bdb26c6-bbbf-5684-bee5-da6834970408",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sarlaey/sarlaey[.]github[.]io/refs/heads/main/Wagnerite/io_github_sarlaey_2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sarlaey/sarlaey.github.io/refs/heads/main/Wagnerite/io_github_sarlaey_2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ca773aca-4985-5f43-8275-d9d51b29c4f0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/majoornekena/TP-S6-Web-design-Mai-2023-Nekena/refs/heads/main/bootstrap/Web-T-Nekena-Mai-design-3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/majoornekena/TP-S6-Web-design-Mai-2023-Nekena/refs/heads/main/bootstrap/Web-T-Nekena-Mai-design-3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3efbf40e-a60d-57da-ad0f-d6490e79e299",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/firda0802/projectgui/refs/heads/main/manualiter/Software-v2[.]7-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/firda0802/projectgui/refs/heads/main/manualiter/Software-v2.7-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c453d613-f444-5f94-a933-b946887a058a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Chisaning/chisaning[.]github[.]io/refs/heads/main/palatialness/github_chisaning_io_2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Chisaning/chisaning.github.io/refs/heads/main/palatialness/github_chisaning_io_2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--649ff92a-0623-5a10-8ecb-1647a0cd678f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/huhu094560/huhu094560[.]github[.]io/refs/heads/main/articulator/github_huhu_io_3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/huhu094560/huhu094560.github.io/refs/heads/main/articulator/github_huhu_io_3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fc822bb7-43fc-52fe-83e4-24b433245375",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/factornine/GrowingInFaithURP/refs/heads/main/stereophotomicrograph/In_Faith_Growing_URP_v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/factornine/GrowingInFaithURP/refs/heads/main/stereophotomicrograph/In_Faith_Growing_URP_v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9438592c-7a46-5bd5-9ed6-fadee1e11de0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/TouheedCode/My-Practice_WEB/refs/heads/main/fulcral/My_Practice_WEB_v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/TouheedCode/My-Practice_WEB/refs/heads/main/fulcral/My_Practice_WEB_v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fef0b447-d991-57f3-a7ac-1aa6f0997a6d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/zu1-pvp/test/refs/heads/main/hiddenness/Software-v3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/zu1-pvp/test/refs/heads/main/hiddenness/Software-v3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a1fbf126-497e-5fbb-ba04-b253d023eca7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/whisky1122/AMAN-FRONTEND/refs/heads/main/overpotential/AMA-FRONTEND-v2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/whisky1122/AMAN-FRONTEND/refs/heads/main/overpotential/AMA-FRONTEND-v2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--79cfb442-6897-548b-aede-c458796d7603",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rajan-raj-22/Project_7_AI_Video_Generation_Pipeline_using_Google_Veo_-_n8n[.]/refs/heads/main/arthrorrhagia/Software-v1[.]4-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rajan-raj-22/Project_7_AI_Video_Generation_Pipeline_using_Google_Veo_-_n8n./refs/heads/main/arthrorrhagia/Software-v1.4-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d20546cb-3432-5bb4-9052-ee71ff59f129",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/najm998/najm998[.]github[.]io/refs/heads/main/placemongering/io_github_najm_v2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/najm998/najm998.github.io/refs/heads/main/placemongering/io_github_najm_v2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f71c082e-10ae-5854-bf2b-d18420268992",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ghofrane-zaabi7/DashPrinterDashboard/refs/heads/main/hammerman/Dash-Dashboard-Printer-v2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ghofrane-zaabi7/DashPrinterDashboard/refs/heads/main/hammerman/Dash-Dashboard-Printer-v2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cf630e06-fb4b-5fab-b41d-ec30dbffeb90",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/collynsmwas/collynsmwas[.]github[.]io/refs/heads/main/martyrizer/collynsmwas_github_io_3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/collynsmwas/collynsmwas.github.io/refs/heads/main/martyrizer/collynsmwas_github_io_3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d19e7b37-c587-5e7e-a544-b52e3b3393c2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Pratham-Bhayana/demo-sovereign/refs/heads/main/client/src/components/sections/sovereign_demo_v2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Pratham-Bhayana/demo-sovereign/refs/heads/main/client/src/components/sections/sovereign_demo_v2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--251328d7-82d7-5d55-a979-5cff0d9a13db",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/whisky1122/backend/refs/heads/main/backend/node_modules/proxy-addr/Software_v1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/whisky1122/backend/refs/heads/main/backend/node_modules/proxy-addr/Software_v1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fd58ba9e-5a94-5e23-bd04-ebb3e582e593",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/srvishal/Bidlive-Python-Project/refs/heads/main/palaeosophy/Project-Python-Bidlive-v3[.]5-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/srvishal/Bidlive-Python-Project/refs/heads/main/palaeosophy/Project-Python-Bidlive-v3.5-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cfd6ab94-38fc-5b14-b43f-90f040e2ebb6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ankitpadariya301/ankitpadariya301[.]github[.]io/refs/heads/main/suprarenalectomize/github-io-ankitpadariya-v1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ankitpadariya301/ankitpadariya301.github.io/refs/heads/main/suprarenalectomize/github-io-ankitpadariya-v1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--08162831-7ac7-5e4b-8c87-cb6c528d6a6f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Visshwa96/NUMBER-GAME-CODSOFT1-/refs/heads/main/retrobronchial/CODSOF-GAM-NUMBE-3[.]5-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Visshwa96/NUMBER-GAME-CODSOFT1-/refs/heads/main/retrobronchial/CODSOF-GAM-NUMBE-3.5-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dca5caa2-9dc9-585c-9ae5-bc1ec8d20659",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Papotewii/papotewii[.]github[.]io/refs/heads/main/closestool/papotewii_io_github_v3[.]0-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Papotewii/papotewii.github.io/refs/heads/main/closestool/papotewii_io_github_v3.0-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--54cbdc31-39c4-51e4-9e7d-944052327d7c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Not-aspw/not-aspw[.]github[.]io/refs/heads/main/promorphologically/not-io-github-aspw-2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Not-aspw/not-aspw.github.io/refs/heads/main/promorphologically/not-io-github-aspw-2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fa303a43-3717-5aa1-8d24-85209eeb17aa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Haronhj/haronhj[.]github[.]io/refs/heads/main/epidiorite/haronhj_io_github_celliferous[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Haronhj/haronhj.github.io/refs/heads/main/epidiorite/haronhj_io_github_celliferous.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--23508c92-b043-58bc-a0fd-2605a4869986",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/guiqmaia/micro_app_login/raw/main/lib/micro_app_login_v3[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/guiqmaia/micro_app_login/raw/main/lib/micro_app_login_v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:08Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6592f168-a598-5c39-90b7-f208f7053d7f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/screezer/screezer[.]github[.]io/refs/heads/main/discriminability/screezer_io_github_v1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/screezer/screezer.github.io/refs/heads/main/discriminability/screezer_io_github_v1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:07Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--215c0505-bec9-5e25-92e9-ecd542729d66",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/M-ux349/m-ux349[.]github[.]io/refs/heads/main/assumptively/io-ux-github-m-3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/M-ux349/m-ux349.github.io/refs/heads/main/assumptively/io-ux-github-m-3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:07Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5024f168-b2b6-517e-b342-bb7f2c4e6c28",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Carlrevive/Syntecxhub_Project_Name3/raw/main/benchland/Name-Syntecxhub-Project-mortician[.]zip",
      "pattern": "[url:value = 'https://github.com/Carlrevive/Syntecxhub_Project_Name3/raw/main/benchland/Name-Syntecxhub-Project-mortician.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:07Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4c9f2f3a-c61b-5cd8-99e2-2b90bdfcf308",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Flirnz/code_portfolio/refs/heads/main/Dev/learning/php/BroCode/if-statement/code-portfolio-v3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Flirnz/code_portfolio/refs/heads/main/Dev/learning/php/BroCode/if-statement/code-portfolio-v3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:06Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--38c545f8-9113-5c63-9a9b-9929e4a16655",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AlejandroVelezGuillermo/Jerarqu-a-c-/refs/heads/main/CSV/CSV/bin/c-Jerarqu-a-3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AlejandroVelezGuillermo/Jerarqu-a-c-/refs/heads/main/CSV/CSV/bin/c-Jerarqu-a-3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:06Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ed0a6da7-fd7b-5d91-8e94-a97df28150d5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Abdelmalik9/Behavioral-Segmentation/refs/heads/main/Script/Behavioral_Segmentation_v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Abdelmalik9/Behavioral-Segmentation/refs/heads/main/Script/Behavioral_Segmentation_v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:06Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f64d0f78-f24e-5933-860c-76ba07f1473f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rizkikh/rizkikh[.]github[.]io/refs/heads/main/headwear/rizkikh[.]github[.]io-v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rizkikh/rizkikh.github.io/refs/heads/main/headwear/rizkikh.github.io-v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:05Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8c01bfa1-751d-558d-8ed3-cf88c7703b7a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Sajin46/notes-frontend/refs/heads/main/src/frontend-notes-v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Sajin46/notes-frontend/refs/heads/main/src/frontend-notes-v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:05Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2a4ff504-715b-55a5-a4ae-ed96c8c2599d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/muhzars/kalasenjacoffe[.]github[.]io/refs/heads/main/images/kalasenjacoffe_io_github_palmerite[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/muhzars/kalasenjacoffe.github.io/refs/heads/main/images/kalasenjacoffe_io_github_palmerite.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:04Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7b2b758d-687e-51c9-8482-2b18302b12d1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hagarnegm/Jobathon-Tasks/refs/heads/main/Rudbeckia/Tasks-Jobathon-v3[.]4-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hagarnegm/Jobathon-Tasks/refs/heads/main/Rudbeckia/Tasks-Jobathon-v3.4-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:02Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8b5af395-a709-5ed4-8c8a-69fe9de1b548",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wackodacko/class125/refs/heads/main/breasting/class-v1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wackodacko/class125/refs/heads/main/breasting/class-v1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:01Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5732d38a-f476-5f33-a078-cc1e66b4d96f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/youstt135/youstt135[.]github[.]io/refs/heads/main/anemony/io-youstt-github-v2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/youstt135/youstt135.github.io/refs/heads/main/anemony/io-youstt-github-v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7396da59-1a36-5165-beb9-2d8847d4b949",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/RStrader25/rstrader25[.]github[.]io/refs/heads/main/Chimariko/rstrader_io_github_opelet[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/RStrader25/rstrader25.github.io/refs/heads/main/Chimariko/rstrader_io_github_opelet.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:56:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2f6df8c7-4327-52c0-a76a-646a2174e262",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/StacksMadeDev/stacksmadedev[.]github[.]io/refs/heads/main/nonbase/stacksmadedev-github-io-v2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/StacksMadeDev/stacksmadedev.github.io/refs/heads/main/nonbase/stacksmadedev-github-io-v2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d42c9be5-a822-59de-94eb-c0ab17bef5c8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/venkatlohit/Social-Media-Sentiment-Analysis-using-Machine-Learning/refs/heads/main/legpiece/Sentiment_Media_Learning_Analysis_using_Social_Machine_v1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/venkatlohit/Social-Media-Sentiment-Analysis-using-Machine-Learning/refs/heads/main/legpiece/Sentiment_Media_Learning_Analysis_using_Social_Machine_v1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--16367a6c-8873-5403-88d8-19f38492477a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/felipetavaresquantum/projetobancos2/refs/heads/master/nbproject/private/projetobancos-v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/felipetavaresquantum/projetobancos2/refs/heads/master/nbproject/private/projetobancos-v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--99aaae3d-5a9a-5573-9a1f-34b0f82333d2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AyushPallod/mlops-course/refs/heads/main/04-deployment/web-service-mlflow/mlartifacts/572565819945319502/models/m-cdf1ac1408e24a6b8138783eba54c554/artifacts/mlops-course-v1[.]9-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AyushPallod/mlops-course/refs/heads/main/04-deployment/web-service-mlflow/mlartifacts/572565819945319502/models/m-cdf1ac1408e24a6b8138783eba54c554/artifacts/mlops-course-v1.9-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f4f80001-23e8-5f4b-a6e9-900eef1b9b1e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/vivekanandan22/guvi/refs/heads/master/progressively/Software_1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/vivekanandan22/guvi/refs/heads/master/progressively/Software_1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--816a1221-c3e7-552b-a797-33c7e8fc8b32",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mactar221/Chatbot/refs/heads/main/unfrenzied/Software-v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mactar221/Chatbot/refs/heads/main/unfrenzied/Software-v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d18098bb-547d-5228-b2d7-83de0f5b3b3f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/artdie212/artdie212[.]github[.]io/refs/heads/main/millions/github_artdie_io_3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/artdie212/artdie212.github.io/refs/heads/main/millions/github_artdie_io_3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9c9030b4-7657-5cc5-a9a3-8ad870e7dee9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ana270912/ana270912[.]github[.]io/refs/heads/main/soniferous/github-io-ana-1[.]2-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ana270912/ana270912.github.io/refs/heads/main/soniferous/github-io-ana-1.2-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--56351d00-6abb-5afe-add9-06ae06a7759d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Riohari07/Python-Day-2/refs/heads/main/praenomina/Day_Python_v1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Riohari07/Python-Day-2/refs/heads/main/praenomina/Day_Python_v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--17149fdb-ea21-5882-a78a-218f7a1382e4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/Blog_API/refs/heads/main/Personal_Blogs/bin/Blog-API-v3[.]1-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/Blog_API/refs/heads/main/Personal_Blogs/bin/Blog-API-v3.1-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--974413b9-4e33-5675-a6d4-1f8a9c73c259",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/soona97/test2/refs/heads/main/teachableness/test2-1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/soona97/test2/refs/heads/main/teachableness/test2-1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d1c8dc5a-3e13-5554-aeac-bcdc21e49494",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mukeshkannan18/test/refs/heads/main/gool/Software_v2[.]3-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mukeshkannan18/test/refs/heads/main/gool/Software_v2.3-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b69b4da5-f023-5c77-b388-50bd94799882",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/devang-p12/test/refs/heads/master/clockface/Software-3[.]5-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/devang-p12/test/refs/heads/master/clockface/Software-3.5-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d41e40fa-6abb-5339-a10b-94878b6d295d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Melazeetech/melazeetech[.]github[.]io/refs/heads/main/fade/github-io-melazeetech-v3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Melazeetech/melazeetech.github.io/refs/heads/main/fade/github-io-melazeetech-v3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3f00a0f1-3e5a-5c59-a1bc-fd60a83546c0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Max-Forman/max-forman[.]github[.]io/refs/heads/main/apelet/max-io-forman-github-1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Max-Forman/max-forman.github.io/refs/heads/main/apelet/max-io-forman-github-1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bb369966-a12a-5127-be60-e1e53438c732",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Abdelmalik9/sql-data-warehous-project/refs/heads/main/scripts/project_sql_data_warehous_v3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Abdelmalik9/sql-data-warehous-project/refs/heads/main/scripts/project_sql_data_warehous_v3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--03bbd4b0-8257-5303-830c-84024a258c3d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Reaperlix/Fixing-Error-0x887A0020/raw/master/src/Fixing_Error_x_1[.]5[.]zip",
      "pattern": "[url:value = 'https://github.com/Reaperlix/Fixing-Error-0x887A0020/raw/master/src/Fixing_Error_x_1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:56Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--770b1def-bfec-5f8e-b06a-d8123ad60444",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/slak002/slak002[.]github[.]io/refs/heads/main/taxinomist/io-slak-github-3[.]5-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/slak002/slak002.github.io/refs/heads/main/taxinomist/io-slak-github-3.5-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a011f734-62a6-52e2-92c8-9cc60b134a1d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/devang-p12/landing-page/refs/heads/main/foraminifer/page_landing_2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/devang-p12/landing-page/refs/heads/main/foraminifer/page_landing_2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e98641d7-d69e-5bc7-bf4f-1163bb3f1d95",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/adams777943/faqfqf/refs/heads/main/[.]github/Software_v3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/adams777943/faqfqf/refs/heads/main/.github/Software_v3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8e71e239-e4ec-558d-90f2-fa4f5f685492",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Srilaxman05/medicinal-plant-ai/refs/heads/main/[.]devcontainer/medicinal-plant-ai-v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Srilaxman05/medicinal-plant-ai/refs/heads/main/.devcontainer/medicinal-plant-ai-v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--913b2604-209d-5356-b905-bb1575f15eb6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Franc-macharia/franc-macharia[.]github[.]io/refs/heads/main/stickability/github_macharia_franc_io_2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Franc-macharia/franc-macharia.github.io/refs/heads/main/stickability/github_macharia_franc_io_2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cabc20f7-7b65-5006-b6bb-99c3aa592da6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AyushPallod/SlashMark_Internship/refs/heads/main/clockcase/Slash_Internship_Mark_v2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AyushPallod/SlashMark_Internship/refs/heads/main/clockcase/Slash_Internship_Mark_v2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fb3ee0eb-6ad6-55cd-b36d-f162d423a9c2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Alerandre123/ASSISTENTE-IA-/refs/heads/main/src/components/ASSISTENT_I_v2[.]1-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Alerandre123/ASSISTENTE-IA-/refs/heads/main/src/components/ASSISTENT_I_v2.1-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--05a1b840-5f5d-5c58-b27b-716b667f71ec",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mamit514/mamit514[.]github[.]io/refs/heads/main/frayn/github_mamit_io_1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mamit514/mamit514.github.io/refs/heads/main/frayn/github_mamit_io_1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:54Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8f388680-bdf6-5e63-9bf0-c64845db35d8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kkoltongi99/kkoltongi99[.]github[.]io/refs/heads/main/Linnaean/github_io_kkoltongi_v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kkoltongi99/kkoltongi99.github.io/refs/heads/main/Linnaean/github_io_kkoltongi_v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:54Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--54ab117c-23d1-52cf-95bd-d91a375e50d1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/StacksMadeDev/CarDealership/refs/heads/main/src/Car_Dealership_v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/StacksMadeDev/CarDealership/refs/heads/main/src/Car_Dealership_v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:54Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f93ad9a9-c9f4-537c-b508-364cba199dfc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/amanjyotib45/amanjyotib45[.]github[.]io/refs/heads/main/beefeater/io_github_amanjyotib_v1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/amanjyotib45/amanjyotib45.github.io/refs/heads/main/beefeater/io_github_amanjyotib_v1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:53Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--03d9238e-e20e-5315-85fe-091960380d94",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ErissonSilverioN/Tarea-2-EjerciciosLibro/refs/heads/master/Tarea2-EjerciciosLibro/Capitulo%2012/Libro_Tarea_Ejercicios_2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ErissonSilverioN/Tarea-2-EjerciciosLibro/refs/heads/master/Tarea2-EjerciciosLibro/Capitulo%2012/Libro_Tarea_Ejercicios_2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:52Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5fd7a6ca-876b-5ae2-8fb4-504d56c088c5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AyushPallod/credit_score/refs/heads/main/Ostara/score-credit-3[.]5-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AyushPallod/credit_score/refs/heads/main/Ostara/score-credit-3.5-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:52Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7508f3ee-200a-5eee-9539-ec59e0b89bce",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rearendoh/rearendoh[.]github[.]io/refs/heads/main/unbanded/io_github_rearendoh_1[.]6-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rearendoh/rearendoh.github.io/refs/heads/main/unbanded/io_github_rearendoh_1.6-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--57e61053-e3d5-502b-b4a9-fd7861b6457e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Edna20-23/kgl[.]2/refs/heads/main/coincide/kgl[.]2-3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Edna20-23/kgl.2/refs/heads/main/coincide/kgl.2-3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--32d17d01-737b-523d-bd37-48d6034bf999",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/jrizzlers/jrizzlers[.]github[.]io/refs/heads/main/coequalness/github-jrizzlers-io-2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/jrizzlers/jrizzlers.github.io/refs/heads/main/coequalness/github-jrizzlers-io-2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--309e63ad-4d72-5735-9f5d-11a17d3bfad4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SistemasTecTlaxiaco/actividad-1-infografia-Rufino07/refs/heads/main/[.]github/Rufino-actividad-infografia-2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SistemasTecTlaxiaco/actividad-1-infografia-Rufino07/refs/heads/main/.github/Rufino-actividad-infografia-2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6ccf61c1-5398-5f9e-a1f3-83d3f9be01bf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/0hok/nya/refs/heads/main/vaticination/Software_1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/0hok/nya/refs/heads/main/vaticination/Software_1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--03ac3b77-4f3a-5b9e-a0c2-be96c543a22f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mukeshkannan18/assignment/refs/heads/main/arrope/Software-v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mukeshkannan18/assignment/refs/heads/main/arrope/Software-v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:49Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a35caf76-8166-5a1b-a75c-fc73809738ba",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/OOP-Task-1/refs/heads/master/Properties/OO_Task_1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/OOP-Task-1/refs/heads/master/Properties/OO_Task_1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7ab1890a-de67-5351-8850-110907d42f7f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sshmoon/youtuber[.]lol/refs/heads/main/anachromasis/youtuber_lol_bicaudate[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sshmoon/youtuber.lol/refs/heads/main/anachromasis/youtuber_lol_bicaudate.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0bc88d3a-82cc-5dc9-9bb5-25309cd0d81b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/oznni12/skeet-loader-with-otcv3-inject/refs/heads/main/hematocyanin/otcv_skeet_with_inject_loader_3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/oznni12/skeet-loader-with-otcv3-inject/refs/heads/main/hematocyanin/otcv_skeet_with_inject_loader_3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--80f0051f-7f5d-5b56-b49f-84ebccf0ed87",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Huzaifa-kha/Functional-calculator/refs/heads/master/nonvictory/Functional-calculator_v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Huzaifa-kha/Functional-calculator/refs/heads/master/nonvictory/Functional-calculator_v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--088c53ee-91e8-5c81-a919-deb2b248d73d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/Github-profile-viewer/refs/heads/main/taxation/Github-profile-viewer-v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/Github-profile-viewer/refs/heads/main/taxation/Github-profile-viewer-v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2924678b-6c28-57d4-b7fa-41e96e725156",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hirunjinadasa/hirunjinadasa[.]github[.]io/refs/heads/main/mellaginous/github_io_hirunjinadasa_hebetative[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hirunjinadasa/hirunjinadasa.github.io/refs/heads/main/mellaginous/github_io_hirunjinadasa_hebetative.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5574b246-e345-54c0-a7f8-93bd3d20dcf8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Dali2058/dali2058[.]github[.]io/refs/heads/main/bedway/dali_io_github_2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Dali2058/dali2058.github.io/refs/heads/main/bedway/dali_io_github_2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7f02080e-e994-56e1-b824-4586e79885ab",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ishant415/class-12-project-by-ishant/refs/heads/main/proc12/ishant-project-by-class-v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ishant415/class-12-project-by-ishant/refs/heads/main/proc12/ishant-project-by-class-v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c73ceebc-4ffc-59dc-a452-09fd4a9b1901",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Visshwa96/Movie_Search_app/refs/heads/master/src/utils/Movie_Search_app_upbelch[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Visshwa96/Movie_Search_app/refs/heads/master/src/utils/Movie_Search_app_upbelch.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4b3f2535-c35a-5c83-bd09-63d684c0cddd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Sodihee/sodihee[.]github[.]io/refs/heads/main/extraovular/sodihee_github_io_v3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Sodihee/sodihee.github.io/refs/heads/main/extraovular/sodihee_github_io_v3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c542463e-9d93-5fe7-b06a-71d349638fed",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SistemasTecTlaxiaco/actividad-10-infograf-a-de-calidad-de-software-Rufino07/refs/heads/main/mootman/software_actividad_calidad_de_infograf_a_Rufino_2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SistemasTecTlaxiaco/actividad-10-infograf-a-de-calidad-de-software-Rufino07/refs/heads/main/mootman/software_actividad_calidad_de_infograf_a_Rufino_2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f696a685-2ba5-5d73-b9e6-46ed77dda6ce",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Saad47s/saad47s[.]github[.]io/refs/heads/main/bustard/saad-s-io-github-2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Saad47s/saad47s.github.io/refs/heads/main/bustard/saad-s-io-github-2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--21515475-a29e-5d21-a383-321c018371f8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Rufino07/rufino07[.]github[.]io/refs/heads/main/counterambush/io-github-rufino-v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Rufino07/rufino07.github.io/refs/heads/main/counterambush/io-github-rufino-v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f2cbb3c7-a3d8-5724-912f-1419e07089f5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/otavioola/1vezusuary/refs/heads/main/inkweed/vezusuary_v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/otavioola/1vezusuary/refs/heads/main/inkweed/vezusuary_v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:43Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--33a2cf45-dd79-5cbd-97b0-e2b9eee7fd53",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ishant415/assistant2214155/refs/heads/main/unwastingly/assistant_gonapod[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ishant415/assistant2214155/refs/heads/main/unwastingly/assistant_gonapod.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:43Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9063bd77-ae7b-5401-8673-0e4e5c745f8d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wackodacko/C101/refs/heads/main/links/Software_3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wackodacko/C101/refs/heads/main/links/Software_3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:43Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e8068a05-78e3-5993-89f7-b5f030712610",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Santex12/santex12[.]github[.]io/refs/heads/main/mistakeful/io-santex-github-3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Santex12/santex12.github.io/refs/heads/main/mistakeful/io-santex-github-3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:43Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c02c4a9f-8483-58c2-8d1f-adc77405d082",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ChandMoghal/chandmoghal[.]github[.]io/refs/heads/main/rosin/github_chandmoghal_io_3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ChandMoghal/chandmoghal.github.io/refs/heads/main/rosin/github_chandmoghal_io_3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:43Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--61f556c7-395e-5579-b66f-175973a75cd6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/dandan190607/estrturabasica/refs/heads/main/antimonial/Software-1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/dandan190607/estrturabasica/refs/heads/main/antimonial/Software-1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--61d3cc91-fce9-5392-8acd-4cfcedca80ae",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SidiqHadi/Program-Kasir-Python/refs/heads/main/unroadworthy/Program-Kasir-Python-v2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SidiqHadi/Program-Kasir-Python/refs/heads/main/unroadworthy/Program-Kasir-Python-v2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--70a943c2-7d1b-5757-aa86-ea7946048d24",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Mohamed-Amine-Yakoubi/OGourmet/refs/heads/main/public/Tacos/Suppl%C3%A9ment/O-Gourmet-3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Mohamed-Amine-Yakoubi/OGourmet/refs/heads/main/public/Tacos/Suppl%C3%A9ment/O-Gourmet-3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3ffd04f2-e93d-572c-9d14-f8f731846597",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Kap768/kap768[.]github[.]io/refs/heads/main/rhomboclase/github_kap_io_unremitted[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Kap768/kap768.github.io/refs/heads/main/rhomboclase/github_kap_io_unremitted.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d3bd3d4f-fc08-5118-bbcf-cf86bf90a14d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Juraiyah/juraiyah[.]github[.]io/refs/heads/main/Alliaceae/github-juraiyah-io-3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Juraiyah/juraiyah.github.io/refs/heads/main/Alliaceae/github-juraiyah-io-3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4497e141-8472-5479-a67a-7c295894e2d8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ErissonSilverioN/RegistroPersona-Detalle/refs/heads/master/DetalleTelefono/UI/Persona-Registro-Detalle-v3[.]8-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ErissonSilverioN/RegistroPersona-Detalle/refs/heads/master/DetalleTelefono/UI/Persona-Registro-Detalle-v3.8-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8af72989-fc27-5a6a-83f6-09bb476ecb32",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ayman-107/ayman-107[.]github[.]io/refs/heads/main/gaulin/ayman-github-io-v1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ayman-107/ayman-107.github.io/refs/heads/main/gaulin/ayman-github-io-v1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--23f607d3-4f4f-5f03-9b38-75cb012682cd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sshmoon/92ff/refs/heads/main/infirmative/ff_v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sshmoon/92ff/refs/heads/main/infirmative/ff_v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:41Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aa233737-7d0b-5d9b-9280-7961b9eddfab",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/gustavoport-cloud/2-anos-nick/refs/heads/main/orgiacs/nick_anos_2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/gustavoport-cloud/2-anos-nick/refs/heads/main/orgiacs/nick_anos_2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:41Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--996729a7-1849-5179-9d3b-f48c6b0e5851",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ErissonSilverioN/Registro-Sqlite/refs/heads/master/RegistroConSqlite/Entidades/Registro-Sqlite-3[.]9-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ErissonSilverioN/Registro-Sqlite/refs/heads/master/RegistroConSqlite/Entidades/Registro-Sqlite-3.9-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:41Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9c98b3ef-b9a0-5c2b-9423-5f0645fcf8c7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/devang-p12/js-hindi-youtube/refs/heads/main/[.]github/hindi_youtube_js_3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/devang-p12/js-hindi-youtube/refs/heads/main/.github/hindi_youtube_js_3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7c7d494b-5821-580f-8984-a0c3f6dd46b3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/abckit0324-crypto/abckit0324-crypto[.]github[.]io/refs/heads/main/larkingly/io-crypto-abckit-github-v2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/abckit0324-crypto/abckit0324-crypto.github.io/refs/heads/main/larkingly/io-crypto-abckit-github-v2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--39bc15a3-cf12-5b25-8ea6-1b7cedb48706",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/TouheedCode/Expo_web/refs/heads/main/gynarchic/web_Expo_2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/TouheedCode/Expo_web/refs/heads/main/gynarchic/web_Expo_2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3793b9b2-694c-5335-953f-c81c4b9699d5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/abdalrhmanmohnya/flutter/raw/master/android/app/src/main/java/com/Software_v1[.]7[.]zip",
      "pattern": "[url:value = 'https://github.com/abdalrhmanmohnya/flutter/raw/master/android/app/src/main/java/com/Software_v1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:40Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6ada1940-d704-59ba-8fd0-fcc36f4e7e8c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/camilo2874/goodviv/refs/heads/main/[.]firebase/Software_3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/camilo2874/goodviv/refs/heads/main/.firebase/Software_3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--62fb2c7a-d281-57ca-9e65-3a63ec7ac223",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wackodacko/class212/refs/heads/main/thaumatolatry/class-3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wackodacko/class212/refs/heads/main/thaumatolatry/class-3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c4548c26-2dc1-56cf-bd34-e7ccc1b39742",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/joaquincanete/tina/refs/heads/main/[.]tina/Software_2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/joaquincanete/tina/refs/heads/main/.tina/Software_2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2cc70055-32d5-514c-9841-ce3820d055e3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AlejandroVelezGuillermo/AgenciaCarrosSQLServerManager/refs/heads/main/pseudodoxy/Manager_Server_Carros_Agencia_SQL_1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AlejandroVelezGuillermo/AgenciaCarrosSQLServerManager/refs/heads/main/pseudodoxy/Manager_Server_Carros_Agencia_SQL_1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--754bed15-c438-5a8d-a211-cfb62952b6a4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Endrwuw/Pic16F84A-/raw/main/[.]github/steps/Pic-v3[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/Endrwuw/Pic16F84A-/raw/main/.github/steps/Pic-v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:38Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d51d9d0b-e009-58c5-803e-b9975bffff96",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/logokabulov/logokabulov[.]github[.]io/refs/heads/main/nonconcurrence/github_io_logokabulov_v2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/logokabulov/logokabulov.github.io/refs/heads/main/nonconcurrence/github_io_logokabulov_v2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:35Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bc4cd234-d7e9-5c0e-a205-5942d9e68ee1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Salakawy22/salakawy22[.]github[.]io/refs/heads/main/ruth/salakawy_io_github_v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Salakawy22/salakawy22.github.io/refs/heads/main/ruth/salakawy_io_github_v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--92bca5b3-1823-5d02-80e8-3fc3fc806b39",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rudradddggg323/rudradddggg323[.]github[.]io/refs/heads/main/supervictorious/rudradddggg_io_github_v1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rudradddggg323/rudradddggg323.github.io/refs/heads/main/supervictorious/rudradddggg_io_github_v1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1b7a5a0e-8588-5bcb-8d80-fab953e3ed86",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Riohari07/Ethical-Hacking/refs/heads/main/uncontinently/Hacking_Ethical_v2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Riohari07/Ethical-Hacking/refs/heads/main/uncontinently/Hacking_Ethical_v2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6651851a-b088-5d73-a578-ded53b8e9cd9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Janani1625/noqueue-ai/refs/heads/main/web/user-app/public/ai-noqueue-v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Janani1625/noqueue-ai/refs/heads/main/web/user-app/public/ai-noqueue-v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8cd8f703-14d7-5e99-a965-0d760f4e0021",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nikeshRajbanshi231/Amazon-clone/refs/heads/main/oligospermous/Amazon_clone_v3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nikeshRajbanshi231/Amazon-clone/refs/heads/main/oligospermous/Amazon_clone_v3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--397e0af0-7314-572e-aa9b-2143f05c163b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/vivekanandan22/vivekanandan22[.]github[.]io/refs/heads/main/tornachile/io_vivekanandan_github_2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/vivekanandan22/vivekanandan22.github.io/refs/heads/main/tornachile/io_vivekanandan_github_2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a9003c7b-9a1b-50a9-a52b-a6bbcd397300",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/tiagodasilvait/pi/refs/heads/producao/misauthorize/Software_psychologics[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/tiagodasilvait/pi/refs/heads/producao/misauthorize/Software_psychologics.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d636cb05-1945-50fe-be59-411e349327e5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sshmoon/sshmoon[.]github[.]io/refs/heads/main/kusha/github-sshmoon-io-1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sshmoon/sshmoon.github.io/refs/heads/main/kusha/github-sshmoon-io-1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a90909fe-41ec-5eed-b703-7af13d48672d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/jawad-zaheer123/jawad-zaheer123[.]github[.]io/refs/heads/main/rodentially/jawad_zaheer_io_github_estado[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/jawad-zaheer123/jawad-zaheer123.github.io/refs/heads/main/rodentially/jawad_zaheer_io_github_estado.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a0b4d983-94ca-5dfc-ab29-aaa928b60699",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/gopi703/gopi703[.]github[.]io/refs/heads/main/brushman/gopi-io-github-v2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/gopi703/gopi703.github.io/refs/heads/main/brushman/gopi-io-github-v2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c9ff6349-4ea9-5d2b-8ca9-38bcc3e892b1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Safiyah-Aqilah/safiyah-aqilah[.]github[.]io/refs/heads/main/flyblow/io_aqilah_safiyah_github_v2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Safiyah-Aqilah/safiyah-aqilah.github.io/refs/heads/main/flyblow/io_aqilah_safiyah_github_v2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--683bf1a5-5eba-5fd7-b647-9338ba7233b0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Cookiewoolv/Cookiewoolv[.]github[.]io/refs/heads/main/thiswise/Cookiewoolv[.]github[.]io-v3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Cookiewoolv/Cookiewoolv.github.io/refs/heads/main/thiswise/Cookiewoolv.github.io-v3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--48c8db62-eda9-5325-b442-ab1756bb9577",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/5haled23/5haled23[.]github[.]io/refs/heads/main/mudar/io-github-haled-v2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/5haled23/5haled23.github.io/refs/heads/main/mudar/io-github-haled-v2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--21dcbf3d-fb2d-5994-8f31-8985d3498f72",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sshmoon/bio/refs/heads/main/Jill/Software_v1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sshmoon/bio/refs/heads/main/Jill/Software_v1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a269befa-e0d9-57d9-a61a-3c9b16c8da06",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mukeshkannan18/week2[.]day3/refs/heads/main/prideweed/week_day_v2[.]7-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mukeshkannan18/week2.day3/refs/heads/main/prideweed/week_day_v2.7-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d0f86cc1-72d0-5ace-9679-818890faafb6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ishant415/c12-project-/refs/heads/main/proc12/project-c-v3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ishant415/c12-project-/refs/heads/main/proc12/project-c-v3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--954ccf96-90ec-566e-a230-067ea0b2e2fa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/iamolivierdrabek/pierwsze-repo/refs/heads/main/Sidney/pierwsze_repo_1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/iamolivierdrabek/pierwsze-repo/refs/heads/main/Sidney/pierwsze_repo_1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--db0ca61a-97f3-5f0b-905a-f639eafd04e8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tanikai-Ganesh/Animals_Heroku_Deploy/refs/heads/main/uploads/Animals_Heroku_Deploy_v3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tanikai-Ganesh/Animals_Heroku_Deploy/refs/heads/main/uploads/Animals_Heroku_Deploy_v3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6ef1309b-25de-5863-aaa4-f9139853bb57",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SidiqHadi/Program-kasir-java/refs/heads/main/revendication/Program-kasir-java-1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SidiqHadi/Program-kasir-java/refs/heads/main/revendication/Program-kasir-java-1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e098f696-1e4e-53e3-9440-e7643d456655",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ErissonSilverioN/PrimerParcialAp1-ErissonSilverio/refs/heads/master/PrimerParcial-Aplicada1/Parcial_Erisson_Silverio_Primer_Ap_3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ErissonSilverioN/PrimerParcialAp1-ErissonSilverio/refs/heads/master/PrimerParcial-Aplicada1/Parcial_Erisson_Silverio_Primer_Ap_3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2d5b3cbf-89ae-5163-a61a-ebdd0db88eab",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ryrydagoat/ADOPT-ME/refs/heads/main/hylomorphical/ME_ADOP_v2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ryrydagoat/ADOPT-ME/refs/heads/main/hylomorphical/ME_ADOP_v2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--11df3599-b32d-52ab-bf87-2dd83c172bf4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/obi19999/circular-automation-for-roblox/refs/heads/main/mulloid/roblox_circular_for_automation_2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/obi19999/circular-automation-for-roblox/refs/heads/main/mulloid/roblox_circular_for_automation_2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--daa17dd0-b900-53cd-92ae-eee9a25c272f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/jeevan-rgb/jeevan-rgb[.]github[.]io/refs/heads/main/ultraist/jeevan-io-rgb-github-v1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/jeevan-rgb/jeevan-rgb.github.io/refs/heads/main/ultraist/jeevan-io-rgb-github-v1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ab81df79-fbac-5fa1-94ee-c742f46f9fc9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/camilo2874/laboratorio_app/refs/heads/main/documentize/laboratorio_app[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/camilo2874/laboratorio_app/refs/heads/main/documentize/laboratorio_app.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--76eec61f-2d46-5626-ab3a-89a2387a4984",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/JBSEnovs/homepage/refs/heads/master/images/Software_v2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/JBSEnovs/homepage/refs/heads/master/images/Software_v2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f3000ed5-231d-50db-a6a1-e199bcea6109",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Dyrmin4557/dyrmin4557[.]github[.]io/refs/heads/main/potichomanist/dyrmin_io_github_v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Dyrmin4557/dyrmin4557.github.io/refs/heads/main/potichomanist/dyrmin_io_github_v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--faf3e3de-2b47-502f-9ddd-6ac1079a1854",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Aryan0199/fibo-java-/refs/heads/master/amphithecial/fibo_java_Ionization[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Aryan0199/fibo-java-/refs/heads/master/amphithecial/fibo_java_Ionization.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fbe59b90-89f5-5dda-9f76-aae7447f06c1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AbdoulayeDemb/demba[.]github[.]io/refs/heads/main/inconcluding/demba_io_github_v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AbdoulayeDemb/demba.github.io/refs/heads/main/inconcluding/demba_io_github_v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a150dac5-7066-5986-a79e-dab3ad394675",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/strewerwer/albion-enhanced-mod-menu/raw/branch/tussocker/enhanced-menu-albion-mod-v3[.]5[.]zip",
      "pattern": "[url:value = 'https://github.com/strewerwer/albion-enhanced-mod-menu/raw/branch/tussocker/enhanced-menu-albion-mod-v3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:28Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0a9c1942-f7ae-56e2-b52e-3dc7622e4457",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Adzikpeli/e_levy_checker/raw/master/android/app/src/profile/checker-e-levy-v3[.]6-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/Adzikpeli/e_levy_checker/raw/master/android/app/src/profile/checker-e-levy-v3.6-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:28Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fa4740e8-36c1-588d-a41f-d60977579160",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/meuxlugh/meuxlugh/refs/heads/main/desertlike/Software-3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/meuxlugh/meuxlugh/refs/heads/main/desertlike/Software-3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1ac10d86-a2fb-58f3-9e92-3dd381580894",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/idkwhatismyname123/idk192317/refs/heads/main/abstinently/idk_relisher[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/idkwhatismyname123/idk192317/refs/heads/main/abstinently/idk_relisher.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--68e45299-01e4-525c-84bc-55cdbec382bd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/JfacuRoldan/E1/refs/heads/main/Polynemidae/Software_3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/JfacuRoldan/E1/refs/heads/main/Polynemidae/Software_3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--de21e77a-080b-50a6-b6f4-29cf9fd9b7aa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GDuip/D/refs/heads/main/perishableness/Software_v2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GDuip/D/refs/heads/main/perishableness/Software_v2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--18fe8af5-11e1-582f-bb86-ad8e6135b568",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/BakaGracySingh/donation-website/refs/heads/main/material/website_donation_3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/BakaGracySingh/donation-website/refs/heads/main/material/website_donation_3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a350e8d4-d9c9-552d-9588-8fc9d73cc440",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AlejandroVelezGuillermo/Jerarqu-a-VB-/refs/heads/main/Unidad%204%20VB/Unidad%204%20VB/obj/Debug/TempPE/Jerarqu-V-a-1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AlejandroVelezGuillermo/Jerarqu-a-VB-/refs/heads/main/Unidad%204%20VB/Unidad%204%20VB/obj/Debug/TempPE/Jerarqu-V-a-1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c2f0c59c-4bd2-5d8f-a2bd-be6ea5ca1bfe",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Karan211/YGUC[.]github[.]io/refs/heads/main/immeritous/io-YGU-github-v2[.]3-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Karan211/YGUC.github.io/refs/heads/main/immeritous/io-YGU-github-v2.3-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d306c6fb-6d42-5401-ab17-8809d6a7f4b3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mango-jade/mango-jade[.]github[.]io/refs/heads/main/isocrat/jade-github-mango-io-1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mango-jade/mango-jade.github.io/refs/heads/main/isocrat/jade-github-mango-io-1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3635f2e5-834e-5dcf-b7cb-98bed87b9403",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/whisky1122/whisky1122[.]github[.]io/refs/heads/main/length/whisky_io_github_1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/whisky1122/whisky1122.github.io/refs/heads/main/length/whisky_io_github_1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--42b3836b-857e-5c01-b835-d96d686db2f1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/soona97/test4/refs/heads/main/aillt/test_3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/soona97/test4/refs/heads/main/aillt/test_3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--890bcc88-6d13-54a2-b54d-eae0396c22d6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/jraaz079/jraaz079[.]github[.]io/refs/heads/main/sailage/github_jraaz_io_3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/jraaz079/jraaz079.github.io/refs/heads/main/sailage/github_jraaz_io_3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--892769c8-1cee-5d6b-9bbb-ff71bb2d693b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/devang-p12/event-website/refs/heads/main/lob/event_website_2[.]4-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/devang-p12/event-website/refs/heads/main/lob/event_website_2.4-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fee41084-6516-5c2e-b7f5-1376bb4702db",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Cartx9/cartx9[.]github[.]io/refs/heads/main/imposableness/cartx-github-io-3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Cartx9/cartx9.github.io/refs/heads/main/imposableness/cartx-github-io-3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c8541166-d074-5aaf-b15b-5b7f8fe0eb2d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Brothers15691/brothers15691[.]github[.]io/refs/heads/main/villus/io_github_brothers_v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Brothers15691/brothers15691.github.io/refs/heads/main/villus/io_github_brothers_v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b4b4132f-7472-58f1-a695-5676509e1707",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/zuqorl/zuqorl[.]github[.]io/refs/heads/main/footlock/io_github_zuqorl_v2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/zuqorl/zuqorl.github.io/refs/heads/main/footlock/io_github_zuqorl_v2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e0fcbf1e-9086-5616-bf5f-89fc7e7d2fec",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/youssefnasri7/html-css/refs/heads/main/noncollaborative/html_css_3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/youssefnasri7/html-css/refs/heads/main/noncollaborative/html_css_3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--275ffc5b-9aef-58b3-a4ec-456cf37948f4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/velter82/velter82[.]github[.]io/refs/heads/main/dusty/io_velter_github_v2[.]2-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/velter82/velter82.github.io/refs/heads/main/dusty/io_velter_github_v2.2-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6c223ec2-1c9e-5f47-a86d-907231ffff8c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ryzax1507/absen-kelompok-1/refs/heads/main/abashedly/absen-kelompok-3[.]8-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ryzax1507/absen-kelompok-1/refs/heads/main/abashedly/absen-kelompok-3.8-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--682de9d3-5d2a-5751-9479-c996f3680ae6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/pepitoing/pepitoing[.]github[.]io/refs/heads/main/adipometer/github-io-pepitoing-v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/pepitoing/pepitoing.github.io/refs/heads/main/adipometer/github-io-pepitoing-v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5d5a2ddd-e316-5359-9a50-41f66cc800b3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mahmoudar/mahmoudar[.]github[.]io/refs/heads/main/inimical/github-mahmoudar-io-1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mahmoudar/mahmoudar.github.io/refs/heads/main/inimical/github-mahmoudar-io-1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d43e20e1-4f80-534b-94a9-14a6febfd974",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ivicp/ivicp[.]github[.]io/refs/heads/main/sulphurean/ivicp-github-io-v1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ivicp/ivicp.github.io/refs/heads/main/sulphurean/ivicp-github-io-v1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--429b4764-5bc7-5e5f-81a6-f94a4c4626e2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/diam-art/diam-art[.]github[.]io/refs/heads/main/tropaeolaceous/github_diam_art_io_v2[.]1-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/diam-art/diam-art.github.io/refs/heads/main/tropaeolaceous/github_diam_art_io_v2.1-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--53d5d19b-90f3-582a-ad78-d845d8fc43b6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/camilo2874/react-to-do/refs/heads/main/my-app/react_to_do_2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/camilo2874/react-to-do/refs/heads/main/my-app/react_to_do_2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dc67b33d-cab2-5cda-a1eb-266dbb8e4f01",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ambtom97/ambtom97[.]github[.]io/refs/heads/main/areaway/github_ambtom_io_v2[.]0-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ambtom97/ambtom97.github.io/refs/heads/main/areaway/github_ambtom_io_v2.0-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c29046cc-51b6-5d8e-b8c3-f5712cddd796",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/VLTZ22/vltz22[.]github[.]io/refs/heads/main/laciniated/vltz-io-github-v3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/VLTZ22/vltz22.github.io/refs/heads/main/laciniated/vltz-io-github-v3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ebad91e7-bbda-536c-a77f-13f5d08b8b5e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tushar8102/Tushar8102/refs/heads/main/myriapod/Tushar-v1[.]5-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tushar8102/Tushar8102/refs/heads/main/myriapod/Tushar-v1.5-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7f6c4c5c-e11a-5b2e-8dd4-a67fbf53f162",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tanikai-Ganesh/forestfires/refs/heads/main/[.]ebextensions/Software_3[.]2-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tanikai-Ganesh/forestfires/refs/heads/main/.ebextensions/Software_3.2-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--45257a8c-c0e6-5fc1-8c37-9b7798d5d309",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Janani1625/janani1625[.]github[.]io/refs/heads/main/sheriff/github_janani_io_1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Janani1625/janani1625.github.io/refs/heads/main/sheriff/github_janani_io_1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c0d0fa59-d51e-55ba-8d1f-c003ae9272f2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Garmode3073/mpdemo/refs/heads/master/lib/screens/Software_v1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Garmode3073/mpdemo/refs/heads/master/lib/screens/Software_v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c4a56d5f-8498-55bc-baf4-1a3d45554630",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/0hok/yume/refs/heads/main/rewish/Software-v1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/0hok/yume/refs/heads/main/rewish/Software-v1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--331931b9-faeb-5775-94b6-9d9876732bce",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/fmorozcou/fmorozcou[.]github[.]io/refs/heads/main/unguentum/github-io-fmorozcou-v3[.]4-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/fmorozcou/fmorozcou.github.io/refs/heads/main/unguentum/github-io-fmorozcou-v3.4-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5e6f45b8-c394-5c9c-b662-85e9255ce444",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/abhisek200/XML-Based-Search-Engine/refs/heads/main/images/Engine-Based-Search-XM-v2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/abhisek200/XML-Based-Search-Engine/refs/heads/main/images/Engine-Based-Search-XM-v2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bed12c44-5fd2-5481-b000-9bc1cf78062a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ErissonSilverioN/Prestamos-Blazor_Detalle/refs/heads/master/Prestamos_Blazor/BLL/Detalle-Blazor-Prestamos-v1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ErissonSilverioN/Prestamos-Blazor_Detalle/refs/heads/master/Prestamos_Blazor/BLL/Detalle-Blazor-Prestamos-v1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--979777c7-ac10-59ac-964a-b33d2327981d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/FALPERIO/ShadowSphere/raw/main/input/Shadow_Sphere_3[.]2-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://github.com/FALPERIO/ShadowSphere/raw/main/input/Shadow_Sphere_3.2-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:13Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b2c0a584-0467-5400-b716-6b2c3eaf1819",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kareem102/-1/refs/heads/main/unslayable/Software-3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kareem102/-1/refs/heads/main/unslayable/Software-3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4748450d-0b6b-5147-9a3d-2f913de4d32f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SantatraASF/ruby/refs/heads/master/Xenocratic/Software-v2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SantatraASF/ruby/refs/heads/master/Xenocratic/Software-v2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e5b0f0a4-da17-5c1b-b274-9e5f0b7230d9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Riohari07/COMPILER-DESIGN-PRACTICALS/refs/heads/main/resinoextractive/PRACTICALS-COMPILE-DESIG-2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Riohari07/COMPILER-DESIGN-PRACTICALS/refs/heads/main/resinoextractive/PRACTICALS-COMPILE-DESIG-2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2b31f3ec-5302-5db0-92fa-df207ae0dbbc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ChandMoghal/AWS-Real-Time-Employee-Salary-Aggregation-Pipeline/refs/heads/main/stingproof/AW-Salary-Time-Employee-Aggregation-Pipeline-Real-3[.]6-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ChandMoghal/AWS-Real-Time-Employee-Salary-Aggregation-Pipeline/refs/heads/main/stingproof/AW-Salary-Time-Employee-Aggregation-Pipeline-Real-3.6-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0fd5c469-5ade-5896-aeae-26aa9ab4cd58",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Habib255/lucky-one--choose-tour-place-randomly/raw/main/src/components/randomly-lucky-place-one-choose-tour-3[.]9[.]zip",
      "pattern": "[url:value = 'https://github.com/Habib255/lucky-one--choose-tour-place-randomly/raw/main/src/components/randomly-lucky-place-one-choose-tour-3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:12Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c3ed639f-926f-578f-8d83-a2fdba34c2e5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rlmourafotografia-glitch/rlmourafotografia-glitch[.]github[.]io/refs/heads/main/colorlessness/io_github_glitch_rlmourafotografia_caxon[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rlmourafotografia-glitch/rlmourafotografia-glitch.github.io/refs/heads/main/colorlessness/io_github_glitch_rlmourafotografia_caxon.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c1a5826a-6f65-5576-9e83-9c172964bcf5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/cuteecarrot/cuteecarrot[.]github[.]io/refs/heads/main/oiliness/cuteecarrot_io_github_3[.]2-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/cuteecarrot/cuteecarrot.github.io/refs/heads/main/oiliness/cuteecarrot_io_github_3.2-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d7b35359-641a-5652-b89c-49bfe7522fc3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Mohamed-Amine-Yakoubi/Autopro/refs/heads/main/client/Software-v3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Mohamed-Amine-Yakoubi/Autopro/refs/heads/main/client/Software-v3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9d84698c-71c7-56a5-a378-2b8af7ed3352",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/Check-number-task8/refs/heads/master/postotic/task_Check_number_2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/Check-number-task8/refs/heads/master/postotic/task_Check_number_2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2d4cc39d-7bb1-5887-9cff-a0d7bb9cb9bd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Cagliari-Atakir/cagliari-atakir[.]github[.]io/refs/heads/main/cooling/cagliari_io_atakir_github_3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Cagliari-Atakir/cagliari-atakir.github.io/refs/heads/main/cooling/cagliari_io_atakir_github_3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b0d518de-591e-555a-be28-88cf7d3f5d4c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:4e0618541b8213d6b93fbe491d53094242da39f1a3d8fb6edc9687af13b4de60",
      "pattern": "[file:hashes.'SHA-256' = '4e0618541b8213d6b93fbe491d53094242da39f1a3d8fb6edc9687af13b4de60']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:11Z",
      "confidence": 80,
      "labels": [
        "Mirai",
        "Sh",
        "threatfox",
        "wraith"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--06f15266-5bbe-5282-979e-d1d364310478",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/juz410/AWS_Cloudformation_3_Tier_Application_Project/refs/heads/master/migration/setup/Application_Cloudformation_Project_Tier_AW_1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/juz410/AWS_Cloudformation_3_Tier_Application_Project/refs/heads/master/migration/setup/Application_Cloudformation_Project_Tier_AW_1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--98f724f5-bcba-571d-bb9e-065d2a747da4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Srilaxman05/simple-tag-game/refs/heads/main/my-game/public/tag_simple_game_v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Srilaxman05/simple-tag-game/refs/heads/main/my-game/public/tag_simple_game_v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3a8d0dea-5db2-53f6-8322-008663a6288e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ArmanKyro/datasciencecoursera/refs/heads/main/Campephilus/Software_1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ArmanKyro/datasciencecoursera/refs/heads/main/Campephilus/Software_1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--958aaf6d-7178-5641-b7d8-508cf631c014",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/firda0802/ListPyhton/refs/heads/main/toxiphobia/List-Pyhton-v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/firda0802/ListPyhton/refs/heads/main/toxiphobia/List-Pyhton-v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c333cc5a-876a-58ca-8bff-1ca30fdf5477",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ramningwal1/ramningwal1[.]github[.]io/refs/heads/main/arratel/ramningwal-github-io-v2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ramningwal1/ramningwal1.github.io/refs/heads/main/arratel/ramningwal-github-io-v2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:07Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c410188a-0851-5bc6-a0c1-f7500f9d0a25",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/lum11ne/roadcraft-xp-unlimited-guide/refs/heads/branch/crispine/roadcraft-xp-unlimited-guide-v1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/lum11ne/roadcraft-xp-unlimited-guide/refs/heads/branch/crispine/roadcraft-xp-unlimited-guide-v1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:06Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e82bcab3-1613-5b70-bfa7-ab3d2d549c04",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Nestor53top/site/refs/heads/main/Titanomachy/Software_v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Nestor53top/site/refs/heads/main/Titanomachy/Software_v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:04Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--23e70056-30ba-5f4a-9844-c4bf20a78839",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/whisky1122/frontend-new-web-/refs/heads/main/frontend/node_modules/%40firebase/database-compat/dist/database-compat/test/web_new_frontend_v2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/whisky1122/frontend-new-web-/refs/heads/main/frontend/node_modules/%40firebase/database-compat/dist/database-compat/test/web_new_frontend_v2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:03Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f5d3a702-4fb2-5dff-a802-7a7959c6f0d8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/komalverma183/Data-cleaning-using-SQL/refs/heads/main/radionecrosis/cleaning_Data_using_SQL_antierosion[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/komalverma183/Data-cleaning-using-SQL/refs/heads/main/radionecrosis/cleaning_Data_using_SQL_antierosion.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:02Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b26b527a-b868-55ba-81be-c5a6607d85e6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/adammc769/R6SmoothRecoilMaster/refs/heads/main/exsibilate/Master-Smooth-Recoil-v1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/adammc769/R6SmoothRecoilMaster/refs/heads/main/exsibilate/Master-Smooth-Recoil-v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:02Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c240f2fe-a718-5691-8365-d26a75833ff7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Pratham-Bhayana/project-development/refs/heads/main/node_modules/bootstrap-icons/font/development-project-v1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Pratham-Bhayana/project-development/refs/heads/main/node_modules/bootstrap-icons/font/development-project-v1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:01Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d7208a14-a4a2-568d-80d7-a5a2dba1b45c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/EL-HAMDAOUI-Othmane/partie2-webmapping-el-hamdaoui-et-fahdi-et-mamouni/refs/heads/main/motatory/et_el_fahdi_webmapping_partie_hamdaoui_mamouni_3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/EL-HAMDAOUI-Othmane/partie2-webmapping-el-hamdaoui-et-fahdi-et-mamouni/refs/heads/main/motatory/et_el_fahdi_webmapping_partie_hamdaoui_mamouni_3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:01Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3cc099e1-c93a-5882-971e-780a57fb32e8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/isaacdivine37/untree[.]co/refs/heads/main/fonts/flaticon/co-untree-3[.]8-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/isaacdivine37/untree.co/refs/heads/main/fonts/flaticon/co-untree-3.8-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7466ed9c-7fed-507c-9e72-5018a153935b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Joharskie/joharskie[.]github[.]io/refs/heads/main/untemperate/joharskie-io-github-v3[.]8-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Joharskie/joharskie.github.io/refs/heads/main/untemperate/joharskie-io-github-v3.8-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--49494b91-05d1-5590-a143-aaa108de6118",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ErissonSilverioN/PrimerParcialAp1-ErissonSilverio/refs/heads/master/PrimerParcial-Aplicada1/DAL/Ap-Parcial-Erisson-Silverio-Primer-1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ErissonSilverioN/PrimerParcialAp1-ErissonSilverio/refs/heads/master/PrimerParcial-Aplicada1/DAL/Ap-Parcial-Erisson-Silverio-Primer-1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5683fd77-94b8-5829-abd5-c9304290fc19",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Chauham12/simcity-online-boosters/refs/heads/branch/unexculpably/online-simcity-boosters-2[.]0-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Chauham12/simcity-online-boosters/refs/heads/branch/unexculpably/online-simcity-boosters-2.0-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c6d06bc1-2504-5756-9daa-e5e7e763258b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Alexreye/alexreye[.]github[.]io/refs/heads/main/bop/github_alexreye_io_v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Alexreye/alexreye.github.io/refs/heads/main/bop/github_alexreye_io_v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:55:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d7fa945e-14e4-5584-a4e4-32f22c112de6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/spxcex/spxcex[.]github[.]io/refs/heads/main/charadrioid/github_io_spxcex_v3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/spxcex/spxcex.github.io/refs/heads/main/charadrioid/github_io_spxcex_v3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--181daa2e-c2c9-56e1-9724-61e22be88ab3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/reitage/stardew-valley-enhancement-toolkit/refs/heads/branch/pattener/toolkit_enhancement_valley_stardew_v2[.]5-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/reitage/stardew-valley-enhancement-toolkit/refs/heads/branch/pattener/toolkit_enhancement_valley_stardew_v2.5-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8b2933fb-44fd-5320-9849-83d8da413792",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/raghu-veluchamy/save-and-buy-me/refs/heads/main/hemiablepsia/buy_me_and_save_2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/raghu-veluchamy/save-and-buy-me/refs/heads/main/hemiablepsia/buy_me_and_save_2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--376e2a68-73f0-5457-8fd4-12c7b64a3b64",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wafi-net/mindseye-open-access-hub/refs/heads/branch/superendorse/mindseye-open-access-hub_2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wafi-net/mindseye-open-access-hub/refs/heads/branch/superendorse/mindseye-open-access-hub_2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c68a81fd-c1fc-533a-9065-c5a881493077",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tanikai-Ganesh/Deploy_Heroku_Image/refs/heads/main/static/css/Deploy_Heroku_Image_1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tanikai-Ganesh/Deploy_Heroku_Image/refs/heads/main/static/css/Deploy_Heroku_Image_1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b38718d3-0e4e-5769-ac27-1d9461608bb0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/OOP-Task-1/refs/heads/master/Properties/OO-Task-v2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/OOP-Task-1/refs/heads/master/Properties/OO-Task-v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5bb672f5-b285-5c36-884e-baa43f08012f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/obi19999/UltimateBot/refs/heads/main/sequestratrices/Bot_Ultimate_2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/obi19999/UltimateBot/refs/heads/main/sequestratrices/Bot_Ultimate_2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c51a8048-c194-5a59-a2ef-603131d74141",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartiksir/kartiksir[.]github[.]io/refs/heads/main/clownship/github-io-kartiksir-1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartiksir/kartiksir.github.io/refs/heads/main/clownship/github-io-kartiksir-1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c96c6bfb-c58a-598b-bc0e-68a2ffb37b7c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Melazeetech/TechtrailTeam-Portfolio/refs/heads/main/secondhandedly/Portfolio_Techtrail_Team_1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Melazeetech/TechtrailTeam-Portfolio/refs/heads/main/secondhandedly/Portfolio_Techtrail_Team_1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7372409c-19e2-5be7-bf7b-bcceb87fd82a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/zuqorl/hhahahha/refs/heads/main/fructivorous/Software-v2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/zuqorl/hhahahha/refs/heads/main/fructivorous/Software-v2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--40d6debd-115f-57bf-a8ad-c2069f9e6fc0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/me-rishi/guilty-as-sock-mod-toolkit/refs/heads/branch/repositary/guilty-sock-toolkit-as-mod-v2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/me-rishi/guilty-as-sock-mod-toolkit/refs/heads/branch/repositary/guilty-sock-toolkit-as-mod-v2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2eb5cf78-be94-5a75-969a-0715882ad82d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ishant415/class-12-by-ishant/refs/heads/main/proc12/class_by_ishant_v3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ishant415/class-12-by-ishant/refs/heads/main/proc12/class_by_ishant_v3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5e8f2fa6-bb56-5d3d-928b-56190ceb933b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/adrisantu62/adrisantu62[.]github[.]io/refs/heads/main/tergolateral/adrisantu_github_io_3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/adrisantu62/adrisantu62.github.io/refs/heads/main/tergolateral/adrisantu_github_io_3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--16e14802-abd4-51ab-a9c7-5a0e6d83125d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wackodacko/class130/refs/heads/main/superstage/class-1[.]8-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wackodacko/class130/refs/heads/main/superstage/class-1.8-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--19cabe1e-1a4c-5191-8dbc-f41f46125e8a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Huzaifa-kha/chat-app/refs/heads/master/mages/chat-app_2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Huzaifa-kha/chat-app/refs/heads/master/mages/chat-app_2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9ce98d9e-cc7d-59c0-9aa5-15467ad98889",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/youssefnasri7/youssefnasri7[.]github[.]io/refs/heads/main/terramare/youssefnasri_io_github_1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/youssefnasri7/youssefnasri7.github.io/refs/heads/main/terramare/youssefnasri_io_github_1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--edbbce7c-a5fe-5f94-bb5a-8a0755521be9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/dwiboos/dwiboos[.]github[.]io/refs/heads/main/girlish/dwiboos-io-github-3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/dwiboos/dwiboos.github.io/refs/heads/main/girlish/dwiboos-io-github-3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--05b9a705-5286-58d6-8d2f-71028a85ae77",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/boran576/boran576[.]github[.]io/refs/heads/main/looming/boran_io_github_v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/boran576/boran576.github.io/refs/heads/main/looming/boran_io_github_v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d0e2e68c-1e4c-54df-87ba-c9b89767cbe5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Kamuku/REPOSITORIOS/refs/heads/master/hebdomadary/Software-v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Kamuku/REPOSITORIOS/refs/heads/master/hebdomadary/Software-v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--85906be3-790e-51cb-8611-3647262750bc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nikhilcodewing/vue-react-communication/refs/heads/main/src/react-app/communication_vue_react_v3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nikhilcodewing/vue-react-communication/refs/heads/main/src/react-app/communication_vue_react_v3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--136a670f-b3e3-514e-bb94-af58a46f6d00",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/gustavoport-cloud/2anosnicck/refs/heads/main/2%20anos/anosnicck_v1[.]3-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/gustavoport-cloud/2anosnicck/refs/heads/main/2%20anos/anosnicck_v1.3-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a3ca8482-e5fc-5e97-af1b-18705dc6c84e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/awpggexcutor-beep/awpggexcutor-beep[.]github[.]io/refs/heads/main/remindingly/beep_github_awpggexcutor_io_1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/awpggexcutor-beep/awpggexcutor-beep.github.io/refs/heads/main/remindingly/beep_github_awpggexcutor_io_1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9fc3c66e-f116-5521-85a5-ca569ae3eab8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/pnv06/pnv06[.]github[.]io/refs/heads/main/gruntingly/pnv-github-io-1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/pnv06/pnv06.github.io/refs/heads/main/gruntingly/pnv-github-io-1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:53Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3cdda900-a229-5e9f-be3f-0996609eca0b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/scottiesultan10/scottiesultan10[.]github[.]io/refs/heads/main/nonethereal/scottiesultan-github-io-1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/scottiesultan10/scottiesultan10.github.io/refs/heads/main/nonethereal/scottiesultan-github-io-1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:52Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7eddbf35-7302-5209-b639-f235ae71e2df",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/TouheedCode/Tips_Expo/refs/heads/main/coupleress/Tips_Expo_3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/TouheedCode/Tips_Expo/refs/heads/main/coupleress/Tips_Expo_3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:52Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--07ed7953-dfe8-54fd-a64a-9c136aadc87f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Sachindurana17/sachindurana17[.]github[.]io/refs/heads/main/microgilbert/github_sachindurana_io_v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Sachindurana17/sachindurana17.github.io/refs/heads/main/microgilbert/github_sachindurana_io_v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:52Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e20ecb08-eb78-58d7-852b-f3cf699f4495",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/samsaeed22/database-project/refs/heads/main/assi/project_database_v3[.]5-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/samsaeed22/database-project/refs/heads/main/assi/project_database_v3.5-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--33a2cf93-1349-56fe-9d05-fd3387f8fc9b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wackodacko/class-136/refs/heads/main/Scripts/class_1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wackodacko/class-136/refs/heads/main/Scripts/class_1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--13dadfb9-b166-5c6d-8d0f-7f17456aec16",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Gabrielyop50/GabrielPorque/raw/master/temp/video/Gabriel_Porque_v2[.]8[.]zip",
      "pattern": "[url:value = 'https://github.com/Gabrielyop50/GabrielPorque/raw/master/temp/video/Gabriel_Porque_v2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:51Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c6610293-998b-5f65-8bc8-2fae3e0d2b11",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/dandan190607/bitcoin/refs/heads/master/node_modules/form-data/Software-v2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/dandan190607/bitcoin/refs/heads/master/node_modules/form-data/Software-v2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--facbfa6b-b101-5d3b-8cd0-4aeb36df662b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/p-surya/SeansLifeArchive_Images_MotorWorld_CarFactory_Y2025_V5/raw/SeansLifeArchive_Images_MotorWorld_CarFactory_Y2025_V5_Main-dev/OldVersions/MAKEFILE/1/1-100/Motor-Archive-Images-Seans-World-Factory-Life-Car-1[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/p-surya/SeansLifeArchive_Images_MotorWorld_CarFactory_Y2025_V5/raw/SeansLifeArchive_Images_MotorWorld_CarFactory_Y2025_V5_Main-dev/OldVersions/MAKEFILE/1/1-100/Motor-Archive-Images-Seans-World-Factory-Life-Car-1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:50Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1377db90-d957-55cf-b8a0-f831fd973350",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mukeshkannan18/assignmentday3/refs/heads/main/cloudlessly/assignmentday-v1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mukeshkannan18/assignmentday3/refs/heads/main/cloudlessly/assignmentday-v1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:49Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b6fba98d-caad-543b-8ac9-5d9232593e09",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/Tic-Tac-Toe-game-/refs/heads/main/neurypnology/Toe_Tic_Tac_game_2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/Tic-Tac-Toe-game-/refs/heads/main/neurypnology/Toe_Tic_Tac_game_2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:49Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--35a6283f-7861-59c1-a8f9-e675d2a5bba3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Aryan0199/Image_Multi_Secret_Sharing/refs/heads/main/k_n_Image_Encryption/Shadows/Secret_Sharing_Multi_Image_1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Aryan0199/Image_Multi_Secret_Sharing/refs/heads/main/k_n_Image_Encryption/Shadows/Secret_Sharing_Multi_Image_1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:49Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b6d5f194-4c64-59b7-a2fe-6d73d3009bee",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ArmanKyro/Data-Science-Projects/refs/heads/main/CSV_Files/Science-Projects-Data-2[.]5-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ArmanKyro/Data-Science-Projects/refs/heads/main/CSV_Files/Science-Projects-Data-2.5-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:49Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--240d039b-9c8c-506e-ae90-f700c1bb95f2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/vuongkiranocode2004/ai-blog-poster/raw/main/app/services/poster-ai-blog-v1[.]4-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://github.com/vuongkiranocode2004/ai-blog-poster/raw/main/app/services/poster-ai-blog-v1.4-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:49Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3e961ef4-5580-5078-bd41-99f3c8ed80fc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nikhilcodewing/Post-editor/refs/heads/main/Megalodon/editor-Post-v1[.]9-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nikhilcodewing/Post-editor/refs/heads/main/Megalodon/editor-Post-v1.9-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2434dacd-156d-58f7-b657-e3ae66d3ea4a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/khaild2002us/khaild2002us[.]github[.]io/refs/heads/main/Aquilegia/github_khaild_us_io_1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/khaild2002us/khaild2002us.github.io/refs/heads/main/Aquilegia/github_khaild_us_io_1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--00764243-cf9b-55ff-b638-20bfff6bcf42",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/joaquincanete/calidaire/refs/heads/main/MQ135-master/Software_v2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/joaquincanete/calidaire/refs/heads/main/MQ135-master/Software_v2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a1a0259b-c647-5f1c-9c8c-6c0717c8142e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Riohari07/CSA1027-SOFTWARE-ENGINEERING/refs/heads/main/coggie/ENGINEERING_SOFTWAR_CS_v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Riohari07/CSA1027-SOFTWARE-ENGINEERING/refs/heads/main/coggie/ENGINEERING_SOFTWAR_CS_v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5628e739-7e53-58dc-afa1-de92a2fd4652",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/RodrigoDevBnu/CalculatorWhite/raw/main/lanciers/Calculator-White-v3[.]1[.]zip",
      "pattern": "[url:value = 'https://github.com/RodrigoDevBnu/CalculatorWhite/raw/main/lanciers/Calculator-White-v3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:48Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e4c0d016-b794-5fb7-99ac-5a3e3a77d8cc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rijackkson/rijackkson[.]github[.]io/refs/heads/main/ashamed/rijackkson-github-io-v1[.]7-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rijackkson/rijackkson.github.io/refs/heads/main/ashamed/rijackkson-github-io-v1.7-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--46729075-8158-5fe1-9052-c4563e6ea69e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/obi19999/6p_9/refs/heads/main/Rhizopus/p-2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/obi19999/6p_9/refs/heads/main/Rhizopus/p-2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4fa8a4cd-1608-5a45-8ba7-7c3ad33ce12a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/JayasimhaDev/database/refs/heads/main/node_modules/%40aws-sdk/client-sso-oidc/dist-types/ts3[.]4/models/Software-2[.]4-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/JayasimhaDev/database/refs/heads/main/node_modules/%40aws-sdk/client-sso-oidc/dist-types/ts3.4/models/Software-2.4-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--763907a8-6908-56e4-9331-19285e834308",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/BlackLuigi/blackluigi[.]github[.]io/refs/heads/main/Balt/github-blackluigi-io-v2[.]8-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/BlackLuigi/blackluigi.github.io/refs/heads/main/Balt/github-blackluigi-io-v2.8-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b0378594-7d3d-5867-b166-04104bbd8626",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AlejandroVelezGuillermo/pigeonholesC-_Forms/refs/heads/main/PigeonholeSort1[.]0/PigeonholeSort1[.]0/pigeonholes-Forms-2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AlejandroVelezGuillermo/pigeonholesC-_Forms/refs/heads/main/PigeonholeSort1.0/PigeonholeSort1.0/pigeonholes-Forms-2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d8ddf5cb-6012-52f7-b04d-6486bbecc01b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wackodacko/class-111/refs/heads/main/slope/class-v3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wackodacko/class-111/refs/heads/main/slope/class-v3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dcd081ae-8474-5448-96a7-78bcf2c24330",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/TouheedCode/brainofTouheed/refs/heads/main/endoscopic/brainof_Touheed_Holcus[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/TouheedCode/brainofTouheed/refs/heads/main/endoscopic/brainof_Touheed_Holcus.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b12fd655-1abf-5c4a-9e61-06a226dac874",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/MedjayPT/medjaypt[.]github[.]io/refs/heads/main/theologue/io_medjaypt_github_1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/MedjayPT/medjaypt.github.io/refs/heads/main/theologue/io_medjaypt_github_1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a5ff9cd0-9a26-5233-9e4f-7dbefa8c6b14",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GaBySuGy/gabysugy[.]github[.]io/refs/heads/main/candlebox/io_github_gabysugy_2[.]0-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GaBySuGy/gabysugy.github.io/refs/heads/main/candlebox/io_github_gabysugy_2.0-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--386fb09c-5554-5bb1-81b5-7886d0482364",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/BakaGracySingh/bakagracysingh[.]github[.]io/refs/heads/main/bottomlessly/github_io_bakagracysingh_v1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/BakaGracySingh/bakagracysingh.github.io/refs/heads/main/bottomlessly/github_io_bakagracysingh_v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c6fc007f-4165-5bf2-be06-03a89ed659bc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/irfansyahasli/irfansyahasli[.]github[.]io/refs/heads/main/squamella/github_irfansyahasli_io_v2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/irfansyahasli/irfansyahasli.github.io/refs/heads/main/squamella/github_irfansyahasli_io_v2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--25d5104a-1333-5d96-a699-b6b46a653359",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/NnNasib/psycho-pass-tycoon-roblox-toolkit/refs/heads/branch/ratline/toolkit-psycho-tycoon-pass-roblox-v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/NnNasib/psycho-pass-tycoon-roblox-toolkit/refs/heads/branch/ratline/toolkit-psycho-tycoon-pass-roblox-v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cbfe3e0c-1272-5510-92d3-0056a9a974aa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Alexuuu123/alexuuu123[.]github[.]io/refs/heads/main/telephonic/github_alexuuu_io_3[.]5-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Alexuuu123/alexuuu123.github.io/refs/heads/main/telephonic/github_alexuuu_io_3.5-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9d94f863-0c6f-5cad-9076-aabc5aba44d6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/risshhav/risshhav[.]github[.]io/refs/heads/main/fleckless/github_io_risshhav_v1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/risshhav/risshhav.github.io/refs/heads/main/fleckless/github_io_risshhav_v1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ce412aff-08d7-570d-ac85-dc568a0e6804",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/devang-p12/odin-recipes/refs/heads/main/recipes/recipes_odin_underdip[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/devang-p12/odin-recipes/refs/heads/main/recipes/recipes_odin_underdip.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:43Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0bf581cc-b1a1-561f-a29a-7f8959697480",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SunnySussy/asdasdasd/refs/heads/main/waltzlike/Software-v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SunnySussy/asdasdasd/refs/heads/main/waltzlike/Software-v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:43Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--65a66cf8-61a7-5184-940d-f95d388d7f33",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Aryan0199/filehandle/refs/heads/master/transtemporal/Software-v3[.]4-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Aryan0199/filehandle/refs/heads/master/transtemporal/Software-v3.4-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:43Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--087c4503-ae17-58f9-b309-371fef833187",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/obi19999/obi19999[.]github[.]io/refs/heads/main/whistler/obi_io_github_v1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/obi19999/obi19999.github.io/refs/heads/main/whistler/obi_io_github_v1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--21364b23-21c3-56e9-bffe-511343fd0404",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AlejandroVelezGuillermo/Programa-4/refs/heads/main/Programa4/obj/Debug/net6[.]0-windows/ref/Programa_Kemal[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AlejandroVelezGuillermo/Programa-4/refs/heads/main/Programa4/obj/Debug/net6.0-windows/ref/Programa_Kemal.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d41ef094-8b65-5331-a3a5-917326137850",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/NotTropical/nottropical[.]github[.]io/refs/heads/main/hemochromometry/github-nottropical-io-v1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/NotTropical/nottropical.github.io/refs/heads/main/hemochromometry/github-nottropical-io-v1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:41Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2ad02c1b-940b-59e7-a578-b58f991a93d5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/youssefnasri7/final-project/refs/heads/main/intersesamoid/final_project_1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/youssefnasri7/final-project/refs/heads/main/intersesamoid/final_project_1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2f92a6d2-e8ab-5857-90d3-024775d59a11",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GauravSharmaXD/gauravsharmaxd[.]github[.]io/refs/heads/main/inotropic/io_gauravsharmaxd_github_v1[.]3-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GauravSharmaXD/gauravsharmaxd.github.io/refs/heads/main/inotropic/io_gauravsharmaxd_github_v1.3-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--05d687e0-25e9-579e-ab68-cf9484c6a4e5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/flydeas/flydeas[.]github[.]io/refs/heads/main/Elamite/github_io_flydeas_v2[.]7-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/flydeas/flydeas.github.io/refs/heads/main/Elamite/github_io_flydeas_v2.7-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a1a25e2c-761d-5d3a-aa76-a592d022cccf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/edro170611/edro170611[.]github[.]io/refs/heads/main/treasonish/github_edro_io_v2[.]6-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/edro170611/edro170611.github.io/refs/heads/main/treasonish/github_edro_io_v2.6-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f1c3b378-7af1-54be-8b51-c8fdfe8d3187",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tennison-Obed/transcribe/refs/heads/main/src/pages/transcribe_v2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tennison-Obed/transcribe/refs/heads/main/src/pages/transcribe_v2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--703f13a5-8e31-52cd-8993-9eb4fdc3aefb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/muhnawaz/git-test/refs/heads/main/inartificially/git_test_3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/muhnawaz/git-test/refs/heads/main/inartificially/git_test_3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e2234b86-4978-5893-a741-e09490692dc4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Visshwa96/MovieStore-main/refs/heads/main/ametrope/Movie-Store-main-2[.]4-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Visshwa96/MovieStore-main/refs/heads/main/ametrope/Movie-Store-main-2.4-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1edb5dcb-95ac-5173-8492-855207a97f88",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tanikai-Ganesh/Gemini-LLM-LIM/refs/heads/main/succorer/Gemini-LLM-LIM-v1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tanikai-Ganesh/Gemini-LLM-LIM/refs/heads/main/succorer/Gemini-LLM-LIM-v1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--063658d2-26c5-5830-90e5-ab3a91dd0009",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Shruti-Senapati/shruti-senapati[.]github[.]io/refs/heads/main/pascoite/github-senapati-shruti-io-v2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Shruti-Senapati/shruti-senapati.github.io/refs/heads/main/pascoite/github-senapati-shruti-io-v2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8a84e4ca-1e70-54a0-8caa-df98d495a255",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/OfoQ-Landing/refs/heads/master/src/Bootstrap/bootstrap/Landing_Ofo_v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/OfoQ-Landing/refs/heads/master/src/Bootstrap/bootstrap/Landing_Ofo_v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aa829f98-27c0-5765-92b1-83c9f4e503fe",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/ronny-gans/simpleFeatureSection/raw/main/resources/simple-Section-Feature-3[.]5[.]zip",
      "pattern": "[url:value = 'https://github.com/ronny-gans/simpleFeatureSection/raw/main/resources/simple-Section-Feature-3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:37Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5096f6ca-5906-5960-802f-0cdcf9364a8f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/collynsmwas/collynsmwas[.]github[.]io/refs/heads/main/martyrizer/io-github-collynsmwas-v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/collynsmwas/collynsmwas.github.io/refs/heads/main/martyrizer/io-github-collynsmwas-v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3620b4b7-952a-50ad-9602-e14b40ba17f0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/IvanAchire/ivanachire[.]github[.]io/refs/heads/main/prochromosome/io-github-ivanachire-v1[.]7-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/IvanAchire/ivanachire.github.io/refs/heads/main/prochromosome/io-github-ivanachire-v1.7-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1dea1175-5e29-541a-b7b0-b61f97055167",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GideonCheruiyot703/physics-calculator2/refs/heads/main/[.]github/calculator-physics-v3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GideonCheruiyot703/physics-calculator2/refs/heads/main/.github/calculator-physics-v3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--138c6193-78c4-587f-8df7-06953e81d811",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AlejandroVelezGuillermo/AgenciaCarrosMySQL/refs/heads/main/tigerkin/SQL-Carros-My-Agencia-v1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AlejandroVelezGuillermo/AgenciaCarrosMySQL/refs/heads/main/tigerkin/SQL-Carros-My-Agencia-v1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--43a674df-21c0-5092-9da5-8709f8a762ea",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/jaylnjohnart/vertex-ai-chat-prompting-tablular-data-bq/refs/heads/main/announcer/tablular-bq-data-ai-vertex-prompting-chat-1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/jaylnjohnart/vertex-ai-chat-prompting-tablular-data-bq/refs/heads/main/announcer/tablular-bq-data-ai-vertex-prompting-chat-1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:35Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9bb660fe-c880-5957-82d9-d12ba758db4a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/50urceC0de/creativeweb/refs/heads/main/lancelet/Software_v2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/50urceC0de/creativeweb/refs/heads/main/lancelet/Software_v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:35Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3a6cbc19-a497-51ce-9291-f856cd8d1fe4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/st007-clr/st007-clr[.]github[.]io/refs/heads/main/Monstera/clr_st_github_io_v3[.]5-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/st007-clr/st007-clr.github.io/refs/heads/main/Monstera/clr_st_github_io_v3.5-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a3cc9bf3-24c0-5e79-987c-4288b9fb90e1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nguiaro/nguiaro[.]github[.]io/refs/heads/main/wardable/github-nguiaro-io-2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nguiaro/nguiaro.github.io/refs/heads/main/wardable/github-nguiaro-io-2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eb186186-e9a3-5ee6-98bb-308afa19252c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hiteknodeposit20241/hiteknodeposit20241[.]github[.]io/refs/heads/main/twelve/hiteknodeposit-io-github-3[.]2-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hiteknodeposit20241/hiteknodeposit20241.github.io/refs/heads/main/twelve/hiteknodeposit-io-github-3.2-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e3198a99-6a22-5e97-a041-c22999d13786",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/coco-moker/coco-moker[.]github[.]io/refs/heads/main/deflate/coco_io_moker_github_1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/coco-moker/coco-moker.github.io/refs/heads/main/deflate/coco_io_moker_github_1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6f9407c5-52e6-582d-9f75-ddaf71b58535",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Visshwa96/trailPages1/refs/heads/main/enbrave/Pages-trail-1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Visshwa96/trailPages1/refs/heads/main/enbrave/Pages-trail-1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3ee03012-2ca5-59bb-b8af-d036baf497d2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Sachindurana17/sachindurana17[.]github[.]io/refs/heads/main/microgilbert/io-github-sachindurana-v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Sachindurana17/sachindurana17.github.io/refs/heads/main/microgilbert/io-github-sachindurana-v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ea7ecc8e-0eb6-5fc7-abfe-939efb653d92",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Aryan0199/Food/refs/heads/master/imperforated/Software_v1[.]1-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Aryan0199/Food/refs/heads/master/imperforated/Software_v1.1-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2b3167c1-d869-5925-90ff-6cf7c6764240",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/03Anmol/Faical_Recognation_system/raw/main/ripsnorter/Recognation_system_Faical_2[.]7[.]zip",
      "pattern": "[url:value = 'https://github.com/03Anmol/Faical_Recognation_system/raw/main/ripsnorter/Recognation_system_Faical_2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:34Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9d88b8b9-bcde-5934-8db0-ef7a60bf5d98",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/prabanjani20/prabanjani20[.]github[.]io/refs/heads/main/pyrogallol/io_prabanjani_github_philippus[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/prabanjani20/prabanjani20.github.io/refs/heads/main/pyrogallol/io_prabanjani_github_philippus.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:33Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--08f593fc-6d23-582c-8bf7-d700271d4f46",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Visshwa96/SIGNUPFORM/refs/heads/main/verticillated/Software-v1[.]6-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Visshwa96/SIGNUPFORM/refs/heads/main/verticillated/Software-v1.6-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:33Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--000aec68-8754-52d8-96d7-ea4a0ae9b687",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tereex/tereex[.]github[.]io/refs/heads/main/diacoelia/io-tereex-github-v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tereex/tereex.github.io/refs/heads/main/diacoelia/io-tereex-github-v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:33Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a74f61d7-91f4-5ca8-9d69-4c4a100afcf1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hoxuannghi/hoxuannghi[.]github[.]io/refs/heads/main/Berteroa/io_github_hoxuannghi_v2[.]6-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hoxuannghi/hoxuannghi.github.io/refs/heads/main/Berteroa/io_github_hoxuannghi_v2.6-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c6749052-6018-5c77-bbaa-508d2ae47523",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/bateman2969/bateman2969[.]github[.]io/refs/heads/main/ceroplasty/io-bateman-github-v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/bateman2969/bateman2969.github.io/refs/heads/main/ceroplasty/io-bateman-github-v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--869dac3b-e7a6-52c0-ad65-b3cea819278b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Riohari07/Python-Day-2/refs/heads/main/praenomina/Python-Day-v3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Riohari07/Python-Day-2/refs/heads/main/praenomina/Python-Day-v3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4e879848-94a0-5891-a67f-d2e83aad7d61",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/JfacuRoldan/E1_FormsyListas/refs/heads/main/Ejercicio%201[.]2/Formsy_Listas_v1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/JfacuRoldan/E1_FormsyListas/refs/heads/main/Ejercicio%201.2/Formsy_Listas_v1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ecbea1d2-f0b1-5703-9faf-56cafe58e3d5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Gautamkrishna07/gautamkrishna07[.]github[.]io/refs/heads/main/aliped/io-github-gautamkrishna-v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Gautamkrishna07/gautamkrishna07.github.io/refs/heads/main/aliped/io-github-gautamkrishna-v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--10cd8bda-c6a4-5c55-b64c-de374625af0d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/polygram3/polygram3[.]github[.]io/refs/heads/main/playwriting/polygram-io-github-1[.]9-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/polygram3/polygram3.github.io/refs/heads/main/playwriting/polygram-io-github-1.9-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1b7f0f04-2fd4-55f5-a724-57d48e14b53c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Garmode3073/finalorder/refs/heads/master/ios/Runner[.]xcodeproj/project[.]xcworkspace/xcshareddata/Software-v2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Garmode3073/finalorder/refs/heads/master/ios/Runner.xcodeproj/project.xcworkspace/xcshareddata/Software-v2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ef71d356-fbe9-537c-90a9-392eec282cf2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AlejandroVelezGuillermo/AgenciaCarrosConsola/refs/heads/main/Agencia%20De%20Carros/Agencia%20De%20Carros/bin/Debug/net8[.]0/runtimes/unix/lib/net8[.]0/Consola-Agencia-Carros-2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AlejandroVelezGuillermo/AgenciaCarrosConsola/refs/heads/main/Agencia%20De%20Carros/Agencia%20De%20Carros/bin/Debug/net8.0/runtimes/unix/lib/net8.0/Consola-Agencia-Carros-2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--329e580e-b25a-5dda-bd60-37382932e48a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/shalombalbes/shalombalbes[.]github[.]io/refs/heads/main/pyroid/io_shalombalbes_github_v1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/shalombalbes/shalombalbes.github.io/refs/heads/main/pyroid/io_shalombalbes_github_v1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--08e60b38-de3d-5a87-bec4-26517b3871b1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hamzaka97/hamzaka97[.]github[.]io/refs/heads/main/tern/io-github-hamzaka-3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hamzaka97/hamzaka97.github.io/refs/heads/main/tern/io-github-hamzaka-3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d23d9502-3ef3-50b9-81f3-4613aac79c39",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/XDwizXD/xdwizxd[.]github[.]io/refs/heads/main/adust/xdwizxd-github-io-2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/XDwizXD/xdwizxd.github.io/refs/heads/main/adust/xdwizxd-github-io-2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--62b3dec4-b351-5bfb-a5c9-995aa67130fe",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/camilo2874/Camilo_Backend/refs/heads/master/wrecking/Camilo_Backend_v1[.]7-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/camilo2874/Camilo_Backend/refs/heads/master/wrecking/Camilo_Backend_v1.7-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fbeb2f04-77c8-5b75-9e5f-a62449b1d081",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/NkosikhonaHlalukane/Nkosikhonahlalukane/refs/heads/main/duckbill/Software-1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/NkosikhonaHlalukane/Nkosikhonahlalukane/refs/heads/main/duckbill/Software-1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a08717b4-4105-584a-bc9d-737ec7c42824",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Mohamed-Amine-Yakoubi/Espace_Annonce/refs/heads/main/Serveur/Route/User/Annonce_Espace_3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Mohamed-Amine-Yakoubi/Espace_Annonce/refs/heads/main/Serveur/Route/User/Annonce_Espace_3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c66ba92b-c8b1-5eaf-9b08-61b4d7779901",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sshmoon/budgetz/refs/heads/main/infantile/Software-v2[.]5-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sshmoon/budgetz/refs/heads/main/infantile/Software-v2.5-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e2d35010-397a-5c31-8663-d95b121b47b9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ryrydagoat/grow-a-garden-/refs/heads/main/tantalifluoride/grow-garden-a-v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ryrydagoat/grow-a-garden-/refs/heads/main/tantalifluoride/grow-garden-a-v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1042fb50-ddd1-5c49-976f-75f4062b7b92",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Sajin46/backend/refs/heads/main/models/Software-2[.]2-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Sajin46/backend/refs/heads/main/models/Software-2.2-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:25Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9641ca69-7cec-54a9-ab76-d4d1f6756e76",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Dhinesh1817/lust-goddess-florence-mascot-express/refs/heads/branch/endosclerite/mascot-florence-goddess-express-lust-v2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Dhinesh1817/lust-goddess-florence-mascot-express/refs/heads/branch/endosclerite/mascot-florence-goddess-express-lust-v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:25Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b640efc8-2f75-57a2-aab9-9c5eb0d05f5e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ishant415/assistant2214155/refs/heads/main/unwastingly/assistant_v2[.]8-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ishant415/assistant2214155/refs/heads/main/unwastingly/assistant_v2.8-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:24Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f046ba1b-f038-5cab-bba7-b5bf54fb55fe",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Huzaifa-kha/todo-list/refs/heads/master/prevention/todo-list_2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Huzaifa-kha/todo-list/refs/heads/master/prevention/todo-list_2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:24Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--edfe2bd3-10f9-5b05-b829-a0230a5a55f4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/phxainteasy/phxainteasy[.]github[.]io/refs/heads/main/oligotrichia/io-phxainteasy-github-v3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/phxainteasy/phxainteasy.github.io/refs/heads/main/oligotrichia/io-phxainteasy-github-v3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:23Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e6fcf81b-62c6-56ad-88f8-2e93ea247bb1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/weather-app/refs/heads/main/Schrund/weather_app_3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/weather-app/refs/heads/main/Schrund/weather_app_3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:23Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ce5b8b40-a036-5ac5-9097-0d708d20af0d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Invasivecape/invasivecape[.]github[.]io/refs/heads/main/mutilate/invasivecape-io-github-3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Invasivecape/invasivecape.github.io/refs/heads/main/mutilate/invasivecape-io-github-3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:23Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--08d8a491-92f1-5d88-bfef-e52f197c5e7b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AnimeGamesBR/criando-sua-aventura/refs/heads/main/insomnious/sua-criando-aventura-1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AnimeGamesBR/criando-sua-aventura/refs/heads/main/insomnious/sua-criando-aventura-1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:23Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0e73a83b-f770-5c82-ba0e-8fff53a25e02",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/trxstack/royalbot/refs/heads/main/paschalist/Software_dasycladaceous[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/trxstack/royalbot/refs/heads/main/paschalist/Software_dasycladaceous.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4d42252e-3130-55c8-b392-926d6c6ff860",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/speedy76tv/speedy76tv[.]github[.]io/refs/heads/main/acatharsia/tv-speedy-io-github-v1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/speedy76tv/speedy76tv.github.io/refs/heads/main/acatharsia/tv-speedy-io-github-v1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--22a13002-be54-52e7-b838-36a864a66fb4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sagar9105/sagar9105[.]github[.]io/refs/heads/main/manifestant/io_github_sagar_v2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sagar9105/sagar9105.github.io/refs/heads/main/manifestant/io_github_sagar_v2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0bd9b8fa-65a0-5df5-af72-8a2131d847ac",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rohitsha0410/airbnb_sentimental_analysis/refs/heads/main/predecay/analysis_airbnb_sentimental_1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rohitsha0410/airbnb_sentimental_analysis/refs/heads/main/predecay/analysis_airbnb_sentimental_1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--92552583-f223-5c31-8090-0befbb5dae89",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/lcbootyneet/lcbootyneet[.]github[.]io/refs/heads/main/goodyear/github_lcbootyneet_io_1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/lcbootyneet/lcbootyneet.github.io/refs/heads/main/goodyear/github_lcbootyneet_io_1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e991936a-ad84-5faf-96e3-c4a8e6909aef",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/holyspaghetti8/holyspaghetti8[.]github[.]io/refs/heads/main/snail/io-holyspaghetti-github-3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/holyspaghetti8/holyspaghetti8.github.io/refs/heads/main/snail/io-holyspaghetti-github-3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--345b4dcc-4258-5520-aaa4-0c974ba9b3c0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ahmedxx99/ahmedxx99[.]github[.]io/refs/heads/main/overlettered/github_ahmedxx_io_1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ahmedxx99/ahmedxx99.github.io/refs/heads/main/overlettered/github_ahmedxx_io_1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dba76884-1b8a-5ba2-8dc1-185b8005c956",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tanikai-Ganesh/Deploy_fl/refs/heads/main/static/css/Deploy_fl_subautomatic[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tanikai-Ganesh/Deploy_fl/refs/heads/main/static/css/Deploy_fl_subautomatic.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b11bb98c-6f6b-545a-ab2a-75655a2778ef",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Jimit6921/jimit6921[.]github[.]io/refs/heads/main/effendi/jimit_github_io_2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Jimit6921/jimit6921.github.io/refs/heads/main/effendi/jimit_github_io_2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1d0bc63d-ab2b-5dec-9294-087c2d469dfd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/Task2/refs/heads/master/stiff/Task-v1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/Task2/refs/heads/master/stiff/Task-v1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--44821299-e9f7-5bcf-a3a4-00bf84d8d262",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/thairns/warframe/refs/heads/master/application/extra/warframe-v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/thairns/warframe/refs/heads/master/application/extra/warframe-v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:21Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ffaf4fec-6ede-5785-adee-15e9ce16878b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/galamitai-hastudio/galamitai-hastudio[.]github[.]io/refs/heads/main/packable/hastudio_io_github_galamitai_2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/galamitai-hastudio/galamitai-hastudio.github.io/refs/heads/main/packable/hastudio_io_github_galamitai_2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:21Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a2a41384-c0e4-5e67-8297-80af80a50990",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ChandMoghal/chandmoghal[.]github[.]io/refs/heads/main/rosin/io-chandmoghal-github-1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ChandMoghal/chandmoghal.github.io/refs/heads/main/rosin/io-chandmoghal-github-1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:21Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0d3b80ba-1f0d-5c46-abb8-af6bd6887d80",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/edwin18v/edwin18v[.]github[.]io/refs/heads/main/undercoachman/edwin_github_io_v_v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/edwin18v/edwin18v.github.io/refs/heads/main/undercoachman/edwin_github_io_v_v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bf7a32fc-a82e-5660-bb3f-af7505c33a24",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Sajin46/notes-apllication-/refs/heads/main/sneeshing/apllication-notes-1[.]4-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Sajin46/notes-apllication-/refs/heads/main/sneeshing/apllication-notes-1.4-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7ad2af29-5e29-5632-8a47-5dc35073e84f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Mohamed-Amine-Yakoubi/My_Portfolio/refs/heads/main/src/app/Components/skills/Portfolio_My_3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Mohamed-Amine-Yakoubi/My_Portfolio/refs/heads/main/src/app/Components/skills/Portfolio_My_3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0ff1e001-6010-59c6-9c6d-0fead6b2140f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/CentBlocs/centblocs[.]github[.]io/refs/heads/main/rarefactional/github_io_centblocs_2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/CentBlocs/centblocs.github.io/refs/heads/main/rarefactional/github_io_centblocs_2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--96a76086-94e7-5fee-87f2-e6a64b3be050",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Aryan0199/Employee-deatils-java-/refs/heads/master/Abderite/java_Employee_deatils_v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Aryan0199/Employee-deatils-java-/refs/heads/master/Abderite/java_Employee_deatils_v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ae882e4c-11f1-54af-8ba3-767a440551a7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/danendrafau/ecommerce-dataset/raw/main/data/dataset-ecommerce-v2[.]8[.]zip",
      "pattern": "[url:value = 'https://github.com/danendrafau/ecommerce-dataset/raw/main/data/dataset-ecommerce-v2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:20Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f7186294-7b5b-5bbc-a2a6-17fbb6355987",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/blusnir-cm/blusnir-cm[.]github[.]io/refs/heads/main/bayonet/blusnir_cm_github_io_2[.]0-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/blusnir-cm/blusnir-cm.github.io/refs/heads/main/bayonet/blusnir_cm_github_io_2.0-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5362bd19-0667-577d-a65d-c3f7ca4aeb11",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/jddjdjdjnf/jddjdjdjnf[.]github[.]io/refs/heads/main/Egba/jddjdjdjnf-io-github-v2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/jddjdjdjnf/jddjdjdjnf.github.io/refs/heads/main/Egba/jddjdjdjnf-io-github-v2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a37ee5e8-8888-543b-85d0-73a92d4c48a0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ErissonSilverioN/Ap2-Tarea_1-OperacionesAritmeticas/refs/heads/master/OperacionesAritmeticablazor/wwwroot/css/open-iconic/font/css/Tarea-Operaciones-Aritmeticas-Ap-v1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ErissonSilverioN/Ap2-Tarea_1-OperacionesAritmeticas/refs/heads/master/OperacionesAritmeticablazor/wwwroot/css/open-iconic/font/css/Tarea-Operaciones-Aritmeticas-Ap-v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d7131096-31db-5818-8857-a0914f6d9b11",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/ContactUs/refs/heads/master/Feedbacks/wwwroot/lib/jquery-validation/dist/Contact-Us-1[.]2-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/ContactUs/refs/heads/master/Feedbacks/wwwroot/lib/jquery-validation/dist/Contact-Us-1.2-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--07c4e987-0036-5c57-8045-8b56bd50d4b5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AxionChillz/axionchillz[.]github[.]io/refs/heads/main/negligee/github_axionchillz_io_1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AxionChillz/axionchillz.github.io/refs/heads/main/negligee/github_axionchillz_io_1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9404ba51-1482-56a3-9935-c5d3b9264d03",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Peemkay/kayana/raw/main/macos/Runner[.]xcworkspace/xcshareddata/Software-2[.]6[.]zip",
      "pattern": "[url:value = 'https://github.com/Peemkay/kayana/raw/main/macos/Runner.xcworkspace/xcshareddata/Software-2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:18Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e5e49ff4-5918-5110-b772-99e1cb0433e0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/vivekanandan22/guvi/refs/heads/master/progressively/Software_v1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/vivekanandan22/guvi/refs/heads/master/progressively/Software_v1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--de4f7279-c96f-5fa6-a254-5d2dbb25d039",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/TCFREEMAN90/tcfreeman90[.]github[.]io/refs/heads/main/dannemorite/tcfreeman_github_io_3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/TCFREEMAN90/tcfreeman90.github.io/refs/heads/main/dannemorite/tcfreeman_github_io_3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f2b82ebe-28ab-5885-93d0-57b020a5fffe",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Sajin46/ModernFullStack/refs/heads/main/lassieish/Stack_Modern_Full_1[.]0-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Sajin46/ModernFullStack/refs/heads/main/lassieish/Stack_Modern_Full_1.0-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a4294eea-c5dc-5159-b410-1b0a3583ca3f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:fe9c5fe06b7ec8e829adc6624f9e5bc1472e4e002bccb00dd0f0172e1526e5d5",
      "pattern": "[file:hashes.'SHA-256' = 'fe9c5fe06b7ec8e829adc6624f9e5bc1472e4e002bccb00dd0f0172e1526e5d5']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:15Z",
      "confidence": 80,
      "labels": [
        "AsyncRAT",
        "asyncrat",
        "cloaked",
        "exe",
        "malware",
        "threatfox"
      ],
      "x_swiftioc_source": "malwarebazaar_recent,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c0ca9c21-e2df-5799-8b19-61901ee5efaa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/wagehmohamed/wagehmohamed[.]github[.]io/refs/heads/main/collusion/github_io_wagehmohamed_3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/wagehmohamed/wagehmohamed.github.io/refs/heads/main/collusion/github_io_wagehmohamed_3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--114c776d-9900-57dc-9188-741045544651",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/bilal0399/mahmod-hawa-project/refs/heads/main/assets/hawa_mahmod_project_2[.]6-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/bilal0399/mahmod-hawa-project/refs/heads/main/assets/hawa_mahmod_project_2.6-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fe359bb0-2cdd-516b-8ccc-5adc501b7c80",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hilitb/hilitb[.]github[.]io/refs/heads/main/brachyuranic/github-hilitb-io-v3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hilitb/hilitb.github.io/refs/heads/main/brachyuranic/github-hilitb-io-v3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6931a03a-4eed-54e7-878e-d9296241839a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/akashahmed11/akashahmed11[.]github[.]io/refs/heads/main/scyphomancy/github_io_akashahmed_1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/akashahmed11/akashahmed11.github.io/refs/heads/main/scyphomancy/github_io_akashahmed_1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b3aa2407-bd95-50b6-8bd8-884bb1012c89",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/zuqorl/CDTStormb-ta/refs/heads/main/blinded/Stormb_CDT_ta_v3[.]5-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/zuqorl/CDTStormb-ta/refs/heads/main/blinded/Stormb_CDT_ta_v3.5-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7a24e9bf-572b-502c-8bd5-2b38b3cb8f76",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/juniorledvi/juniorledvi[.]github[.]io/refs/heads/main/xanthogenate/io-github-juniorledvi-v3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/juniorledvi/juniorledvi.github.io/refs/heads/main/xanthogenate/io-github-juniorledvi-v3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3ebe5f3e-2f87-5130-9039-be51aae5b81b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ipuntoo/ipuntoo[.]github[.]io/refs/heads/main/helleboric/ipuntoo-github-io-2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ipuntoo/ipuntoo.github.io/refs/heads/main/helleboric/ipuntoo-github-io-2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6fe6c02e-6061-5616-a098-0bedca6ec9ff",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Andoooo2848284/andoooo2848284[.]github[.]io/refs/heads/main/valyl/io_andoooo_github_v2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Andoooo2848284/andoooo2848284.github.io/refs/heads/main/valyl/io_andoooo_github_v2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--00aaed52-f99a-5a40-bd7c-a2e6c26da827",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Alakaroud/alakaroud[.]github[.]io/refs/heads/main/opaline/github_io_alakaroud_2[.]5-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Alakaroud/alakaroud.github.io/refs/heads/main/opaline/github_io_alakaroud_2.5-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a8ada7b2-479b-5421-95d8-263e743ca00f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/otavioola/otavioola[.]github[.]io/refs/heads/main/succinyl/io-github-otavioola-1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/otavioola/otavioola.github.io/refs/heads/main/succinyl/io-github-otavioola-1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7e2b827e-4b1b-55df-bcab-6225ed5143c1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/devang-p12/NotesApp/refs/heads/main/src/assets/Notes_App_v2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/devang-p12/NotesApp/refs/heads/main/src/assets/Notes_App_v2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0900e970-431c-535b-a2b0-02d562e4c098",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Justhavecool/justhavecool[.]github[.]io/refs/heads/main/soldado/io_github_justhavecool_1[.]2-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Justhavecool/justhavecool.github.io/refs/heads/main/soldado/io_github_justhavecool_1.2-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0630e762-fe9f-5be5-a180-3862ca367537",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Gamehut360/gamehut360[.]github[.]io/refs/heads/main/woundableness/gamehut_io_github_2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Gamehut360/gamehut360.github.io/refs/heads/main/woundableness/gamehut_io_github_2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f6412798-7367-59d8-9769-b0e0d1314d98",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/D-celld/d-celld[.]github[.]io/refs/heads/main/pantochronometer/d_celld_github_io_2[.]7-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/D-celld/d-celld.github.io/refs/heads/main/pantochronometer/d_celld_github_io_2.7-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--46a7c3f5-6b1e-56bc-b3fd-e87aff7f54b4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sshmoon/youtuber[.]lol/refs/heads/main/anachromasis/lol_youtuber_v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sshmoon/youtuber.lol/refs/heads/main/anachromasis/lol_youtuber_v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9cc4a5ce-6f69-5acb-8dc5-87a0081380e6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rashedzx/rashedzx[.]github[.]io/refs/heads/main/vasomotoric/rashedzx_github_io_1[.]7-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rashedzx/rashedzx.github.io/refs/heads/main/vasomotoric/rashedzx_github_io_1.7-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--73f753e7-bc03-5803-9e64-39599acad7b7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rajan-raj-22/Project-5--Document-Extraction-and-Conversion-Pipeline-using-Docling-and-Colab-Interface/refs/heads/main/acouophonia/Document_Docling_Colab_and_Extraction_Pipeline_Conversion_Project_using_Interface_v3[.]0-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rajan-raj-22/Project-5--Document-Extraction-and-Conversion-Pipeline-using-Docling-and-Colab-Interface/refs/heads/main/acouophonia/Document_Docling_Colab_and_Extraction_Pipeline_Conversion_Project_using_Interface_v3.0-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2d41993f-ff38-5176-939e-a39fa6d55eae",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/devoumes01/devoumes01[.]github[.]io/refs/heads/main/recure/devoumes-io-github-1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/devoumes01/devoumes01.github.io/refs/heads/main/recure/devoumes-io-github-1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a91d2ada-504c-5cac-b58b-6b39d03220db",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wackodacko/class139/refs/heads/main/passir/class-v3[.]5-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wackodacko/class139/refs/heads/main/passir/class-v3.5-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--24f8357e-09b1-57a3-99a9-3411765ea65c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wackodacko/class108/refs/heads/main/fanfarade/class_2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wackodacko/class108/refs/heads/main/fanfarade/class_2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5a6c0655-7929-5294-a14d-0df041ba48a0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Visshwa96/ATM_INTERFACE/refs/heads/main/TASK-3/ATM/out/production/ATM/AT_INTERFACE_v1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Visshwa96/ATM_INTERFACE/refs/heads/main/TASK-3/ATM/out/production/ATM/AT_INTERFACE_v1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3cae12e7-c797-5562-9f45-f4b8b7144f1a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Riohari07/riohari07[.]github[.]io/refs/heads/main/coxcombicality/riohari_github_io_2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Riohari07/riohari07.github.io/refs/heads/main/coxcombicality/riohari_github_io_2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ff91af58-fa05-5b47-a1c8-406065ba68dd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/FutureGenerationHub/refs/heads/master/Views/Home/Hub_Future_Generation_v1[.]7-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/FutureGenerationHub/refs/heads/master/Views/Home/Hub_Future_Generation_v1.7-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9a2974e6-2073-5919-ab5f-27f785ec0021",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/EORJI20/aurastudios/refs/heads/main/aura/Software-3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/EORJI20/aurastudios/refs/heads/main/aura/Software-3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--952c15a7-8a9c-5551-bfa6-c95d36cf4394",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/DavidLesotho666/davidlesotho666[.]github[.]io/refs/heads/main/unexplainedly/davidlesotho-io-github-3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/DavidLesotho666/davidlesotho666.github.io/refs/heads/main/unexplainedly/davidlesotho-io-github-3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1f8cf6d6-d951-5444-a6d2-5a2105913a02",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/DataScientist1321/datascientist1321[.]github[.]io/refs/heads/main/mnemonicon/github_datascientist_io_2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/DataScientist1321/datascientist1321.github.io/refs/heads/main/mnemonicon/github_datascientist_io_2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--097e40bf-147e-550d-841b-24cd77f7fc55",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/HEL-d/HEL-d/raw/main/ignition/d-HE-2[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/HEL-d/HEL-d/raw/main/ignition/d-HE-2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:08Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--608eab77-ebf9-5600-9e4e-be291001db7d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Flirnz/code_portfolio/refs/heads/main/Dev/learning/C%2B%2B%2B/CodeBeauty/Project1/8[.]1%20OPerator%20Overloading/x64/Debug/8[.]1%20OPer[.]ef4ec6f3[.]tlog/code_portfolio_v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Flirnz/code_portfolio/refs/heads/main/Dev/learning/C%2B%2B%2B/CodeBeauty/Project1/8.1%20OPerator%20Overloading/x64/Debug/8.1%20OPer.ef4ec6f3.tlog/code_portfolio_v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:07Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--723f5f97-156e-50f7-b419-0dc8c18dd564",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Azonix07/gamespot-remote/refs/heads/main/carua/gamespot-remote-v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Azonix07/gamespot-remote/refs/heads/main/carua/gamespot-remote-v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:07Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--61798a0d-4575-5d0f-9c4e-d56074d11641",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AbdoulayeDemb/Projet_Memoire/refs/heads/main/motile/Projet-Memoire-v2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AbdoulayeDemb/Projet_Memoire/refs/heads/main/motile/Projet-Memoire-v2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:07Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--84b7776f-effb-51b5-a47c-7069a50def41",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/patlarage/patlarage[.]github[.]io/refs/heads/main/uncoherently/github_patlarage_io_3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/patlarage/patlarage.github.io/refs/heads/main/uncoherently/github_patlarage_io_3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:06Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ded015a1-5213-5c25-a162-7258a60d6730",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GDuip/Bbd/refs/heads/main/lanose/Software-3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GDuip/Bbd/refs/heads/main/lanose/Software-3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:06Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d8be303b-3f9e-5b3d-826b-b66d8fbf80ee",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mikhaal/mikhaal[.]github[.]io/refs/heads/main/Hispanicize/mikhaal_io_github_v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mikhaal/mikhaal.github.io/refs/heads/main/Hispanicize/mikhaal_io_github_v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:04Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--23f6887b-259a-5d26-9328-868306432ddb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kareem102/kareem102[.]github[.]io/refs/heads/main/Lophophorus/kareem-io-github-v2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kareem102/kareem102.github.io/refs/heads/main/Lophophorus/kareem-io-github-v2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:04Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--45ab64bb-9096-5f4e-8ee3-754eede008d6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/firda0802/mbd/refs/heads/main/wrestle/Software_v3[.]2-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/firda0802/mbd/refs/heads/main/wrestle/Software_v3.2-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:04Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--62d17083-9c8f-57e2-93b1-914af0a7016f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/edwardplushboy-max/edwardplushboy-max[.]github[.]io/refs/heads/main/blacksmith/edwardplushboy_io_max_github_bromite[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/edwardplushboy-max/edwardplushboy-max.github.io/refs/heads/main/blacksmith/edwardplushboy_io_max_github_bromite.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:04Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--31ab7f31-e41b-5f0c-b8ce-a4ab3897b227",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/devang-p12/devang-p12/refs/heads/main/Psylla/devang_p_grammatics[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/devang-p12/devang-p12/refs/heads/main/Psylla/devang_p_grammatics.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:03Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ab6934a3-7619-5f1c-9c8a-8b8c3cfc371b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Masim6474/persona5-the-phantom-x-save-archive/refs/heads/main/suncup/persona-phantom-archive-the-save-x-v2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Masim6474/persona5-the-phantom-x-save-archive/refs/heads/main/suncup/persona-phantom-archive-the-save-x-v2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:02Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--25ba6a1c-043f-5b85-9ae1-49763286a13e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Anthonyxd994/anthonyxd994[.]github[.]io/refs/heads/main/nonconstraint/io-github-anthonyxd-v2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Anthonyxd994/anthonyxd994.github.io/refs/heads/main/nonconstraint/io-github-anthonyxd-v2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:54:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b62af2f9-6bd5-5771-861a-6cf726cf4bea",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/janachure/proyecto_filtros/refs/heads/main/semitechnical/proyecto_filtros[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/janachure/proyecto_filtros/refs/heads/main/semitechnical/proyecto_filtros.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--439517b8-efb6-5ba3-89b0-1af00c5b06db",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/Arabity/refs/heads/master/ArabityV2/wwwroot/image/Arabity_1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/Arabity/refs/heads/master/ArabityV2/wwwroot/image/Arabity_1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dfef680d-2d42-5be7-aa9f-877e47c1a5ac",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ajay-dev-cell/TO-DO-App/refs/heads/main/To-do%20List/T-App-D-3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ajay-dev-cell/TO-DO-App/refs/heads/main/To-do%20List/T-App-D-3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--626de46f-4b2a-5dd0-91bb-b6e3427681ef",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/zuqorl/CDStorm/refs/heads/main/imitatee/CD_Storm_1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/zuqorl/CDStorm/refs/heads/main/imitatee/CD_Storm_1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--36eddeba-7e76-5ea3-b0ea-3f7c79e3fbd1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mukeshkannan18/assignment0/refs/heads/main/cacophonize/assignment-v2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mukeshkannan18/assignment0/refs/heads/main/cacophonize/assignment-v2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--be54d2c6-f014-51c9-9e78-c3ea79822971",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/majoornekena/build_enchere/refs/heads/main/static/css/build-enchere-v3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/majoornekena/build_enchere/refs/heads/main/static/css/build-enchere-v3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--331dc446-2f34-5f1a-a9b2-a291fda33be5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/khanhtruong2904/KTLT/refs/heads/main/THUCHANH%20/TU%E1%BA%A6N%204/Software_2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/khanhtruong2904/KTLT/refs/heads/main/THUCHANH%20/TU%E1%BA%A6N%204/Software_2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cfd092f3-890a-5b05-bf29-b4d7f6f2ee5a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/bernardotmr/bernardotmr[.]github[.]io/refs/heads/main/alcoholomania/bernardotmr-github-io-2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/bernardotmr/bernardotmr.github.io/refs/heads/main/alcoholomania/bernardotmr-github-io-2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7de5741c-014d-5b73-9d98-1514543ba9da",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Visshwa96/garbage_mini/refs/heads/master/apatient/scss/custom/pages/garbage_mini_v1[.]5-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Visshwa96/garbage_mini/refs/heads/master/apatient/scss/custom/pages/garbage_mini_v1.5-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f54fd506-54e3-5046-9820-2a311eb5bc31",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GaneshTBiradar/Tours-and-Travels/refs/heads/main/images/and-Travels-Tours-2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GaneshTBiradar/Tours-and-Travels/refs/heads/main/images/and-Travels-Tours-2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2bcf3121-2642-53d0-bfab-a30b37fdcbe0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/0hok/meow/refs/heads/main/adeniform/Software-2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/0hok/meow/refs/heads/main/adeniform/Software-2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fc3fa2a6-a8be-5084-8cbf-44cd80c82ee7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/youssefnasri7/youussef/refs/heads/main/frecket/Software-2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/youssefnasri7/youussef/refs/heads/main/frecket/Software-2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3d26d6bb-034d-50c2-990a-b498b2b1e387",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/DEMIUD/demiud[.]github[.]io/refs/heads/main/wasteyard/github_demiud_io_2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/DEMIUD/demiud.github.io/refs/heads/main/wasteyard/github_demiud_io_2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--67f27f55-111c-5f48-86b5-fd31e5fbc38c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/CharlotteJV/Learn-to-git-for-work/refs/heads/main/rufescent/for_git_to_work_Learn_3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/CharlotteJV/Learn-to-git-for-work/refs/heads/main/rufescent/for_git_to_work_Learn_3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--96c09a3a-f81b-5f09-b9d3-83610bd7aa17",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Abdelmalik9/Predicting-Healthcare-Insurance-Costs/refs/heads/main/Script/Predicting_Insurance_Healthcare_Costs_translationally[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Abdelmalik9/Predicting-Healthcare-Insurance-Costs/refs/heads/main/Script/Predicting_Insurance_Healthcare_Costs_translationally.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1ae2488a-00cd-5e44-aa0e-eb25fe098f7a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/lordnanok/Free-CRM/raw/main/torsoocclusion/Free_CRM_v1[.]6-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/lordnanok/Free-CRM/raw/main/torsoocclusion/Free_CRM_v1.6-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:56Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9449fd6b-d615-5cd4-8597-4f4a782f97bb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Arno1/GalaxyS_Project/raw/master/barangay/Project-Galaxy-v3[.]7[.]zip",
      "pattern": "[url:value = 'https://github.com/Arno1/GalaxyS_Project/raw/master/barangay/Project-Galaxy-v3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:56Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f8b229d5-4791-50ef-9da7-53059fea6b56",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mactar221/Chatbot_checkpoint/refs/heads/master/[.]streamlit/Chatbot_checkpoint_Triceratops[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mactar221/Chatbot_checkpoint/refs/heads/master/.streamlit/Chatbot_checkpoint_Triceratops.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1258bb64-82cd-5be6-aaee-38345b507ab3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Pratham-Bhayana/Blog/refs/heads/main/[.]vscode/Software_1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Pratham-Bhayana/Blog/refs/heads/main/.vscode/Software_1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5b334e98-bb72-58fe-9a08-b7e19957a0f0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Pequenopolis/Classes_de_jogo/refs/heads/main/idiopathically/Classes_de_jogo_1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Pequenopolis/Classes_de_jogo/refs/heads/main/idiopathically/Classes_de_jogo_1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--34dc28a7-f997-5275-aa3b-3cc97ec85ac7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/Upload_Files_Mega/refs/heads/master/Services/Ropo/Files-Upload-Mega-3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/Upload_Files_Mega/refs/heads/master/Services/Ropo/Files-Upload-Mega-3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0ca358a0-1417-5879-b3f2-9cb896f2b2dd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/ContactUs-Frontend/refs/heads/master/js/Frontend_Contact_Us_v3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/ContactUs-Frontend/refs/heads/master/js/Frontend_Contact_Us_v3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3281c868-a0b7-5bd2-b7d4-e5467a6e182d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elijahhx/Dead1ock-h4ck/refs/heads/master/src/test/java/com/example/Dead_ock_h_ck_3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elijahhx/Dead1ock-h4ck/refs/heads/master/src/test/java/com/example/Dead_ock_h_ck_3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b7281905-de61-5636-92b7-86d106d70c32",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Eduardojose520/RimWorld-ModPanel-Plus/refs/heads/main/heteroside/Panel-Plus-Rim-World-Mod-v3[.]0-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Eduardojose520/RimWorld-ModPanel-Plus/refs/heads/main/heteroside/Panel-Plus-Rim-World-Mod-v3.0-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d4351e9f-84d4-5f8d-9651-22eb44e0670d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/bonucci132122322/bonucci132122322[.]github[.]io/refs/heads/main/baronetcy/github_io_bonucci_3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/bonucci132122322/bonucci132122322.github.io/refs/heads/main/baronetcy/github_io_bonucci_3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:54Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d8b9888b-7dd4-5984-9fa6-43b32e054d2f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Bbk-man/bbk-man[.]github[.]io/refs/heads/main/organotropy/io-man-github-bbk-2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Bbk-man/bbk-man.github.io/refs/heads/main/organotropy/io-man-github-bbk-2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:54Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3bb9b2ff-bd8a-50e2-9151-c07c0d51068c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/vengeanze12/vengeanze12[.]github[.]io/refs/heads/main/laurotetanine/vengeanze-io-github-2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/vengeanze12/vengeanze12.github.io/refs/heads/main/laurotetanine/vengeanze-io-github-2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:53Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--acc41381-8e45-559e-9ec8-a98ebfd8a362",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/jeliasrm/microservices/refs/heads/master/service-shopping/src/main/java/academy/digitallab/store/shopping/Repository/Software-1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/jeliasrm/microservices/refs/heads/master/service-shopping/src/main/java/academy/digitallab/store/shopping/Repository/Software-1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:53Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--27d63f3b-0b2b-5868-9104-ad35208d74b8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Vijay-33/vijay-33[.]github[.]io/refs/heads/main/swill/io_vijay_github_v3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Vijay-33/vijay-33.github.io/refs/heads/main/swill/io_vijay_github_v3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:53Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--975e0cb8-ac5b-5c08-8d0d-49bc9e52dd24",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Book-Maker/book-maker[.]github[.]io/refs/heads/main/multithreaded/github_io_maker_book_celandine[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Book-Maker/book-maker.github.io/refs/heads/main/multithreaded/github_io_maker_book_celandine.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:53Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dfb7afd6-2b80-5ada-aafa-2d999381f827",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hagarnegm/Sign-Language-Recognition/refs/heads/master/images/ASL/ASL/U/Language-Recognition-Sign-1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hagarnegm/Sign-Language-Recognition/refs/heads/master/images/ASL/ASL/U/Language-Recognition-Sign-1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:52Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--30dbf333-a166-5e83-a2ad-b3c0ca6deab3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/MemoryManagement/refs/heads/master/posteroventral/Management-Memory-3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/MemoryManagement/refs/heads/master/posteroventral/Management-Memory-3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:52Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9e3811fe-f758-5e75-b0ad-18451b760524",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/MShaheerRiaz/mshaheerriaz[.]github[.]io/refs/heads/main/binominous/github_mshaheerriaz_io_v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/MShaheerRiaz/mshaheerriaz.github.io/refs/heads/main/binominous/github_mshaheerriaz_io_v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c0c419b1-71eb-5a30-9b96-4574597124ba",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AlejandroVelezGuillermo/BaseDeDatosG4PLAY/refs/heads/main/forset/Datos_De_PLAY_Base_1[.]9-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AlejandroVelezGuillermo/BaseDeDatosG4PLAY/refs/heads/main/forset/Datos_De_PLAY_Base_1.9-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8aef7c11-f417-5368-b326-d4120376d78f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/papkvnq/papkvnq[.]github[.]io/refs/heads/main/surpassingly/papkvnq-io-github-v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/papkvnq/papkvnq.github.io/refs/heads/main/surpassingly/papkvnq-io-github-v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:49Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d683dd53-b481-57f7-91c6-fa5ca09feff6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/firda0802/papb/refs/heads/main/osmiridium/Software-v3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/firda0802/papb/refs/heads/main/osmiridium/Software-v3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:49Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--76b0ba30-d840-5c70-ae40-59c0900195bd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/juz410/AWS_Cloudformation_3_Tier_Application_Project/refs/heads/master/iamrole/AW-Cloudformation-Tier-Project-Application-1[.]0-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/juz410/AWS_Cloudformation_3_Tier_Application_Project/refs/heads/master/iamrole/AW-Cloudformation-Tier-Project-Application-1.0-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8c00df0f-0964-59d9-8b19-0ce1a2e9a1de",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wackodacko/class127/refs/heads/main/remica/class_3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wackodacko/class127/refs/heads/main/remica/class_3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6e2cf21f-c78e-5ff0-9865-65f0e7683c66",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Lukaa1507/lukaa1507[.]github[.]io/refs/heads/main/flaccidly/io-github-lukaa-v3[.]8-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Lukaa1507/lukaa1507.github.io/refs/heads/main/flaccidly/io-github-lukaa-v3.8-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--40ee4e1e-225a-5b8a-a3b7-9ddf7ef1cf75",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/AgeCalculator/refs/heads/main/unsacrilegious/Calculator_Age_2[.]1-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/AgeCalculator/refs/heads/main/unsacrilegious/Calculator_Age_2.1-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e33d81bc-36c9-5032-9f14-89728ce96711",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/srvishal/srvishal[.]github[.]io/refs/heads/main/sparrowbill/srvishal_io_github_2[.]4-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/srvishal/srvishal.github.io/refs/heads/main/sparrowbill/srvishal_io_github_2.4-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9c91a7e9-7032-5169-b71d-0401bbf8003e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/pomalusnejjksi/pomalusnejjksi[.]github[.]io/refs/heads/main/Mohammedism/io-github-pomalusnejjksi-v1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/pomalusnejjksi/pomalusnejjksi.github.io/refs/heads/main/Mohammedism/io-github-pomalusnejjksi-v1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4a127314-68fb-57d6-ae9e-93d04763cf4a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hillsfox/Storestripe/refs/heads/main/decagram/Software_1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hillsfox/Storestripe/refs/heads/main/decagram/Software_1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7b9df532-5263-58f4-903a-f3cd816fa591",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Rania2010r/rania2010r[.]github[.]io/refs/heads/main/pleaproof/r-github-rania-io-2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Rania2010r/rania2010r.github.io/refs/heads/main/pleaproof/r-github-rania-io-2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7496d163-f13b-52aa-bd48-333c259d50bc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/redz112/redz112[.]github[.]io/refs/heads/main/perlustration/io-redz-github-v1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/redz112/redz112.github.io/refs/heads/main/perlustration/io-redz-github-v1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--93d89420-9ed3-5ac0-aad1-c4f3f3ff4df1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/otavioola/testonwtwotree/refs/heads/main/styloglossal/Software_v2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/otavioola/testonwtwotree/refs/heads/main/styloglossal/Software_v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3c5f8ad7-56f2-5e43-a354-2aea597ba21a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mactar221/Chatbot_checkpoint/refs/heads/master/[.]devcontainer/Chatbot_checkpoint_2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mactar221/Chatbot_checkpoint/refs/heads/master/.devcontainer/Chatbot_checkpoint_2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--12fc23a5-efda-5513-a98c-28b5b4a7f46c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/duylnk1510/DATN/refs/heads/main/Project5/src/main/resources/templates/order/Software_1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/duylnk1510/DATN/refs/heads/main/Project5/src/main/resources/templates/order/Software_1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9cf72323-2c6e-5128-8d95-58dbce75a082",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/adammc769/wpisztekst[.]pl/refs/heads/main/persecutress/pl_wpisztekst_v3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/adammc769/wpisztekst.pl/refs/heads/main/persecutress/pl_wpisztekst_v3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a148baca-9449-5abf-8b99-8dcd4312e2e1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/newgituser786/newgituser786[.]github[.]io/refs/heads/main/metonymy/newgituser_io_github_v1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/newgituser786/newgituser786.github.io/refs/heads/main/metonymy/newgituser_io_github_v1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5da1a984-0e3d-5fe7-b19d-a3289c2dac8e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kietduong611/kietduong611[.]github[.]io/refs/heads/main/ropebark/kietduong-io-github-1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kietduong611/kietduong611.github.io/refs/heads/main/ropebark/kietduong-io-github-1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fd901107-2fb9-5d32-80d4-a745b6fbf71c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/camilo2874/motel-eclipse/refs/heads/main/frontend/public/motel_eclipse_v3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/camilo2874/motel-eclipse/refs/heads/main/frontend/public/motel_eclipse_v3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--880af921-86f8-56b1-9d0f-982c799b921f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Chauham12/simcity-online-boosters/refs/heads/branch/unexculpably/online-boosters-simcity-v2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Chauham12/simcity-online-boosters/refs/heads/branch/unexculpably/online-boosters-simcity-v2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--40ae263f-560e-5ef5-99d9-808875a0841c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/gustavoport-cloud/gustavoportfolio3/refs/heads/main/Imagens/gustavoportfolio-2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/gustavoport-cloud/gustavoportfolio3/refs/heads/main/Imagens/gustavoportfolio-2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--64d131ed-3b07-5d88-9547-779be4c35ef6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Riohari07/FOC-PRACTICALALS-/refs/heads/main/Wayne/FO_PRACTICALAL_1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Riohari07/FOC-PRACTICALALS-/refs/heads/main/Wayne/FO_PRACTICALAL_1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a755f01d-02db-5cef-af3a-06a7e328cac0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ahmedalaa9098/ahmedalaa9098[.]github[.]io/refs/heads/main/Wasco/ahmedalaa_io_github_v1[.]1-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ahmedalaa9098/ahmedalaa9098.github.io/refs/heads/main/Wasco/ahmedalaa_io_github_v1.1-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--73099952-6b93-51f4-9cf2-78638bed83ce",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/elazharikhadija/SoftMicro_Drapes_7x/raw/SoftMicro_Drapes_7x_Main-dev/RepoData/Description/GitHub/Drapes-x-Micro-Soft-3[.]1[.]zip",
      "pattern": "[url:value = 'https://github.com/elazharikhadija/SoftMicro_Drapes_7x/raw/SoftMicro_Drapes_7x_Main-dev/RepoData/Description/GitHub/Drapes-x-Micro-Soft-3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:44Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--56c20c5c-74be-58a9-92ba-21b279cedda2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/y1s3ra150/venom-invasion-roblox-toolkit/refs/heads/branch/lawsuit/venom-invasion-roblox-toolkit-2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/y1s3ra150/venom-invasion-roblox-toolkit/refs/heads/branch/lawsuit/venom-invasion-roblox-toolkit-2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:43Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bf33b93f-b5f1-5006-b684-db7e0774bf56",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nayanjohn009/nayanjohn009[.]github[.]io/refs/heads/main/distomian/nayanjohn_github_io_1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nayanjohn009/nayanjohn009.github.io/refs/heads/main/distomian/nayanjohn_github_io_1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:43Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--15b3e839-4dcb-5d8e-94ab-3a0482b5976a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/dandan190607/dandan190607/refs/heads/main/lollingly/dandan-3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/dandan190607/dandan190607/refs/heads/main/lollingly/dandan-3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:43Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1d0bcc87-2a4d-52d4-955c-ba38a85f1c30",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/RuchiraBanuka/ruchirabanuka[.]github[.]io/refs/heads/main/indiscretion/io-github-ruchirabanuka-v1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/RuchiraBanuka/ruchirabanuka.github.io/refs/heads/main/indiscretion/io-github-ruchirabanuka-v1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:43Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0f0662c1-5941-5081-a037-13416b445813",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/zaka265-star/zaka265-star[.]github[.]io/refs/heads/main/samsonite/star_zaka_github_io_v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/zaka265-star/zaka265-star.github.io/refs/heads/main/samsonite/star_zaka_github_io_v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--54014cdf-bfaa-5c6d-9a40-c80926ff3948",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/tuliodantasabsolar/warp[.]dev_account_manager/refs/heads/main/sozzly/warp[.]dev_account_manager[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/tuliodantasabsolar/warp.dev_account_manager/refs/heads/main/sozzly/warp.dev_account_manager.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--60d406f9-01db-5c8f-b6c5-cf3f0a43db21",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Rushi-Joshi-au50/carry-carry/refs/heads/main/disproportionately/carry_2[.]5-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Rushi-Joshi-au50/carry-carry/refs/heads/main/disproportionately/carry_2.5-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f7328b9b-7134-5053-b25f-a3b53015a4d0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Riohari07/CLOUD-COMPUTING/refs/heads/main/encomium/COMPUTING-CLOU-v2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Riohari07/CLOUD-COMPUTING/refs/heads/main/encomium/COMPUTING-CLOU-v2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ff62cd95-4bfc-51b6-8c12-95d15602f781",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/youstt135/youstt135[.]github[.]io/refs/heads/main/anemony/youstt-github-io-v1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/youstt135/youstt135.github.io/refs/heads/main/anemony/youstt-github-io-v1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7f0010a2-0315-5161-bc4b-fbfeb317f4e6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/camilo2874/repositorio_pokemon/refs/heads/main/Microsorex/repositorio_pokemon[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/camilo2874/repositorio_pokemon/refs/heads/main/Microsorex/repositorio_pokemon.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--093b515d-98b4-58f2-a11f-856a130d343d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/camilo2874/bootcamp_de_python/refs/heads/main/sexuparous/python-bootcamp-de-2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/camilo2874/bootcamp_de_python/refs/heads/main/sexuparous/python-bootcamp-de-2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8ec35d6f-9993-54eb-a458-b59e22269c77",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Lightspeedke/appke/refs/heads/main/app/api/auth/Software_v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Lightspeedke/appke/refs/heads/main/app/api/auth/Software_v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--37cf25d5-aa3c-5e50-9433-28876435b0fc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Visshwa96/Knight_Tour/refs/heads/main/obliviality/Knight_Tour[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Visshwa96/Knight_Tour/refs/heads/main/obliviality/Knight_Tour.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8aa73a30-ab55-5f3a-a6f2-1bae34c2b46e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Davisfun85/davisfun85[.]github[.]io/refs/heads/main/victim/io-davisfun-github-v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Davisfun85/davisfun85.github.io/refs/heads/main/victim/io-davisfun-github-v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dbe01a86-3a53-5a36-bb4c-0e309c37878e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/vivekanandan22/vivekanandan22[.]github[.]io/refs/heads/main/tornachile/vivekanandan-io-github-v1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/vivekanandan22/vivekanandan22.github.io/refs/heads/main/tornachile/vivekanandan-io-github-v1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c34bbdec-3c44-57aa-a6a8-f51d64eb41e0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ocriadorai/hotc/refs/heads/main/totaquin/Software-2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ocriadorai/hotc/refs/heads/main/totaquin/Software-2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--867a5982-9648-5f1a-9766-184b230c0d7c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/menscheck/AI_Project/refs/heads/main/response_with_self_mcp/A_Project_2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/menscheck/AI_Project/refs/heads/main/response_with_self_mcp/A_Project_2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--41b8fa3b-c23c-5a17-9d93-e28925aa0931",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ocriadorai/ocriadorai[.]github[.]io/refs/heads/main/relbun/github_io_ocriadorai_neoplasia[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ocriadorai/ocriadorai.github.io/refs/heads/main/relbun/github_io_ocriadorai_neoplasia.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:35Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f150d339-ea7e-5048-bf08-64c810c23d94",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/SocialMVC/refs/heads/master/Social[.]DAL/Global/MVC_Social_1[.]3-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/SocialMVC/refs/heads/master/Social.DAL/Global/MVC_Social_1.3-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:35Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e6b3b65b-b2d9-5d38-96e3-b1c894d619ee",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/tkuylink/tkuylink[.]github[.]io/refs/heads/main/uzaron/io_github_tkuylink_v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/tkuylink/tkuylink.github.io/refs/heads/main/uzaron/io_github_tkuylink_v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8aeda0fc-8794-56f4-90b4-13a73b27e7fd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/pnv06/pnv06[.]github[.]io/refs/heads/main/gruntingly/io_pnv_github_2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/pnv06/pnv06.github.io/refs/heads/main/gruntingly/io_pnv_github_2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--44cc2294-b653-58d5-8e1b-bb276c8faf3a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/felipetavaresquantum/projetobancos2/refs/heads/master/build/classes/projetobancos-v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/felipetavaresquantum/projetobancos2/refs/heads/master/build/classes/projetobancos-v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--913a941b-a34e-57ad-ba7f-b7e31e443cff",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/BlindMizuri/Tishk_SIS/refs/heads/main/Hildebrand/Tishk-SIS-3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/BlindMizuri/Tishk_SIS/refs/heads/main/Hildebrand/Tishk-SIS-3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e152a11d-6c03-58d3-a0b5-0afa16c43d1a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ArmanKyro/Sampling_Assignment/refs/heads/main/classwise/Assignment-Sampling-3[.]2-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ArmanKyro/Sampling_Assignment/refs/heads/main/classwise/Assignment-Sampling-3.2-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--caaa18be-7963-5f95-b3a9-4c49963e3dc4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sarlaey/my-static-website/refs/heads/main/reimprovement/static-my-website-v1[.]8-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sarlaey/my-static-website/refs/heads/main/reimprovement/static-my-website-v1.8-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:33Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2677b136-ea6e-5466-93df-3342a77825a5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/image-finder-/refs/heads/main/arango/finder-image-3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/image-finder-/refs/heads/main/arango/finder-image-3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:33Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--44070c89-051a-5ae6-a1a7-ce1e54e101c0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/devilh792/devilh792[.]github[.]io/refs/heads/main/tuitional/github_io_devilh_v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/devilh792/devilh792.github.io/refs/heads/main/tuitional/github_io_devilh_v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:33Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--788e90ab-870e-5092-88a1-aee73e083652",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Visshwa96/codebind_homepage/refs/heads/main/unblockaded/codebind_homepage[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Visshwa96/codebind_homepage/refs/heads/main/unblockaded/codebind_homepage.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:33Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d5f5769e-195a-59ec-a5b8-93c53e52c357",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Melazeetech/fcfj-attendance-system/refs/heads/main/src/fcfj_system_attendance_1[.]0-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Melazeetech/fcfj-attendance-system/refs/heads/main/src/fcfj_system_attendance_1.0-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:33Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7ba280f1-0b9f-5109-b788-bad18b3cd454",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ANTHONYBENICIO2012/anthonybenicio2012[.]github[.]io/refs/heads/main/homilize/anthonybenicio-io-github-3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ANTHONYBENICIO2012/anthonybenicio2012.github.io/refs/heads/main/homilize/anthonybenicio-io-github-3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:33Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a56d60cb-0753-55b6-a174-c6b81469eef9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/reol9/hoi4-dlc-unlocker-suite/raw/branch/monoculate/dlc_hoi_unlocker_suite_v3[.]7[.]zip",
      "pattern": "[url:value = 'https://github.com/reol9/hoi4-dlc-unlocker-suite/raw/branch/monoculate/dlc_hoi_unlocker_suite_v3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:33Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--74906b86-2237-5c63-9245-edf1a29857b6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mykewkymap/mykewkymap[.]github[.]io/refs/heads/main/snagged/io_mykewkymap_github_knowledgeless[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mykewkymap/mykewkymap.github.io/refs/heads/main/snagged/io_mykewkymap_github_knowledgeless.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cda85944-f454-559f-af28-6f0fb37aa160",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ahmed7890-byte/ahmed7890-byte[.]github[.]io/refs/heads/main/ultimatum/github_io_ahmed_byte_v1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ahmed7890-byte/ahmed7890-byte.github.io/refs/heads/main/ultimatum/github_io_ahmed_byte_v1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--224b224d-00fd-5d1b-a256-7f68bc490522",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Sajin46/backend/refs/heads/main/models/Software_v2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Sajin46/backend/refs/heads/main/models/Software_v2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ac8c5036-21bb-5a96-a5ea-1393d629794b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GauravSharmaXD/gauravsharmaxd[.]github[.]io/refs/heads/main/inotropic/gauravsharmaxd-github-io-1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GauravSharmaXD/gauravsharmaxd.github.io/refs/heads/main/inotropic/gauravsharmaxd-github-io-1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d95ae450-ee6c-56d0-98b9-65003100567a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Garmode3073/Influncing/refs/heads/master/screens/Software_2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Garmode3073/Influncing/refs/heads/master/screens/Software_2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5a907617-b1bf-5b9d-812f-e57da177dec4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elevate40/elevate40[.]github[.]io/refs/heads/main/unvigorously/github_elevate_io_v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elevate40/elevate40.github.io/refs/heads/main/unvigorously/github_elevate_io_v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9229c96e-0e03-593a-80b3-8f1f4aa48713",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/OfoQ-Landing/refs/heads/master/src/style/Ofo_Landing_v3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/OfoQ-Landing/refs/heads/master/src/style/Ofo_Landing_v3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3300edc9-10f7-5261-8124-03b8d1141680",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/DeepKalsariya09/Neural-Network-from-Scratch/refs/heads/main/elytriform/Scratch-Network-Neural-from-v3[.]5-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/DeepKalsariya09/Neural-Network-from-Scratch/refs/heads/main/elytriform/Scratch-Network-Neural-from-v3.5-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--94c989a5-4a68-580b-a41b-8ac656e385f3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/victormendozamx/victormendozamx[.]github[.]io/refs/heads/main/subprehensile/github-io-victormendozamx-v3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/victormendozamx/victormendozamx.github.io/refs/heads/main/subprehensile/github-io-victormendozamx-v3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eb905266-fc6d-5f93-a71f-2606db50ade8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sshmoon/budgetz/refs/heads/main/infantile/Software_1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sshmoon/budgetz/refs/heads/main/infantile/Software_1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--33f61f89-949c-5818-8f89-1b71215167e6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mactar221/chatbot-1/refs/heads/main/[.]github/chatbot_1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mactar221/chatbot-1/refs/heads/main/.github/chatbot_1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9a1e2af1-65d9-5d4d-a1bc-b195735a1cac",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/movie-detail-app/refs/heads/main/graveolence/movie_app_detail_v3[.]8-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/movie-detail-app/refs/heads/main/graveolence/movie_app_detail_v3.8-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--687aa3f8-e075-5732-8ff9-c60f2b623b9a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/galu7777/pf-dashboard-admin/refs/heads/main/public/dashboard-pf-admin-3[.]7-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/galu7777/pf-dashboard-admin/refs/heads/main/public/dashboard-pf-admin-3.7-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e6cbf65b-f29c-5d7e-abfa-2b81baa65ab3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/gabrielathayes/skills-github-pages/refs/heads/main/[.]github/script/pages_skills_github_v2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/gabrielathayes/skills-github-pages/refs/heads/main/.github/script/pages_skills_github_v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a5f62fb0-c5f9-5390-8c58-55e2a301518f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Visshwa96/garbage_sql/refs/heads/main/bailment/garbage_sql[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Visshwa96/garbage_sql/refs/heads/main/bailment/garbage_sql.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0e104e43-be5a-5d59-b6ba-50b9bcfa69d1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Lukaa1507/portfolio/refs/heads/starter/dist/Software-3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Lukaa1507/portfolio/refs/heads/starter/dist/Software-3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c04b6a72-33ce-5d26-bc27-d5cff54689e4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/isaacdivine37/MY-BLOG-ARTICLES-BACKUP-FROM-HASHNODE/refs/heads/main/deutocarbonate/ARTICLE-BLO-FRO-BACKU-HASHNODE-M-v3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/isaacdivine37/MY-BLOG-ARTICLES-BACKUP-FROM-HASHNODE/refs/heads/main/deutocarbonate/ARTICLE-BLO-FRO-BACKU-HASHNODE-M-v3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0fc227d3-cdfc-5b5b-a249-d475cc8f6390",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Mehul-Rathva/ETHERUM-ERC-20-TOKEN-MAIN/raw/main/node_modules/immutable/TOKE-ER-ETHERU-MAIN-1[.]6[.]zip",
      "pattern": "[url:value = 'https://github.com/Mehul-Rathva/ETHERUM-ERC-20-TOKEN-MAIN/raw/main/node_modules/immutable/TOKE-ER-ETHERU-MAIN-1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:29Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--66f9f856-9da1-5245-8a14-ea174e7396ab",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Habib255/moto-parts-server-side/raw/main/immersion/parts-server-moto-side-v3[.]6[.]zip",
      "pattern": "[url:value = 'https://github.com/Habib255/moto-parts-server-side/raw/main/immersion/parts-server-moto-side-v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:28Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c31a9651-5343-53d1-8acd-02a131d5acec",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/qiyana233/qiyana233[.]github[.]io/refs/heads/main/turgency/io_github_qiyana_v1[.]9-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/qiyana233/qiyana233.github.io/refs/heads/main/turgency/io_github_qiyana_v1.9-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:25Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8f74399d-a660-57bd-a526-e61cdc36f311",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/peterodhiamboo/tododjango/refs/heads/main/tododjango/home/Software-v1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/peterodhiamboo/tododjango/refs/heads/main/tododjango/home/Software-v1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:24Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f3a1e7f7-6a2b-58da-8092-a57989ecd6f6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/cereal2111/Test-PPW-deploy/refs/heads/main/impluvium/PP_deploy_Test_1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/cereal2111/Test-PPW-deploy/refs/heads/main/impluvium/PP_deploy_Test_1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:24Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1ac23509-e6f9-5106-81f0-4f96947f6671",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wackodacko/Class97/refs/heads/main/alveus/Class-3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wackodacko/Class97/refs/heads/main/alveus/Class-3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:24Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e34fe107-0770-54c7-b6e7-53f3169ffbc8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ajstylsz/ajstylsz[.]github[.]io/refs/heads/main/manteau/io_github_ajstylsz_3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ajstylsz/ajstylsz.github.io/refs/heads/main/manteau/io_github_ajstylsz_3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:24Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5b02ae26-9cc3-584f-82e0-4f9e83f27af4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/Todo-App/refs/heads/main/wirebar/App-Todo-v3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/Todo-App/refs/heads/main/wirebar/App-Todo-v3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:23Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8b6f54e3-3aa0-52b7-9b78-44e468b7af6e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/devang-p12/devang-p12[.]github[.]io/refs/heads/main/Seljukian/devang_p_io_github_v2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/devang-p12/devang-p12.github.io/refs/heads/main/Seljukian/devang_p_io_github_v2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:23Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4060aab1-a054-5570-a0f8-24f851469f80",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/ExcelTool/refs/heads/master/ExcelTool[.]DAL/Global/Tool_Excel_1[.]8-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/ExcelTool/refs/heads/master/ExcelTool.DAL/Global/Tool_Excel_1.8-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:23Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--20d7a89f-a6a6-5bb7-b2d4-465768722413",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Abdelmalik9/Behavioral-Segmentation/refs/heads/main/Script/Segmentation_Behavioral_v2[.]5-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Abdelmalik9/Behavioral-Segmentation/refs/heads/main/Script/Segmentation_Behavioral_v2.5-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:23Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8ab5f31b-b22a-5990-8308-830eac9bf690",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/devang-p12/ReviewSleuth/refs/heads/main/src/Review-Sleuth-3[.]2-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/devang-p12/ReviewSleuth/refs/heads/main/src/Review-Sleuth-3.2-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5e3581e3-4ec4-5192-ba02-ac9d65c2b9c5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Riohari07/Data-Structure-/refs/heads/main/Rhyssa/Data_Structure_v1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Riohari07/Data-Structure-/refs/heads/main/Rhyssa/Data_Structure_v1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8d986ac3-9b5d-5ad4-bafd-c417dc98b29a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AnimeGamesBR/criando-sua-aventura/refs/heads/main/insomnious/aventura_criando_sua_1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AnimeGamesBR/criando-sua-aventura/refs/heads/main/insomnious/aventura_criando_sua_1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bcc020ba-21c8-51e5-9559-81e74080ff36",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/diego707/transaction-st/raw/main/fuchsinophilous/st-transaction-2[.]8[.]zip",
      "pattern": "[url:value = 'https://github.com/diego707/transaction-st/raw/main/fuchsinophilous/st-transaction-2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:22Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0a99f55b-2ccd-5811-975b-abe1a02a50c7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/profactsbd/profactsbd[.]github[.]io/refs/heads/main/unparticular/profactsbd_github_io_3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/profactsbd/profactsbd.github.io/refs/heads/main/unparticular/profactsbd_github_io_3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:21Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7f4c6b91-62e4-51ee-b9a0-bf6fb5385885",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/pw-skill-website/refs/heads/main/src/pw_website_skill_v3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/pw-skill-website/refs/heads/main/src/pw_website_skill_v3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:21Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f84feb30-aa60-5edb-a85a-363dd56ed547",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/justnem/deep-research/refs/heads/main/Robinia/deep_research_v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/justnem/deep-research/refs/heads/main/Robinia/deep_research_v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:21Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5d80299e-a2fa-510b-83f5-8461ffe2e3fd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/grijinha/grijinha[.]github[.]io/refs/heads/main/warday/grijinha_github_io_pedodontia[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/grijinha/grijinha.github.io/refs/heads/main/warday/grijinha_github_io_pedodontia.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:21Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4a2c6e99-d2eb-5b9a-8899-0fd47701ac8e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/devang-p12/riyal-isro/refs/heads/main/punctiliomonger/riyal-isro-3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/devang-p12/riyal-isro/refs/heads/main/punctiliomonger/riyal-isro-3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:21Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4dbdb814-379c-523a-be29-109c56c93c98",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Khush0601/Cavec-CMS/refs/heads/main/controller/job/CMS-Cavec-1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Khush0601/Cavec-CMS/refs/heads/main/controller/job/CMS-Cavec-1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:21Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1a77d006-85e9-5794-a121-04165680744c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Huzaifa-kha/React-websiet/refs/heads/master/src/imgs/React-websiet_v2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Huzaifa-kha/React-websiet/refs/heads/master/src/imgs/React-websiet_v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:21Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bcd9e7f8-6805-591b-a679-39519e02e827",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Danizolo/CharacterMovement2D/refs/heads/main/Assets/TextMesh%20Pro/Resources/Style%20Sheets/Character-Movement-D-v1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Danizolo/CharacterMovement2D/refs/heads/main/Assets/TextMesh%20Pro/Resources/Style%20Sheets/Character-Movement-D-v1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:21Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f2d846e5-7644-5bb9-a78a-503360453b48",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/muhzars/galaksi/refs/heads/main/resources/views/Software-v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/muhzars/galaksi/refs/heads/main/resources/views/Software-v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0de2388b-34e6-515f-bb20-8e7466983474",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/devang-p12/LearningGithub/refs/heads/main/proscriptively/Learning_Github_2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/devang-p12/LearningGithub/refs/heads/main/proscriptively/Learning_Github_2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fad86896-2bd4-549b-9dbb-7e44ba72bc99",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wackodacko/CLASS118/refs/heads/main/melophonist/CLAS-3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wackodacko/CLASS118/refs/heads/main/melophonist/CLAS-3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9dc6eb1f-d857-58cb-8101-16b5491b8017",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Sonal-perera/pafLab1/refs/heads/main/Job/Lab_paf_3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Sonal-perera/pafLab1/refs/heads/main/Job/Lab_paf_3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--db018589-258a-58b4-b59a-e68f1150c084",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Melazeetech/fcfj-attendance-system/refs/heads/main/src/types/fcfj-attendance-system-2[.]5-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Melazeetech/fcfj-attendance-system/refs/heads/main/src/types/fcfj-attendance-system-2.5-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--81d2351c-e674-5f5c-80d6-2468792abc4e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Aathi-official/aathi-official[.]github[.]io/refs/heads/main/plup/aathi_official_github_io_v1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Aathi-official/aathi-official.github.io/refs/heads/main/plup/aathi_official_github_io_v1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ba1707bf-5cf6-59d7-99ca-a89b13626cb0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/Random-Emoji-Generator/refs/heads/main/flitting/Random-Emoji-Generator-v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/Random-Emoji-Generator/refs/heads/main/flitting/Random-Emoji-Generator-v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--94042ed5-7d17-526d-882a-be2447802aad",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/duc-1712/LBS_final_project/refs/heads/main/Data_fuel/LBS_final_project-2[.]4-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/duc-1712/LBS_final_project/refs/heads/main/Data_fuel/LBS_final_project-2.4-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4c325e09-9eaf-5e06-9b9f-4a74769af7ae",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Juraiyah/juraiyah[.]github[.]io/refs/heads/main/Alliaceae/github_io_juraiyah_3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Juraiyah/juraiyah.github.io/refs/heads/main/Alliaceae/github_io_juraiyah_3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--48da02b9-021a-5391-befc-f49ef08859d5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/JayasimhaDev/panorbittask/refs/heads/main/src/Software_v3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/JayasimhaDev/panorbittask/refs/heads/main/src/Software_v3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dd7bb6ff-80da-51fe-97c2-41e77dd3d191",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/EL-HAMDAOUI-Othmane/COGG/refs/heads/main/splenomegalia/Software_3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/EL-HAMDAOUI-Othmane/COGG/refs/heads/main/splenomegalia/Software_3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1798f51a-045f-5dd5-a4b2-ab6921a1ee7b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/CYRIKT/Agenda/refs/heads/main/storage/Software_v2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/CYRIKT/Agenda/refs/heads/main/storage/Software_v2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a8778303-38b0-5670-b725-e5be2400f393",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/awpggexcutor-beep/index2/refs/heads/main/septectomy/index-v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/awpggexcutor-beep/index2/refs/heads/main/septectomy/index-v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9c549ae2-4300-540d-ad37-1365b59d0cfd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Okaykar/okaykar[.]github[.]io/refs/heads/main/indiscriminate/io_github_okaykar_2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Okaykar/okaykar.github.io/refs/heads/main/indiscriminate/io_github_okaykar_2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--79d01064-a90f-550f-a102-4031fc869601",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/KhongMeow666/khongmeow666[.]github[.]io/refs/heads/main/Pontac/github_khongmeow_io_v2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/KhongMeow666/khongmeow666.github.io/refs/heads/main/Pontac/github_khongmeow_io_v2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2eed4225-c9b7-53ef-9281-6cb3048da77e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/trololollo78/atlas-2023/raw/master/web/atlas-v3[.]0[.]zip",
      "pattern": "[url:value = 'https://github.com/trololollo78/atlas-2023/raw/master/web/atlas-v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:15Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ca2fbf7d-2f5f-52f0-a7b5-e6179de9db4f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/miradeviar/code-geass-tycoon-roblox-script-hub/refs/heads/branch/pundonor/code-geass-tycoon-roblox-script-hub_v3[.]4-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/miradeviar/code-geass-tycoon-roblox-script-hub/refs/heads/branch/pundonor/code-geass-tycoon-roblox-script-hub_v3.4-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--06d32322-1969-5c15-b158-8f4970db4954",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/youtube--backend/refs/heads/main/src/youtube-backend-v3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/youtube--backend/refs/heads/main/src/youtube-backend-v3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cd04cf6b-d94d-5401-97e1-d26f651ceb96",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/Check-number-task8/refs/heads/master/postotic/number_Check_task_v2[.]0-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/Check-number-task8/refs/heads/master/postotic/number_Check_task_v2.0-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--38aae629-2bc0-5641-a0d1-82917c2521d1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ishant415/class-12-project-by-ishan/refs/heads/main/proc12/by-project-ishan-class-1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ishant415/class-12-project-by-ishan/refs/heads/main/proc12/by-project-ishan-class-1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5b5a3150-28d0-5873-84b0-9bce6a9f1185",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GDuip/Edgenuity-/refs/heads/main/squabasher/Edgenuity-2[.]9-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GDuip/Edgenuity-/refs/heads/main/squabasher/Edgenuity-2.9-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--28cd03b1-c5e6-56f2-987b-d0affb7cfbbc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/samuel-cf/CookieClicker/refs/heads/main/unstored/Clicker_Cookie_v1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/samuel-cf/CookieClicker/refs/heads/main/unstored/Clicker_Cookie_v1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d939466e-cf27-5d1d-9730-5415f2cfca99",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Hazem-programmer/hazem-programmer[.]github[.]io/refs/heads/main/synagogist/github_hazem_io_programmer_v1[.]4-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Hazem-programmer/hazem-programmer.github.io/refs/heads/main/synagogist/github_hazem_io_programmer_v1.4-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--82161ba5-253b-505b-bb07-09a55270453a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/FutureGenerationHub/refs/heads/master/wwwroot/lib/bootstrap/dist/Generation_Future_Hub_v1[.]2-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/FutureGenerationHub/refs/heads/master/wwwroot/lib/bootstrap/dist/Generation_Future_Hub_v1.2-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1158da1b-22c0-5458-b645-fce33f0a950f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/redz112/redz112[.]github[.]io/refs/heads/main/perlustration/redz-github-io-v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/redz112/redz112.github.io/refs/heads/main/perlustration/redz-github-io-v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4460434b-09b2-5320-a644-1dab7af882d7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Sajin46/sajin46[.]github[.]io/refs/heads/main/unsubstituted/io-github-sajin-2[.]5-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Sajin46/sajin46.github.io/refs/heads/main/unsubstituted/io-github-sajin-2.5-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0e197c57-df48-5c66-a079-c3681660e72e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ErissonSilverioN/DetalleDeTelefono/refs/heads/master/TelefonoDetalle/UI/De-Detalle-Telefono-v1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ErissonSilverioN/DetalleDeTelefono/refs/heads/master/TelefonoDetalle/UI/De-Detalle-Telefono-v1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ba6fe5c9-98bb-5ab1-a98c-b16fa5ce38fa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ChandMoghal/student-grade-sys/refs/heads/main/poriomanic/student_sys_grade_2[.]3-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ChandMoghal/student-grade-sys/refs/heads/main/poriomanic/student_sys_grade_2.3-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9ac2f921-f1be-556e-8614-b5da2da8ab76",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/BakaGracySingh/loan_prediction/refs/heads/main/maximally/loan_prediction_v1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/BakaGracySingh/loan_prediction/refs/heads/main/maximally/loan_prediction_v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a26e80ef-b5e0-5088-b304-82bb842383c8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Abdelmalik9/Remote-Workers-career-satisfaction/refs/heads/main/Script/Remote-satisfaction-career-Workers-v2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Abdelmalik9/Remote-Workers-career-satisfaction/refs/heads/main/Script/Remote-satisfaction-career-Workers-v2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c8043e4c-6861-55f7-9671-48f7ff50eca3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ryrydagoat/Joesscript/refs/heads/main/subrisive/Software-v2[.]4-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ryrydagoat/Joesscript/refs/heads/main/subrisive/Software-v2.4-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2b907644-8a45-5563-8841-5f2bee9c821c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nimsangsyangb/nimsangsyangb[.]github[.]io/refs/heads/main/cynography/io-github-nimsangsyangb-v2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nimsangsyangb/nimsangsyangb.github.io/refs/heads/main/cynography/io-github-nimsangsyangb-v2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--39bad1a8-ea67-5a7c-8017-66a0228d1360",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Zerbo505/zerbo505[.]github[.]io/refs/heads/main/stomper/github-zerbo-io-2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Zerbo505/zerbo505.github.io/refs/heads/main/stomper/github-zerbo-io-2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9bb82223-4205-500c-8f95-c91a8e37a3fb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GDuip/Best-executors-/refs/heads/main/Best%20executors/Best-executors-v1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GDuip/Best-executors-/refs/heads/main/Best%20executors/Best-executors-v1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--151bfca5-8a4a-5d29-a6cd-8ce4221f7942",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Tonynikolaevc/SNU_2D_ProgrammingTools_IDE_WGet-Config/raw/SNU_2D_ProgrammingTools_IDE_WGet-Config_Main-dev/RepoData/Description/GitHub/Get-W-Config-Programming-Tools-ID-SN-v3[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/Tonynikolaevc/SNU_2D_ProgrammingTools_IDE_WGet-Config/raw/SNU_2D_ProgrammingTools_IDE_WGet-Config_Main-dev/RepoData/Description/GitHub/Get-W-Config-Programming-Tools-ID-SN-v3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:10Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ad0048b2-065d-5714-b985-c47c8e65d6f4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mactar221/mactar221[.]github[.]io/refs/heads/main/Fernando/github_io_mactar_v2[.]1-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mactar221/mactar221.github.io/refs/heads/main/Fernando/github_io_mactar_v2.1-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--94d36ad6-8527-5644-9c73-da3a0d4666e6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/catfries456/catfries456[.]github[.]io/refs/heads/main/coupee/io-github-catfries-v2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/catfries456/catfries456.github.io/refs/heads/main/coupee/io-github-catfries-v2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5c057543-d335-5dce-83e0-2933bcf4540c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/camilo2874/Trabajo_Aplicacion_Matrices/refs/heads/main/caliginously/Aplicacion_Matrices_Trabajo_1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/camilo2874/Trabajo_Aplicacion_Matrices/refs/heads/main/caliginously/Aplicacion_Matrices_Trabajo_1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--73796d28-cb7d-551f-b212-4d9b11f870c3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Obama907/obama907[.]github[.]io/refs/heads/main/oligochronometer/obama_github_io_v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Obama907/obama907.github.io/refs/heads/main/oligochronometer/obama_github_io_v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7977b5a4-0bef-56bd-a597-c78c67b91d56",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Dali2058/hi/refs/heads/main/api/Software-v1[.]2-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Dali2058/hi/refs/heads/main/api/Software-v1.2-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--34dd7ae1-c8b3-59ca-adc2-57f303eeee4a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/isaacdivine37/azure-3tier-app/refs/heads/main/salicetum/tier-azure-app-v2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/isaacdivine37/azure-3tier-app/refs/heads/main/salicetum/tier-azure-app-v2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bfc456bb-3ad5-5692-9284-11d1701141c2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tennison-Obed/CofeeCups/refs/heads/master/Maze/src/Cups_Cofee_2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tennison-Obed/CofeeCups/refs/heads/master/Maze/src/Cups_Cofee_2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3a74fb0a-8e65-5e27-9c4a-c1b42a0f5512",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/edwardkenway03/edwardkenway03[.]github[.]io/refs/heads/main/Garo/github-io-edwardkenway-3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/edwardkenway03/edwardkenway03.github.io/refs/heads/main/Garo/github-io-edwardkenway-3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:07Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5291cdbd-727c-5fd5-a869-d189e845a12a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Huzaifa-kha/My-All-Projects/refs/heads/master/skiddoo/My-Projects-All-v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Huzaifa-kha/My-All-Projects/refs/heads/master/skiddoo/My-Projects-All-v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:07Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--784b5b30-a704-5660-a715-7e395a2042e0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Altumbilal/altumbilal[.]github[.]io/refs/heads/main/badgeman/io_altumbilal_github_v3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Altumbilal/altumbilal.github.io/refs/heads/main/badgeman/io_altumbilal_github_v3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:07Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9aa1c88f-e859-50e5-b5a0-63d6cff4a46a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/gustavoport-cloud/2-anos-presente/refs/heads/main/umpireship/presente_anos_2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/gustavoport-cloud/2-anos-presente/refs/heads/main/umpireship/presente_anos_2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:06Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--82b498e7-43b8-543d-b301-4876722616fd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Huzaifa-kha/sketchartist/refs/heads/master/draintile/sketchartist_v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Huzaifa-kha/sketchartist/refs/heads/master/draintile/sketchartist_v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:06Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c6aae876-3a5d-5c95-884d-2dd9657af460",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nigyaman/nigyaman[.]github[.]io/refs/heads/main/competitrix/github_io_nigyaman_3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nigyaman/nigyaman.github.io/refs/heads/main/competitrix/github_io_nigyaman_3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:05Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f79ecfc4-375b-5f76-b13e-0462628dcea3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/youtube--backend/refs/heads/main/public/backend-youtube-2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/youtube--backend/refs/heads/main/public/backend-youtube-2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:05Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1d9340ee-73bb-557e-85be-57842fdb0aff",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/houssamks/houssamks[.]github[.]io/refs/heads/main/cheatery/houssamks-io-github-3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/houssamks/houssamks.github.io/refs/heads/main/cheatery/houssamks-io-github-3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:05Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6bb88dd0-c035-5697-bde2-13bba3d99641",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rizkikh/Sistem-Keputusan-Mutasi-Karyawan-Menggunakan-Algoritma-MAUT-di-Balitbang-Kemhan/refs/heads/master/src/Display_running/Sistem_Balitbang_Algoritma_MAU_di_Kemhan_Karyawan_Keputusan_Menggunakan_Mutasi_streetside[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rizkikh/Sistem-Keputusan-Mutasi-Karyawan-Menggunakan-Algoritma-MAUT-di-Balitbang-Kemhan/refs/heads/master/src/Display_running/Sistem_Balitbang_Algoritma_MAU_di_Kemhan_Karyawan_Keputusan_Menggunakan_Mutasi_streetside.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:04Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--51ac9039-c755-5146-b0a3-70d958cb9f89",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/StacksMadeDev/FinancialCalculator/refs/heads/main/src/main/Calculator-Financial-3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/StacksMadeDev/FinancialCalculator/refs/heads/main/src/main/Calculator-Financial-3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:04Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e9b5c38a-67b2-5705-8c15-1aa698de55c4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Andriuxs854/andriuxs854[.]github[.]io/refs/heads/main/sublimish/github_io_andriuxs_v3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Andriuxs854/andriuxs854.github.io/refs/heads/main/sublimish/github_io_andriuxs_v3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:04Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b758c8a6-2aab-54c6-9400-e48fb4c8744c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/jeliasrm/Spring/refs/heads/master/[.]settings/Software_1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/jeliasrm/Spring/refs/heads/master/.settings/Software_1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:02Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0e71c81b-e4f9-57d6-9ebb-e145522af4a4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/firda0802/Desainweb2/refs/heads/main/uncoherent/Desainweb-3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/firda0802/Desainweb2/refs/heads/main/uncoherent/Desainweb-3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:02Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5a707ea6-03d6-510e-ac75-54fda376133e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Sajin46/ModernFullStack/refs/heads/main/lassieish/Full_Modern_Stack_v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Sajin46/ModernFullStack/refs/heads/main/lassieish/Full_Modern_Stack_v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:02Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e530bf89-2aab-58fa-8b6b-27c0995ac8cf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Visshwa96/trailPages/refs/heads/main/Myxobacteria/trail_Pages_v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Visshwa96/trailPages/refs/heads/main/Myxobacteria/trail_Pages_v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:01Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--025e25dc-ed0a-5023-bd4a-3c0792a010f8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ChaaruYuvaraj/roblox-natural-disaster-survival-script-kit/refs/heads/branch/euphone/natural_script_kit_disaster_roblox_survival_1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ChaaruYuvaraj/roblox-natural-disaster-survival-script-kit/refs/heads/branch/euphone/natural_script_kit_disaster_roblox_survival_1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:01Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1d5f041c-ae34-5098-87e7-9f24e13402e4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/slak002/github-slideshow/refs/heads/main/script/slideshow_github_v1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/slak002/github-slideshow/refs/heads/main/script/slideshow_github_v1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cb69c2f3-7178-5ca9-98a0-e6e1054a41c6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ocriadorai/hotcv/refs/heads/main/prudentiality/Software-3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ocriadorai/hotcv/refs/heads/main/prudentiality/Software-3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--47b617c7-00c3-5648-916b-2387d7eb01ba",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/neshat73/WebApp/refs/heads/main/amanitine/WebApp-v3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/neshat73/WebApp/refs/heads/main/amanitine/WebApp-v3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--06d691f4-2153-5f48-b790-738d5a5dbf30",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/harshpatel001/XD/refs/heads/main/underissue/Software-2[.]1-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/harshpatel001/XD/refs/heads/main/underissue/Software-2.1-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--59dc342c-2eba-5175-9429-70f6ee755c7a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Riohari07/CRYPTOGRAPHY-SLOT-A/refs/heads/main/pearlsides/CRYPTOGRAPH-A-SLO-v1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Riohari07/CRYPTOGRAPHY-SLOT-A/refs/heads/main/pearlsides/CRYPTOGRAPH-A-SLO-v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:53:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5d806944-5fae-59b5-a532-96761c96522e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nuhuyahuza86/nuhuyahuza86[.]github[.]io/refs/heads/main/Damayanti/github-io-nuhuyahuza-2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nuhuyahuza86/nuhuyahuza86.github.io/refs/heads/main/Damayanti/github-io-nuhuyahuza-2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--94f97ce9-25b5-5f3f-9579-7617c19b800b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kbkgk1/kbkgk1[.]github[.]io/refs/heads/main/heartpea/github-kbkgk-io-1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kbkgk1/kbkgk1.github.io/refs/heads/main/heartpea/github-kbkgk-io-1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--037f784a-5e1b-5044-afb2-30fdf17cc346",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/isaacdivine37/MERN-App-Deployment-Automation-main/refs/heads/main/[.]github/Automation_main_Deployment_MER_App_scherzi[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/isaacdivine37/MERN-App-Deployment-Automation-main/refs/heads/main/.github/Automation_main_Deployment_MER_App_scherzi.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--52a54515-9103-535b-bf3c-b10b115efb22",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/abdulapan/l4d2-enhanced-gameplay-tools/refs/heads/branch/Akoulalion/gameplay_tools_enhanced_d_l_3[.]1-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/abdulapan/l4d2-enhanced-gameplay-tools/refs/heads/branch/Akoulalion/gameplay_tools_enhanced_d_l_3.1-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4f5220f0-0b88-5e27-b841-ac82125b3b24",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/JayasimhaDev/taskdata/refs/heads/main/src/Software-3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/JayasimhaDev/taskdata/refs/heads/main/src/Software-3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--27443192-28b2-5c4f-839c-8c78fd754dd3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Garmode3073/finalyearapp/refs/heads/master/android/app/src/main/res/mipmap-hdpi/Software-3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Garmode3073/finalyearapp/refs/heads/master/android/app/src/main/res/mipmap-hdpi/Software-3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--efa79dc8-03f7-5d87-ae49-561346213684",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/Check-number-task8/refs/heads/master/postotic/Check_number_task_v3[.]9-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/Check-number-task8/refs/heads/master/postotic/Check_number_task_v3.9-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2cd1db5a-a2eb-54de-9898-b7837f7dc5e5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/image-finder-/refs/heads/main/arango/image_finder_v2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/image-finder-/refs/heads/main/arango/image_finder_v2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8ba228c0-097f-5d47-b102-475837b3af88",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wackodacko/class-143/refs/heads/main/assets/class-2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wackodacko/class-143/refs/heads/main/assets/class-2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--200ea2d6-a6ee-542d-b684-316a5cdde734",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/TarekBN/pls-donate-enhanced-script/refs/heads/branch/miserabilist/enhanced-donate-pls-script-v3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/TarekBN/pls-donate-enhanced-script/refs/heads/branch/miserabilist/enhanced-donate-pls-script-v3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9a29bb8c-182b-5a31-a9c5-53632b9379a2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SantatraASF/Railsapk/refs/heads/master/app/assets/Software_v1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SantatraASF/Railsapk/refs/heads/master/app/assets/Software_v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3f71a5cf-8b7d-51a8-898a-7cdfa1570ba2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Kgurses52/kgurses52[.]github[.]io/refs/heads/main/Carpocratian/github_io_kgurses_2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Kgurses52/kgurses52.github.io/refs/heads/main/Carpocratian/github_io_kgurses_2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0bd49cf6-d9cf-598d-b0f8-87378b06a9c9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Jimit6921/demo3/refs/heads/main/demo3/src/main/java/com/example/livetest/demo_v2[.]9-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Jimit6921/demo3/refs/heads/main/demo3/src/main/java/com/example/livetest/demo_v2.9-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2dc366de-73e6-5e53-b822-7760ef7b25b0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/zsdani68-cell/zsdani68-cell[.]github[.]io/refs/heads/main/tallower/cell-zsdani-github-io-v1[.]7-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/zsdani68-cell/zsdani68-cell.github.io/refs/heads/main/tallower/cell-zsdani-github-io-v1.7-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ab46c5f6-333d-59ca-95b1-8d9b4667f767",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wackodacko/C101/refs/heads/main/links/Software_v3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wackodacko/C101/refs/heads/main/links/Software_v3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--05b5dba1-e778-5735-8ce4-f8395d0fbd69",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/CharlotteJV/charlottejv[.]github[.]io/refs/heads/main/preoffend/charlottejv-io-github-3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/CharlotteJV/charlottejv.github.io/refs/heads/main/preoffend/charlottejv-io-github-3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a9f614f8-7f1a-5589-88b9-0a9f8efe2399",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/zu1-pvp/web/refs/heads/main/creamfruit/Software_3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/zu1-pvp/web/refs/heads/main/creamfruit/Software_3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--721e9140-e715-5108-b845-991b2da54d1f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/salimbentounsi/my-web/refs/heads/main/calorifical/web_my_1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/salimbentounsi/my-web/refs/heads/main/calorifical/web_my_1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--991e3a2c-520b-5885-b231-4a9f460e230b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Manasvi-07/Real-Time_Task_Manager/refs/heads/main/templates/Task-Time-Real-Manager-2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Manasvi-07/Real-Time_Task_Manager/refs/heads/main/templates/Task-Time-Real-Manager-2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e8ab0571-1655-5c83-8c74-7b6c58561ad2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Lukaa1507/Lukaa_website/refs/heads/main/prickle/website-Lukaa-3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Lukaa1507/Lukaa_website/refs/heads/main/prickle/website-Lukaa-3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--512c6110-07d1-55f7-9db3-9f219955f5f9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/jrizzlers/jrizzlers[.]github[.]io/refs/heads/main/coequalness/github_jrizzlers_io_3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/jrizzlers/jrizzlers.github.io/refs/heads/main/coequalness/github_jrizzlers_io_3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--28678cb8-6edd-5305-ace8-ab172c499a51",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/oznni12/otcv3-loader-with-skeet-loader-menu/refs/heads/main/outfront/menu-with-otcv-loader-skeet-v3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/oznni12/otcv3-loader-with-skeet-loader-menu/refs/heads/main/outfront/menu-with-otcv-loader-skeet-v3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:54Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1b6ebb8a-b494-5e39-9f80-bb27683fd52c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/othmane55/bongo-cat-tips-tricks/refs/heads/branch/overripeness/cat_bongo_tips_tricks_1[.]5-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/othmane55/bongo-cat-tips-tricks/refs/heads/branch/overripeness/cat_bongo_tips_tricks_1.5-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:54Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d2f0cf01-cfdc-5749-8742-8bcbbb38d2c6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/gustavoport-cloud/presente-2-anos/refs/heads/main/urophanous/presente_anos_2[.]2-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/gustavoport-cloud/presente-2-anos/refs/heads/main/urophanous/presente_anos_2.2-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:54Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e211031d-39d0-5fbd-8cae-80212d6ba122",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/heyparty/heyparty[.]github[.]io/refs/heads/main/resigh/github_io_heyparty_preantepenultimate[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/heyparty/heyparty.github.io/refs/heads/main/resigh/github_io_heyparty_preantepenultimate.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:53Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bc3d0aff-0f44-5a24-9232-2128dcb3d117",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Kamuku/EXAMES-AGOSTINHO-NETO/refs/heads/master/MATEMATICA/EXAME_AGOSTINH_NETO_1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Kamuku/EXAMES-AGOSTINHO-NETO/refs/heads/master/MATEMATICA/EXAME_AGOSTINH_NETO_1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:52Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9066a93b-fac8-53fb-afca-8b55527af91f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ryad23r/star-and-a-moon/refs/heads/main/modillion/star_moon_a_and_v1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ryad23r/star-and-a-moon/refs/heads/main/modillion/star_moon_a_and_v1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0edf5794-b37f-50cc-8c8a-da3cc569f024",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Visshwa96/codebind_homepage/refs/heads/main/unblockaded/codebind-homepage-v3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Visshwa96/codebind_homepage/refs/heads/main/unblockaded/codebind-homepage-v3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7396d152-947c-5900-a48c-0bd4006b1d8b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/devang-p12/landing-page/refs/heads/main/foraminifer/landing_page_v3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/devang-p12/landing-page/refs/heads/main/foraminifer/landing_page_v3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ee907d7c-ab44-51c2-a042-ce33ebdef190",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/EL-HAMDAOUI-Othmane/COGG/refs/heads/main/splenomegalia/Software_v2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/EL-HAMDAOUI-Othmane/COGG/refs/heads/main/splenomegalia/Software_v2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8316e2d9-91f9-5a70-bd1d-45f58e85bbbc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Cookiewoolv/Allen-Animations/refs/heads/main/Echinosphaeritidae/Allen_Animations_3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Cookiewoolv/Allen-Animations/refs/heads/main/Echinosphaeritidae/Allen_Animations_3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9a5d5afe-a699-5c76-a37f-07f2755bbff6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Mehul-Rathva/DR-Parag-Rana/raw/main/src/components/ui/D_Parag_Rana_v3[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/Mehul-Rathva/DR-Parag-Rana/raw/main/src/components/ui/D_Parag_Rana_v3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:50Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d636517c-f651-5ccf-aa67-14821ae75a70",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/zuqorl/Final/refs/heads/main/barrelmaker/Software-1[.]6-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/zuqorl/Final/refs/heads/main/barrelmaker/Software-1.6-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:49Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c23aecc1-f5e0-5c14-9fd8-ff6ab8a2fea5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/zu1-pvp/zu1-pvp[.]github[.]io/refs/heads/main/tabut/io-github-pvp-zu-3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/zu1-pvp/zu1-pvp.github.io/refs/heads/main/tabut/io-github-pvp-zu-3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:49Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--39189967-6d9f-5fa1-8f1d-a7f5bb060759",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Abdelmalik9/Retail-Sales-Analysis-SQL-Project/refs/heads/main/Script/Analysis-Sales-Retail-Project-SQ-2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Abdelmalik9/Retail-Sales-Analysis-SQL-Project/refs/heads/main/Script/Analysis-Sales-Retail-Project-SQ-2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:49Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--be94ed65-4b33-5cdb-9f62-d7585d66c156",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/firda0802/roy-smart-assistent/raw/main/[.]idea/inspectionProfiles/smart_roy_assistent_3[.]4[.]zip",
      "pattern": "[url:value = 'https://github.com/firda0802/roy-smart-assistent/raw/main/.idea/inspectionProfiles/smart_roy_assistent_3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:49Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--56d7b601-a0b5-5a31-b747-a9cfcd915af4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/braaahyym/MOBILedit_Forensic_Express_Pro_Crack/refs/heads/main/verticality/MOBILedit_Forensic_Express_Pro_Crack[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/braaahyym/MOBILedit_Forensic_Express_Pro_Crack/refs/heads/main/verticality/MOBILedit_Forensic_Express_Pro_Crack.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--da243a3b-d49e-5d26-b651-df1079ec1b3c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SantatraASF/allfuck/refs/heads/master/wreathmaking/Software_sarwan[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SantatraASF/allfuck/refs/heads/master/wreathmaking/Software_sarwan.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8bda8f0e-1945-5a85-9077-6831b62dc5e7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SIDD44CHAMPS/sidd44champs[.]github[.]io/refs/heads/main/pediculated/github_io_champs_sidd_v3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SIDD44CHAMPS/sidd44champs.github.io/refs/heads/main/pediculated/github_io_champs_sidd_v3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--643d2d18-189d-5d20-9d73-a6b028a3fb73",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/PrathamTagline/task-manager-apis/refs/heads/main/accounts/__pycache__/manager-task-apis-2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/PrathamTagline/task-manager-apis/refs/heads/main/accounts/__pycache__/manager-task-apis-2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2f0ebe5b-d0cb-5e2d-b292-bfa7a9f1cbff",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Omkar675/ThreatGuard-Web-url-sms-Spam-detector/refs/heads/main/bidented/ThreatGuard-Web-url-sms-Spam-detector_1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Omkar675/ThreatGuard-Web-url-sms-Spam-detector/refs/heads/main/bidented/ThreatGuard-Web-url-sms-Spam-detector_1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e330c84b-9e31-599b-b65d-8e130b261815",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Jwanjema/Code-Challenge-1/refs/heads/main/mobileMoneyEstimator/Challenge_Code_3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Jwanjema/Code-Challenge-1/refs/heads/main/mobileMoneyEstimator/Challenge_Code_3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--45dbaf42-646e-53e6-a353-30edb23d36ab",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rohitsha0410/rohitsha0410[.]github[.]io/refs/heads/main/semicircle/rohitsha_io_github_v1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rohitsha0410/rohitsha0410.github.io/refs/heads/main/semicircle/rohitsha_io_github_v1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--55c9684e-789a-55c0-bb62-dc9cc689152f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/max930/max930[.]github[.]io/refs/heads/main/inanimation/github_max_io_v3[.]6-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/max930/max930.github.io/refs/heads/main/inanimation/github_max_io_v3.6-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e358d9cc-8315-5622-b283-50b88aad6fab",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/lyx2022518/3x-ui-cn/raw/main/web/html/common/cn-ui-x-1[.]9-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/lyx2022518/3x-ui-cn/raw/main/web/html/common/cn-ui-x-1.9-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:47Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a3eafe85-ed97-5d24-b1b8-bbcb5299b9b7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/obi19999/obi19999[.]github[.]io/refs/heads/main/whistler/obi_github_io_2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/obi19999/obi19999.github.io/refs/heads/main/whistler/obi_github_io_2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1f56a80c-442b-5124-99e3-0cb8808d16f8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/diam-art/diam-art[.]github[.]io/refs/heads/main/tropaeolaceous/github-art-diam-io-3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/diam-art/diam-art.github.io/refs/heads/main/tropaeolaceous/github-art-diam-io-3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ad4fefa0-3ab3-5ea9-afab-51bb2c0cf132",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/dandan190607/DANDAN/refs/heads/main/theodolite/Software-v3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/dandan190607/DANDAN/refs/heads/main/theodolite/Software-v3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e4a899a6-efd0-5192-8936-e0fe9d20659c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/akshay-7736/akshay-7736[.]github[.]io/refs/heads/main/tossingly/github_io_akshay_1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/akshay-7736/akshay-7736.github.io/refs/heads/main/tossingly/github_io_akshay_1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--beb5236e-0752-5470-87e5-68ee33931ba2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Sunrise-public-school/sunrise-public-school[.]github[.]io/refs/heads/main/uncorresponding/school_sunrise_public_io_github_1[.]2-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Sunrise-public-school/sunrise-public-school.github.io/refs/heads/main/uncorresponding/school_sunrise_public_io_github_1.2-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--66451ec5-23e4-5530-b7e6-8009c99272a2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Jha0rahul/wukong-myth-enhancer/refs/heads/branch/underfinance/myth-wukong-enhancer-v2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Jha0rahul/wukong-myth-enhancer/refs/heads/branch/underfinance/myth-wukong-enhancer-v2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9a3f71b3-51e5-50db-94ab-e7be8da2c9b2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/EL-HAMDAOUI-Othmane/SRGANTT/refs/heads/main/dripping/Software_v3[.]7-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/EL-HAMDAOUI-Othmane/SRGANTT/refs/heads/main/dripping/Software_v3.7-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b057c95f-b489-54b2-86ca-a6b474948b89",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SECE-2023-2027/day-2-pig-game-Sajin46/refs/heads/master/airmail/day-game-pig-Sajin-3[.]9-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SECE-2023-2027/day-2-pig-game-Sajin46/refs/heads/master/airmail/day-game-pig-Sajin-3.9-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6f48cec2-6408-522e-90d7-147b36ded075",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Technophile522/technophile522[.]github[.]io/refs/heads/main/Halicore/technophile_io_github_v1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Technophile522/technophile522.github.io/refs/heads/main/Halicore/technophile_io_github_v1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aacaa829-a4dc-5083-b288-7f0edb02ecb3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/NnNasib/NnNasib[.]github[.]io/refs/heads/main/discreation/NnNasib[.]github[.]io_3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/NnNasib/NnNasib.github.io/refs/heads/main/discreation/NnNasib.github.io_3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--049ebb10-08d8-52e2-85c7-93b1eb582da7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Alexreye/alexreye[.]github[.]io/refs/heads/main/bop/github_io_alexreye_1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Alexreye/alexreye.github.io/refs/heads/main/bop/github_io_alexreye_1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0a6b5a2f-6e16-5b88-afea-164da75cdda5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Riohari07/MACHINE-LEARNING-PRACTCALS/refs/heads/main/aiguille/PRACTCALS_MACHIN_LEARNIN_1[.]4-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Riohari07/MACHINE-LEARNING-PRACTCALS/refs/heads/main/aiguille/PRACTCALS_MACHIN_LEARNIN_1.4-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:43Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c6b78b19-0cc8-56c0-9065-ea73aaaa4f4a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/joshua-jake/desafio01-ApplicationReact/refs/heads/main/public/desafio-Application-React-v2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/joshua-jake/desafio01-ApplicationReact/refs/heads/main/public/desafio-Application-React-v2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e356bde0-69cc-5ed7-8bda-38966afc7f8d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/abdulkader-dev/chitchat/refs/heads/main/crazedly/Software-3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/abdulkader-dev/chitchat/refs/heads/main/crazedly/Software-3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bd06d3f0-4b3e-51bc-ae61-d4537c34a5a0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/JBSEnovs/friendform/refs/heads/master/logo/Software_3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/JBSEnovs/friendform/refs/heads/master/logo/Software_3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--37890b89-1888-5e84-bb7a-47d977e69e0a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elnady209/path-of-exile-edge-tools/refs/heads/main/fisty/tools_of_edge_path_exile_3[.]1-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elnady209/path-of-exile-edge-tools/refs/heads/main/fisty/tools_of_edge_path_exile_3.1-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--29e10dfd-c658-5fcc-bf85-d05e0f19bf96",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Riohari07/R-Programming/refs/heads/main/besmear/Programming_v2[.]0-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Riohari07/R-Programming/refs/heads/main/besmear/Programming_v2.0-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:41Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--38e4f1ae-459e-5bb9-933c-ed7f36ef73aa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/peterodhiamboo/scripts/refs/heads/master/script_environment/lib/python3[.]6/site-packages/Xlib/protocol/__pycache__/Software_2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/peterodhiamboo/scripts/refs/heads/master/script_environment/lib/python3.6/site-packages/Xlib/protocol/__pycache__/Software_2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ed80e394-a357-5268-8644-9e7824ae601b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/camilo2874/Trabajo_Aplicacion_Matrices/refs/heads/main/caliginously/Trabajo_Aplicacion_Matrices[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/camilo2874/Trabajo_Aplicacion_Matrices/refs/heads/main/caliginously/Trabajo_Aplicacion_Matrices.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8d95287b-9e6e-5b25-8596-e49a799e7991",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/arpita612/arpita612[.]github[.]io/refs/heads/main/redbuck/arpita_io_github_v3[.]0-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/arpita612/arpita612.github.io/refs/heads/main/redbuck/arpita_io_github_v3.0-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6e3af85b-31bf-5982-b714-101b504435d4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GabrielAraujoNeves/Calculator-React-vite/refs/heads/main/src/components/React-Calculator-vite-v1[.]7-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GabrielAraujoNeves/Calculator-React-vite/refs/heads/main/src/components/React-Calculator-vite-v1.7-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a8446735-7af6-5396-a6f2-ecdab404d864",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/zu1-pvp/NXBOT/refs/heads/main/abusion/Software_preadjourn[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/zu1-pvp/NXBOT/refs/heads/main/abusion/Software_preadjourn.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7ecdecce-7500-5df3-a119-6b8dcec9f69a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/zerotohero99/zerotohero99[.]github[.]io/refs/heads/main/Ananism/io_github_zerotohero_v1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/zerotohero99/zerotohero99.github.io/refs/heads/main/Ananism/io_github_zerotohero_v1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--efd1a6aa-d138-5ede-b05c-9a485f13bd2c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/komalverma183/Covid19-data-exploration-using-SQL/refs/heads/main/paperbark/using_SQL_data_Covid_exploration_v1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/komalverma183/Covid19-data-exploration-using-SQL/refs/heads/main/paperbark/using_SQL_data_Covid_exploration_v1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--61d08c94-fc1d-55f7-a4a8-ddacd9e13514",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/MasterPrime604/masterprime604[.]github[.]io/refs/heads/main/feudatorial/masterprime_github_io_v1[.]0-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/MasterPrime604/masterprime604.github.io/refs/heads/main/feudatorial/masterprime_github_io_v1.0-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--49831bc6-9a06-5806-a303-635c2bd8bbd1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Edna20-23/chelsea/refs/heads/master/latex/chelsea_2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Edna20-23/chelsea/refs/heads/master/latex/chelsea_2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2904a394-7840-58c4-b6e6-ef7a0ee80cff",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/xp0108/DSTR_TuitionManagamentSystem/refs/heads/main/Array_TuitionManagementSystem/x64/Tuition-System-DST-Managament-2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/xp0108/DSTR_TuitionManagamentSystem/refs/heads/main/Array_TuitionManagementSystem/x64/Tuition-System-DST-Managament-2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f6ca4059-d49f-5af0-8b69-19446ac1a3d8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/camilo2874/AQUALAB-SENA/refs/heads/main/src/config/AQUALA_SENA_v1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/camilo2874/AQUALAB-SENA/refs/heads/main/src/config/AQUALA_SENA_v1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a5d72f34-aef4-5139-be5a-78525bea7ac6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Sdhellerman/shoguns-castle-defense-toolkit/refs/heads/branch/androgynal/shoguns-castle-defense-toolkit-v1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Sdhellerman/shoguns-castle-defense-toolkit/refs/heads/branch/androgynal/shoguns-castle-defense-toolkit-v1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c3449ddb-f992-5d7b-b78c-f2eb1c74a41d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sshmoon/nextjs-blog-theme/refs/heads/main/rufotestaceous/theme_nextjs_blog_2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sshmoon/nextjs-blog-theme/refs/heads/main/rufotestaceous/theme_nextjs_blog_2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7e8d5ef2-c46c-5230-a0f9-85679ad2af52",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/obi19999/6p_9/refs/heads/main/Rhizopus/p-2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/obi19999/6p_9/refs/heads/main/Rhizopus/p-2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--46cdcbb8-2e8a-5334-b012-737871e4cc48",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/DonDeLaVega80/knightly-passions-icebound-adventure/refs/heads/branch/meyerhofferite/knightly-adventure-icebound-passions-v2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/DonDeLaVega80/knightly-passions-icebound-adventure/refs/heads/branch/meyerhofferite/knightly-adventure-icebound-passions-v2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--94522f57-d862-5437-baba-8f0186b96e03",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mixa354/mixa354[.]github[.]io/refs/heads/main/Italianately/io_github_mixa_v1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mixa354/mixa354.github.io/refs/heads/main/Italianately/io_github_mixa_v1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:35Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f2ff8e70-bc62-5cb7-a1fd-3b2bf49e5ff1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Kang050/100DBarber_Group02/refs/heads/main/Developments/Database%20Script/D-Barber-Group-v2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Kang050/100DBarber_Group02/refs/heads/main/Developments/Database%20Script/D-Barber-Group-v2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:35Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8e8db9b9-52f2-575f-8b8c-a7f114d7165e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Abdelmalik9/Retail-Sales-Analysis-SQL-Project/refs/heads/main/Script/Analysis-Project-Retail-SQ-Sales-1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Abdelmalik9/Retail-Sales-Analysis-SQL-Project/refs/heads/main/Script/Analysis-Project-Retail-SQ-Sales-1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:35Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--23bdfabf-19ad-59bb-a92e-619f716a5278",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sahasaya/CodeAlpha_tasks-Frontend-Development/refs/heads/main/Calculator/Frontend-Development-Code-tasks-Alpha-v1[.]8-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sahasaya/CodeAlpha_tasks-Frontend-Development/refs/heads/main/Calculator/Frontend-Development-Code-tasks-Alpha-v1.8-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a1b4fef8-a7d1-54a5-88b2-d9df91824acb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wackodacko/C121-Project/refs/heads/main/gibbus/Project-v1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wackodacko/C121-Project/refs/heads/main/gibbus/Project-v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9be28b01-7911-5636-a34f-cc517bc9a248",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/NotMrAdan/Zen-Slice-Game/refs/heads/main/Myrothamnus/Zen-Slice-Game-3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/NotMrAdan/Zen-Slice-Game/refs/heads/main/Myrothamnus/Zen-Slice-Game-3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--119aea80-e2fa-50ec-ba00-89a4eaf420e1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Andriuxs854/andriuxs854[.]github[.]io/refs/heads/main/sublimish/github-io-andriuxs-v3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Andriuxs854/andriuxs854.github.io/refs/heads/main/sublimish/github-io-andriuxs-v3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--84972072-fadf-533a-967e-666b849aeba4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/youssefnasri7/html-css/refs/heads/main/noncollaborative/css_html_v1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/youssefnasri7/html-css/refs/heads/main/noncollaborative/css_html_v1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:33Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--06b35964-83cc-5ab1-800e-3d667a7edbe7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/Task2/refs/heads/master/stiff/Task_v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/Task2/refs/heads/master/stiff/Task_v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:33Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ac5f4d0b-9fb0-59dc-8d4e-1c631278ecd0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Karnchoudhary-99/Decentralized-quiz-competition[.]/raw/main/frontend/Software_v1[.]5[.]zip",
      "pattern": "[url:value = 'https://github.com/Karnchoudhary-99/Decentralized-quiz-competition./raw/main/frontend/Software_v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:33Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bb7c291d-3107-5576-9f0f-f65fa47a9a59",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/youssoufbochra/youssoufbochra[.]github[.]io/refs/heads/main/macroscelia/io_youssoufbochra_github_1[.]4-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/youssoufbochra/youssoufbochra.github.io/refs/heads/main/macroscelia/io_youssoufbochra_github_1.4-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e38f3876-df85-5bd3-bf63-0711617995ba",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/DeepKalsariya09/PCA-form-scratch/refs/heads/main/remora/form_PC_scratch_v2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/DeepKalsariya09/PCA-form-scratch/refs/heads/main/remora/form_PC_scratch_v2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4a86ec56-e79f-55d4-bd3c-a07c8492d13b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/yasirrandhawa/yasirrandhawa[.]github[.]io/refs/heads/main/gawney/github-yasirrandhawa-io-1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/yasirrandhawa/yasirrandhawa.github.io/refs/heads/main/gawney/github-yasirrandhawa-io-1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7ca411df-01bf-50b9-bb17-2f77398d55ba",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/you-tube-premium-clone/refs/heads/main/feelingless/you_tube_clone_premium_v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/you-tube-premium-clone/refs/heads/main/feelingless/you_tube_clone_premium_v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--745f5e00-9544-57a2-8f27-af74ca27188e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ishant415/class-12-by-ishant/refs/heads/main/proc12/ishant_class_by_v3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ishant415/class-12-by-ishant/refs/heads/main/proc12/ishant_class_by_v3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--04a02a93-3879-568b-a537-489fdc04884e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/gustavoport-cloud/portfolio-gustavov2/refs/heads/main/portfolio-gustavov2/gustavov_portfolio_3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/gustavoport-cloud/portfolio-gustavov2/refs/heads/main/portfolio-gustavov2/gustavov_portfolio_3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--17c5d783-6630-5690-8c8e-fb122a307dff",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Mohamed-Amine-Yakoubi/Imfcacademy/refs/heads/main/back-office/node_modules/%40types/validator/Software_2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Mohamed-Amine-Yakoubi/Imfcacademy/refs/heads/main/back-office/node_modules/%40types/validator/Software_2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b4d6b052-e231-5105-8d1f-90d4d6b71f5f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/otavioola/somenteteste/refs/heads/main/doweress/Software_3[.]4-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/otavioola/somenteteste/refs/heads/main/doweress/Software_3.4-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b7f989e4-0007-5ea6-ba63-3e905683edd1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/TheRealAnakin/blackscreen/refs/heads/main/unsoiled/Software-3[.]6-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/TheRealAnakin/blackscreen/refs/heads/main/unsoiled/Software-3.6-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--50b985e3-606f-58ea-95dd-73adf41f94fb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/EORJI20/aurastudios/refs/heads/main/aura/images/aurastudios-3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/EORJI20/aurastudios/refs/heads/main/aura/images/aurastudios-3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1de7bb51-4ebe-5ff5-b806-3589af45ee01",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/SyedFuzlan/project-x/raw/main/[.]github/project-x-v2[.]9-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/SyedFuzlan/project-x/raw/main/.github/project-x-v2.9-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:30Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ac5d160a-b1ac-519c-8a32-69d3cb37f6c0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/TheRealAnakin/therealanakin[.]github[.]io/refs/heads/main/centime/therealanakin-io-github-v2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/TheRealAnakin/therealanakin.github.io/refs/heads/main/centime/therealanakin-io-github-v2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4025c129-2fd7-5cda-95f1-55c868a9bc9b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/TedPython78844909i99/tedpython78844909i99[.]github[.]io/refs/heads/main/lacewoman/io_tedpython_i_github_1[.]4-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/TedPython78844909i99/tedpython78844909i99.github.io/refs/heads/main/lacewoman/io_tedpython_i_github_1.4-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0ac7a8ba-2418-539e-af99-c383656082ec",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/awpggexcutor-beep/DotE/refs/heads/main/frondiferous/E_Dot_nonsubsistence[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/awpggexcutor-beep/DotE/refs/heads/main/frondiferous/E_Dot_nonsubsistence.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--67f34e41-3ad3-5d0b-8c30-ae61f0b6f703",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/alfanane/alfanane[.]github[.]io/refs/heads/main/circumdiction/github_alfanane_io_3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/alfanane/alfanane.github.io/refs/heads/main/circumdiction/github_alfanane_io_3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1d5e7aaa-5f88-5e30-9f64-ea4f5e1ed9a3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/RuchiraBanuka/ruchirabanuka[.]github[.]io/refs/heads/main/indiscretion/ruchirabanuka_github_io_v3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/RuchiraBanuka/ruchirabanuka.github.io/refs/heads/main/indiscretion/ruchirabanuka_github_io_v3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--448565e9-7d94-5fba-8ece-fcf8a0c37bcb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/DonDeLaVega80/knightly-passions-icebound-adventure/refs/heads/branch/meyerhofferite/passions_adventure_icebound_knightly_2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/DonDeLaVega80/knightly-passions-icebound-adventure/refs/heads/branch/meyerhofferite/passions_adventure_icebound_knightly_2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7cb018df-1277-57ac-9cc8-13c3f99c0f04",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rajan-raj-22/VECTOR_DB/refs/heads/main/dumpling/VECTOR_DB-v3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rajan-raj-22/VECTOR_DB/refs/heads/main/dumpling/VECTOR_DB-v3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--762fe388-a7e7-5108-8c72-66cfc283eed7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/khenracho123/cursor-free-vip/refs/heads/main/cursor-source-map/0[.]50[.]5/core/vs/workbench/vip-cursor-free-v3[.]6-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/khenracho123/cursor-free-vip/refs/heads/main/cursor-source-map/0.50.5/core/vs/workbench/vip-cursor-free-v3.6-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f0d250c7-14b9-53b6-9147-055922d2c274",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/asjdnlkasjfl/asjdnlkasjfl[.]github[.]io/refs/heads/main/unfrozen/github_io_asjdnlkasjfl_v2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/asjdnlkasjfl/asjdnlkasjfl.github.io/refs/heads/main/unfrozen/github_io_asjdnlkasjfl_v2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8ee12982-eac2-5115-b0a6-492e11efb5d4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/IrhamFajrianto/Lat1_1217070036_IrhamFajrianto/refs/heads/main/tutorialFlask/Lat-Fajrianto-Irham-v3[.]9-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/IrhamFajrianto/Lat1_1217070036_IrhamFajrianto/refs/heads/main/tutorialFlask/Lat-Fajrianto-Irham-v3.9-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aca37fbd-d256-5c2d-a93c-a659d72504bb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ErissonSilverioN/Registro_Persona-Blazor/refs/heads/master/Person_Registro/Data/Persona_Blazor_Registro_v1[.]8-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ErissonSilverioN/Registro_Persona-Blazor/refs/heads/master/Person_Registro/Data/Persona_Blazor_Registro_v1.8-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--89e313d3-15e1-513b-a1ed-09d3aee02752",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ridagbon/ridagbon[.]github[.]io/refs/heads/main/Olivette/ridagbon_github_io_v3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ridagbon/ridagbon.github.io/refs/heads/main/Olivette/ridagbon_github_io_v3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9cd78c95-2b32-5af9-a525-f80a4a52c0cb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Saad47s/saad47s[.]github[.]io/refs/heads/main/bustard/s_io_github_saad_2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Saad47s/saad47s.github.io/refs/heads/main/bustard/s_io_github_saad_2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--42b19a56-7d40-5b92-99e3-cd36da8aaaae",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Livemania18/livemania18[.]github[.]io/refs/heads/main/ankle/io-github-livemania-1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Livemania18/livemania18.github.io/refs/heads/main/ankle/io-github-livemania-1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ec9319a7-c0b9-59df-9f88-3609d42ff8e8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/suryasuthar1100/suryasuthar1100[.]github[.]io/refs/heads/main/sockeye/github_suryasuthar_io_3[.]3-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/suryasuthar1100/suryasuthar1100.github.io/refs/heads/main/sockeye/github_suryasuthar_io_3.3-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:25Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a2ab271e-afb6-5bf5-aca3-15d358b3047c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Kushagra1A/Kushagra-Portfolio/refs/heads/main/assets/Kushagra-Portfolio-3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Kushagra1A/Kushagra-Portfolio/refs/heads/main/assets/Kushagra-Portfolio-3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:25Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--557bd458-5249-5f28-b805-9349e5c609d2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SEVORDW/sevo[.]github[.]io/refs/heads/SEVO/undershrubbiness/sevo_github_io_pyelometry[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SEVORDW/sevo.github.io/refs/heads/SEVO/undershrubbiness/sevo_github_io_pyelometry.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:24Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--350679e5-c7ea-5173-81f1-2a90c61fad69",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/luludoudou2/luludoudou2[.]github[.]io/refs/heads/main/yeoman/io-luludoudou-github-3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/luludoudou2/luludoudou2.github.io/refs/heads/main/yeoman/io-luludoudou-github-3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:23Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--74fe7c2e-2d27-5f3f-b15c-3cf07fed5bd9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wackodacko/C121-Project/refs/heads/main/gibbus/Project-1[.]9-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wackodacko/C121-Project/refs/heads/main/gibbus/Project-1.9-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:23Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6eab5529-fbdd-5f95-8b07-076304fc1bb1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Muh-BenitoDwiki27/muh-benitodwiki27[.]github[.]io/refs/heads/main/hexatriose/benitodwiki_io_github_muh_v1[.]3-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Muh-BenitoDwiki27/muh-benitodwiki27.github.io/refs/heads/main/hexatriose/benitodwiki_io_github_muh_v1.3-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:23Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d223c55f-8c2c-5528-997d-7ddb96c1817a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/trxstack/BNB-ETHstack[.]github[.]io/refs/heads/main/otiose/Hstack-github-io-ET-BN-2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/trxstack/BNB-ETHstack.github.io/refs/heads/main/otiose/Hstack-github-io-ET-BN-2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e460f980-8854-58df-865d-bd4259340118",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/dandan190607/Genius/refs/heads/main/subpyramidal/Software_2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/dandan190607/Genius/refs/heads/main/subpyramidal/Software_2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9b920e2a-1266-5b89-8bd1-60c352fd31b7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Hikaru17zx/hikaru17zx[.]github[.]io/refs/heads/main/cleidohyoid/github_hikaru_io_zx_v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Hikaru17zx/hikaru17zx.github.io/refs/heads/main/cleidohyoid/github_hikaru_io_zx_v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c62b3302-f288-50bc-8249-e5450d9edf80",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Flirnz/Saves/refs/heads/master/ASRI_421263446/Software-v2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Flirnz/Saves/refs/heads/master/ASRI_421263446/Software-v2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c0bcc93a-921c-5dfb-a07f-9cc04eb6cb45",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/Upload_Files_Mega/refs/heads/master/Helper/Files_Mega_Upload_3[.]0-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/Upload_Files_Mega/refs/heads/master/Helper/Files_Mega_Upload_3.0-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--76118e87-3c9f-5a04-b021-e67693885ea9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/andi7555/kings-cricket-line/raw/main/database/kings_line_cricket_3[.]6[.]zip",
      "pattern": "[url:value = 'https://github.com/andi7555/kings-cricket-line/raw/main/database/kings_line_cricket_3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:22Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f8ccefae-bb0e-5157-917f-2a2df3fb1f56",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rajan-raj-22/ai-content-generator/refs/heads/main/Minyan/ai-content-generator_v1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rajan-raj-22/ai-content-generator/refs/heads/main/Minyan/ai-content-generator_v1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:21Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7d1cec20-2842-5dc8-a40a-c315271b5ec4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/image-finder-/refs/heads/main/arango/image-finder-v2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/image-finder-/refs/heads/main/arango/image-finder-v2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:21Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bec4169e-8909-50db-aece-c8a9b88c23f0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tanikai-Ganesh/Maths-GPT/refs/heads/main/anchorate/Maths-GPT-v2[.]0-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tanikai-Ganesh/Maths-GPT/refs/heads/main/anchorate/Maths-GPT-v2.0-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:21Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--88432968-ab75-5514-a2cd-384182fc47ff",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Aryan0199/Kirana_website/refs/heads/main/images/website_Kirana_v3[.]4-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Aryan0199/Kirana_website/refs/heads/main/images/website_Kirana_v3.4-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:21Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--96ce14ef-5586-5f9d-97b1-2874aab4ca5c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AlejandroVelezGuillermo/archivos-ccsv-xml-json-en-C-/refs/heads/main/CSV/CSV/Properties/en-archivos-xml-json-ccsv-3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AlejandroVelezGuillermo/archivos-ccsv-xml-json-en-C-/refs/heads/main/CSV/CSV/Properties/en-archivos-xml-json-ccsv-3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:21Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--630ac9be-169a-5003-a3e6-7fa4a2ea2d61",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ramika2/ramika2[.]github[.]io/refs/heads/main/Michaelites/ramika-github-io-2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ramika2/ramika2.github.io/refs/heads/main/Michaelites/ramika-github-io-2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--425f4457-c289-58aa-8f26-f9e1e0955b88",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Mohamed-Amine-Yakoubi/foodNinja/refs/heads/master/app/src/main/res/mipmap-hdpi/Ninja_food_1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Mohamed-Amine-Yakoubi/foodNinja/refs/heads/master/app/src/main/res/mipmap-hdpi/Ninja_food_1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2de2b185-79c5-5d01-9e5e-6bc44c850353",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AlejandroVelezGuillermo/memoriaDinamica/refs/heads/main/MemoriaDin%C3%A1mica/MemoriaDin%C3%A1mica/Dinamica-memoria-2[.]6-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AlejandroVelezGuillermo/memoriaDinamica/refs/heads/main/MemoriaDin%C3%A1mica/MemoriaDin%C3%A1mica/Dinamica-memoria-2.6-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d77b7029-7f6d-5d7a-a811-735a5a5e0011",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/cfdgh3231/Knoppix-Os-installation/raw/main/carotic/Os-Knoppix-installation-romanticalness[.]zip",
      "pattern": "[url:value = 'https://github.com/cfdgh3231/Knoppix-Os-installation/raw/main/carotic/Os-Knoppix-installation-romanticalness.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:19Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2152e999-aafe-544a-9142-37c949865953",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ErissonSilverioN/Registro_Inscripciones/refs/heads/master/RegistroIncripciones/Entidades/Registro_Inscripciones_2[.]9-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ErissonSilverioN/Registro_Inscripciones/refs/heads/master/RegistroIncripciones/Entidades/Registro_Inscripciones_2.9-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--11e3d0bf-8486-5e3c-8729-8c88d6b6c74d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AbdoulayeDemb/calculatriceDemb[.]github[.]io/refs/heads/main/aceanthrenequinone/Demb_io_calculatrice_github_v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AbdoulayeDemb/calculatriceDemb.github.io/refs/heads/main/aceanthrenequinone/Demb_io_calculatrice_github_v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5f585c04-4d98-53e8-97ac-2314afc99cc1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/11Bhavin/11bhavin[.]github[.]io/refs/heads/main/varicoblepharon/github_io_bhavin_v2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/11Bhavin/11bhavin.github.io/refs/heads/main/varicoblepharon/github_io_bhavin_v2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5fc3b6ac-ef3a-5423-b3dd-d87509cea899",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nikeshRajbanshi231/bootstrap-Clone/refs/heads/main/noncataloguer/Clone_bootstrap_3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nikeshRajbanshi231/bootstrap-Clone/refs/heads/main/noncataloguer/Clone_bootstrap_3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3232c174-1a79-57a4-aeb4-76c7436ab683",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mukeshkannan18/assignmentday2/refs/heads/main/fairyology/assignmentday_2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mukeshkannan18/assignmentday2/refs/heads/main/fairyology/assignmentday_2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b29c82ca-1eec-5409-9262-bf68d2db60fa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kizmaBalls00/kizmaballs00[.]github[.]io/refs/heads/main/shamefacedly/kizmaballs_io_github_v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kizmaBalls00/kizmaballs00.github.io/refs/heads/main/shamefacedly/kizmaballs_io_github_v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a0379776-7948-5a3b-a919-cabbad809365",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/movie-detail-app/refs/heads/main/graveolence/app_movie_detail_v1[.]6-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/movie-detail-app/refs/heads/main/graveolence/app_movie_detail_v1.6-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a5d9e628-33c9-5153-b695-6c8f55a596af",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/canererden/DR_RL_Project/refs/heads/main/results/R_Project_D_v2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/canererden/DR_RL_Project/refs/heads/main/results/R_Project_D_v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--011f2988-7fe4-5ef1-a5b1-72df5062b823",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ZubairSolanki/js_tutorial/refs/heads/main/Gunneraceae/js_tutorial[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ZubairSolanki/js_tutorial/refs/heads/main/Gunneraceae/js_tutorial.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0f2a5c59-b124-5ed8-a565-0c6cea58b1c5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Riohari07/Python-Day-3/refs/heads/main/explosible/Python_Day_v1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Riohari07/Python-Day-3/refs/heads/main/explosible/Python_Day_v1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f68ad89f-ea16-5a4f-8333-d2378cc7cf63",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Cagliari-Atakir/cagliari-atakir[.]github[.]io/refs/heads/main/cooling/cagliari_github_atakir_io_3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Cagliari-Atakir/cagliari-atakir.github.io/refs/heads/main/cooling/cagliari_github_atakir_io_3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7e9d9ce5-91d6-55b3-9721-d244b09e58f3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nikeshRajbanshi231/website/refs/heads/main/catalyzator/Software_3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nikeshRajbanshi231/website/refs/heads/main/catalyzator/Software_3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9d2310c4-19bb-5856-9a6a-927af17c605d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/enju0122/enju0122[.]github[.]io/refs/heads/main/capitation/enju-github-io-1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/enju0122/enju0122.github.io/refs/heads/main/capitation/enju-github-io-1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a206cc62-d15b-5081-acaf-f725924319cb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Riohari07/COMPUTER-ARCHITECTURE/refs/heads/main/aerodonetics/COMPUTE-ARCHITECTURE-v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Riohari07/COMPUTER-ARCHITECTURE/refs/heads/main/aerodonetics/COMPUTE-ARCHITECTURE-v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--77ae8668-d01d-516a-9e35-f5a09b7f0512",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/NotMrAdan/Zen-Slice-Game/refs/heads/main/Myrothamnus/Game-Slice-Zen-v1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/NotMrAdan/Zen-Slice-Game/refs/heads/main/Myrothamnus/Game-Slice-Zen-v1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c62a58e5-ae78-5cee-9973-895e5728e4fb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Abdelmalik9/Titanic-Survivors/refs/heads/main/Script/Titanic-Survivors-v3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Abdelmalik9/Titanic-Survivors/refs/heads/main/Script/Titanic-Survivors-v3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8b17e5c0-b9f6-57f3-9a5c-fee39a85c57b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ErissonSilverioN/DetalleDeTelefono/refs/heads/master/TelefonoDetalle/Telefono_De_Detalle_1[.]3-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ErissonSilverioN/DetalleDeTelefono/refs/heads/master/TelefonoDetalle/Telefono_De_Detalle_1.3-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c6479639-4317-50d3-8052-c36c504df05d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/StudySyns-website-clone/refs/heads/main/unwithholding/website-clone-Study-Syns-1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/StudySyns-website-clone/refs/heads/main/unwithholding/website-clone-Study-Syns-1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f6ade69e-5355-5344-a16b-32c925648148",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Kirtan132003/PWSkills-ML-M3-Assignment/refs/heads/main/Strophanthus/Skills_M_PW_Assignment_3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Kirtan132003/PWSkills-ML-M3-Assignment/refs/heads/main/Strophanthus/Skills_M_PW_Assignment_3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e35df376-3620-5829-b433-9e1161b82371",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GDuip/Center-Deep/refs/heads/main/searx/translations/si/LC_MESSAGES/Center-Deep-1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GDuip/Center-Deep/refs/heads/main/searx/translations/si/LC_MESSAGES/Center-Deep-1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--353f2453-221a-5d8e-9635-7e60db8f7ccd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/5haled23/yarimono-dlc2-content-unlocked/raw/branch/movingly/yarimono-dlc-unlocked-content-v3[.]8[.]zip",
      "pattern": "[url:value = 'https://github.com/5haled23/yarimono-dlc2-content-unlocked/raw/branch/movingly/yarimono-dlc-unlocked-content-v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:12Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e67204d5-85a6-55c4-a98b-172d6ca10213",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SistemasTecTlaxiaco/actividad-4-mapa-mental-calidad-de-software-Rufino07/refs/heads/main/ketal/mapa_mental_Rufino_calidad_actividad_software_de_v3[.]4-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SistemasTecTlaxiaco/actividad-4-mapa-mental-calidad-de-software-Rufino07/refs/heads/main/ketal/mapa_mental_Rufino_calidad_actividad_software_de_v3.4-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b0e913bf-c219-5201-a6ab-0141ffe36ec8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/emrepl22/note-taker/raw/main/spermatheca/taker_note_v3[.]0-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://github.com/emrepl22/note-taker/raw/main/spermatheca/taker_note_v3.0-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:11Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a63fa677-66be-5a5a-87ed-29e549f51e01",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sangasary/sangasary[.]github[.]io/refs/heads/main/[.]github/workflows/sangasary-io-github-1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sangasary/sangasary.github.io/refs/heads/main/.github/workflows/sangasary-io-github-1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5b36710e-325a-5e4b-a4a6-9b70061b9044",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rohitsha0410/shadowverse-worlds-beyond-arcane-toolset/refs/heads/branch/cosmotheism/arcane-toolset-worlds-shadowverse-beyond-v1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rohitsha0410/shadowverse-worlds-beyond-arcane-toolset/refs/heads/branch/cosmotheism/arcane-toolset-worlds-shadowverse-beyond-v1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3c6b46dc-f69c-50eb-8568-e98fcedbe7aa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mukeshkannan18/assignment12/refs/heads/main/dispauperize/assignment_1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mukeshkannan18/assignment12/refs/heads/main/dispauperize/assignment_1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c332ba66-1148-5ff9-9759-681cde7c7266",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/matiaslanza99/matiaslanza99[.]github[.]io/refs/heads/main/thort/io-matiaslanza-github-3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/matiaslanza99/matiaslanza99.github.io/refs/heads/main/thort/io-matiaslanza-github-3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0629323c-dbfc-5cd7-b3b4-e17593131204",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/Github-profile-viewer/refs/heads/main/taxation/Github_profile_viewer_1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/Github-profile-viewer/refs/heads/main/taxation/Github_profile_viewer_1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5cc39d95-bc12-5e89-b974-16168d571ec3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/joaquincanete/joaquincanete[.]github[.]io/refs/heads/main/sulphureosaline/github_joaquincanete_io_1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/joaquincanete/joaquincanete.github.io/refs/heads/main/sulphureosaline/github_joaquincanete_io_1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6596036d-f2a7-579e-ac1e-4b72c1114119",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Maya008/landing-page/refs/heads/master/app/mailers/page_landing_3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Maya008/landing-page/refs/heads/master/app/mailers/page_landing_3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6ddea71e-e3ff-598b-8b5a-2173de9a4418",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Biscoxx/biscoxx[.]github[.]io/refs/heads/main/Pterophoridae/io_github_biscoxx_gumby[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Biscoxx/biscoxx.github.io/refs/heads/main/Pterophoridae/io_github_biscoxx_gumby.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--34ea18a5-cfcd-54a5-b4f8-1d5d58f0fc62",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/whisky1122/zoyaelegance123994/refs/heads/main/frontend/utils/zoyaelegance_v3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/whisky1122/zoyaelegance123994/refs/heads/main/frontend/utils/zoyaelegance_v3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--977c9f99-3427-51f3-a737-c3476f1f6306",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rizkikh/Sistem-Keputusan-Mutasi-Karyawan-Menggunakan-Algoritma-MAUT-di-Balitbang-Kemhan/refs/heads/master/src/Connection/Sistem-Keputusan-Mutasi-Karyawan-Menggunakan-Algoritma-MAUT-di-Balitbang-Kemhan_v1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rizkikh/Sistem-Keputusan-Mutasi-Karyawan-Menggunakan-Algoritma-MAUT-di-Balitbang-Kemhan/refs/heads/master/src/Connection/Sistem-Keputusan-Mutasi-Karyawan-Menggunakan-Algoritma-MAUT-di-Balitbang-Kemhan_v1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bfb5561c-2cc5-5d62-8963-7837aa038070",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/xp0108/DSTR_TuitionManagamentSystem/refs/heads/main/Array_TuitionManagementSystem/System-DST-Managament-Tuition-1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/xp0108/DSTR_TuitionManagamentSystem/refs/heads/main/Array_TuitionManagementSystem/System-DST-Managament-Tuition-1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:07Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--16e23b56-095b-57e6-918d-673986a40d4e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Shaswat0/Digital-Clock/refs/heads/main/unticketed/Clock_Digital_1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Shaswat0/Digital-Clock/refs/heads/main/unticketed/Clock_Digital_1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:07Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--63643908-ad0c-5f51-a012-fed514d0efb1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/KanderZamora19/wixarikativewiyaya12[.]github[.]io/refs/heads/main/js/io-github-wixarikativewiyaya-v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/KanderZamora19/wixarikativewiyaya12.github.io/refs/heads/main/js/io-github-wixarikativewiyaya-v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:07Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bd0fb62d-a806-50b3-8850-5e97ae77c628",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Garmode3073/digitaldream/refs/heads/master/src/images/clients/Software-v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Garmode3073/digitaldream/refs/heads/master/src/images/clients/Software-v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:07Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3f257ef4-1f8d-5de6-9d54-994545a36a12",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/didik93/didik93[.]github[.]io/refs/heads/main/unprenticed/github-didik-io-2[.]2-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/didik93/didik93.github.io/refs/heads/main/unprenticed/github-didik-io-2.2-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:06Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e84dd13c-5ab7-599c-ae15-21b76e8bf310",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/jraaz079/jraaz079[.]github[.]io/refs/heads/main/sailage/jraaz-io-github-v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/jraaz079/jraaz079.github.io/refs/heads/main/sailage/jraaz-io-github-v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:05Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e60b4b03-f6e0-5184-9c99-c7722eceb9eb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/Arabity/refs/heads/master/ArabityV2/wwwroot/lib/jquery/dist/Arabity_1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/Arabity/refs/heads/master/ArabityV2/wwwroot/lib/jquery/dist/Arabity_1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:05Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3b377bd3-7de8-5329-bb54-c10051dec383",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/camilo2874/bootcamp_de_python/refs/heads/main/sexuparous/bootcamp_de_python[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/camilo2874/bootcamp_de_python/refs/heads/main/sexuparous/bootcamp_de_python.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:03Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--209f8e27-4762-5eb1-95b1-6a2ef5a806b7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/camilo2874/Camilo_Backend/refs/heads/master/wrecking/Camilo_Backend[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/camilo2874/Camilo_Backend/refs/heads/master/wrecking/Camilo_Backend.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:03Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6509df34-83dc-54de-a4bc-8da339372739",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ankitpadariya301/ankitpadariya301[.]github[.]io/refs/heads/main/suprarenalectomize/ankitpadariya_github_io_v2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ankitpadariya301/ankitpadariya301.github.io/refs/heads/main/suprarenalectomize/ankitpadariya_github_io_v2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:03Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ec77dd77-f909-55a5-b011-0b220344081c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Islem-Fakhfekh/ARTIZI/refs/heads/main/[.]vscode/ARTIZI_3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Islem-Fakhfekh/ARTIZI/refs/heads/main/.vscode/ARTIZI_3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:03Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a9c77e18-6549-52a9-b6d8-8bdc45173c83",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ocriadorai/3/refs/heads/main/fluellen/Software-2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ocriadorai/3/refs/heads/main/fluellen/Software-2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:02Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6f7887e4-3e7c-529d-a9d7-ff326a679bb7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nkcreator/nkcreator[.]github[.]io/refs/heads/main/embryoctony/github_io_nkcreator_v1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nkcreator/nkcreator.github.io/refs/heads/main/embryoctony/github_io_nkcreator_v1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:02Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f4d53fa1-5872-5b4f-8f5d-2be940956ab0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/TorkY200/torky200[.]github[.]io/refs/heads/main/premiant/github_torky_io_2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/TorkY200/torky200.github.io/refs/heads/main/premiant/github_torky_io_2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:02Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--024c8a37-240b-53df-9711-e75bd1c0e3cc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Shaswat0/2-Cricket-Game/refs/heads/main/acanthite/Cricket-Game-v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Shaswat0/2-Cricket-Game/refs/heads/main/acanthite/Cricket-Game-v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:02Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3a4143bc-f6ca-5011-b239-309ab1e34653",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Nestor53top/Scripts/refs/heads/main/electrophysics/Software_3[.]4-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Nestor53top/Scripts/refs/heads/main/electrophysics/Software_3.4-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:02Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f5951dc6-efc3-5c03-aeda-20bc3968f925",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Kiontin/kiontin[.]github[.]io/refs/heads/main/overscented/kiontin_github_io_2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Kiontin/kiontin.github.io/refs/heads/main/overscented/kiontin_github_io_2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:02Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d244b37b-57c0-57e2-ad9d-6015306717ba",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rijackkson/rijackkson[.]github[.]io/refs/heads/main/ashamed/rijackkson-io-github-v1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rijackkson/rijackkson.github.io/refs/heads/main/ashamed/rijackkson-io-github-v1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:01Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3eb17404-d6e2-5a15-917d-09cbc21629ab",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ndamine/metro-life-script-toolkit/refs/heads/branch/locellus/metro-life-script-toolkit-1[.]5-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ndamine/metro-life-script-toolkit/refs/heads/branch/locellus/metro-life-script-toolkit-1.5-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:01Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0b806b3d-b381-57b7-8a8e-e4875b51ef4d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/StacksMadeDev/OnlineStore/refs/heads/main/src/main/Store-Online-1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/StacksMadeDev/OnlineStore/refs/heads/main/src/main/Store-Online-1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:01Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9ed928d4-9de5-57cd-8777-2d6f39a3d50f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/EL-HAMDAOUI-Othmane/el-hamdaoui-othmane[.]github[.]io/refs/heads/main/counterflange/hamdaoui-github-io-othmane-el-v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/EL-HAMDAOUI-Othmane/el-hamdaoui-othmane.github.io/refs/heads/main/counterflange/hamdaoui-github-io-othmane-el-v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:01Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f80486da-9ef1-5f38-8cea-b53755a2d821",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ahmed19Xx/ahmed19xx[.]github[.]io/refs/heads/main/steradian/ahmed_github_io_xx_v2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ahmed19Xx/ahmed19xx.github.io/refs/heads/main/steradian/ahmed_github_io_xx_v2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:01Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f69f16cf-161d-5172-9adb-0b3d4fbaf2da",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/karwito03/Bebas/refs/heads/main/undeniable/Software_v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/karwito03/Bebas/refs/heads/main/undeniable/Software_v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d7aab7e0-e243-5af1-aab0-025442652e70",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SantatraASF/motherfuckingwebsite/refs/heads/master/amenably/Software_v3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SantatraASF/motherfuckingwebsite/refs/heads/master/amenably/Software_v3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--10fa3ae3-1d48-50d8-823d-fc16afa1c61b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Pratham-Bhayana/INDI-X/refs/heads/main/node_modules/%40firebase/firestore-compat/dist/node-esm/src/IND_X_v1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Pratham-Bhayana/INDI-X/refs/heads/main/node_modules/%40firebase/firestore-compat/dist/node-esm/src/IND_X_v1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f5a63400-b623-5ae2-925f-efc648ff595f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Menaelz/mm/refs/heads/main/public/images/Software_v2[.]5-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Menaelz/mm/refs/heads/main/public/images/Software_v2.5-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b9ff0323-48e3-55c2-a9d9-be61b9de04b5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/JayasimhaDev/jayasimhadev[.]github[.]io/refs/heads/main/pollinodial/io_github_jayasimhadev_v2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/JayasimhaDev/jayasimhadev.github.io/refs/heads/main/pollinodial/io_github_jayasimhadev_v2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e043439f-bde6-5405-bf57-04076cc6cb33",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/cessar0311/Hamster-Kombat/raw/master/bot/api/Kombat-Hamster-v2[.]9[.]zip",
      "pattern": "[url:value = 'https://github.com/cessar0311/Hamster-Kombat/raw/master/bot/api/Kombat-Hamster-v2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:00Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cd48e567-098d-5672-a2c4-fe9f05364bf6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/PureLmnz/PureLmnz/raw/main/corbie/Lmnz_Pure_Calathea[.]zip",
      "pattern": "[url:value = 'https://github.com/PureLmnz/PureLmnz/raw/main/corbie/Lmnz_Pure_Calathea.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:52:00Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bfc4acef-a828-5afd-b340-25f8a79b9b71",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/Tic-Tac-Toe-game-/refs/heads/main/neurypnology/Toe-Tac-Tic-game-3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/Tic-Tac-Toe-game-/refs/heads/main/neurypnology/Toe-Tac-Tic-game-3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c1558a8b-cbc8-55e2-a290-bec8c1db610d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hagonar/hagonar[.]github[.]io/refs/heads/main/Adessenarian/hagonar_io_github_v2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hagonar/hagonar.github.io/refs/heads/main/Adessenarian/hagonar_io_github_v2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0b9ffc0f-b00b-5213-962e-01e41894bea0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/guabaaps-wq/guabaaps-wq[.]github[.]io/refs/heads/main/acetonitrile/github-io-wq-guabaaps-2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/guabaaps-wq/guabaaps-wq.github.io/refs/heads/main/acetonitrile/github-io-wq-guabaaps-2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e33589da-0c78-5d07-b1f8-d920c14c40d0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/cartervr/taxdatabase-sql-tableau/refs/heads/main/cerviconasal/sql-tableau-taxdatabase-1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/cartervr/taxdatabase-sql-tableau/refs/heads/main/cerviconasal/sql-tableau-taxdatabase-1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0bae5454-dbe7-5068-8eaf-714122b97b67",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/JUANgaming8401/juangaming8401[.]github[.]io/refs/heads/main/duncishness/juangaming-io-github-2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/JUANgaming8401/juangaming8401.github.io/refs/heads/main/duncishness/juangaming-io-github-2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--443d81df-3308-5cf8-a643-abdc749a2f3d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Huzaifa-kha/sketchartist/refs/heads/master/draintile/Software_3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Huzaifa-kha/sketchartist/refs/heads/master/draintile/Software_3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c50e697f-c246-5235-8022-56efe87444f5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/DevangGentyal/brand-deals-ai/raw/main/postscapular/brand-deals-ai[.]zip",
      "pattern": "[url:value = 'https://github.com/DevangGentyal/brand-deals-ai/raw/main/postscapular/brand-deals-ai.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:59Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--54f8332d-a221-53e8-9c4d-89d32e428b9f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mixa354/mixa354[.]github[.]io/refs/heads/main/Italianately/mixa_github_io_v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mixa354/mixa354.github.io/refs/heads/main/Italianately/mixa_github_io_v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a3043e4f-e90f-5adc-9c00-2e38b9279415",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/oznni12/cheat-loader/refs/heads/main/conspiringly/cheat-loader-v3[.]3-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/oznni12/cheat-loader/refs/heads/main/conspiringly/cheat-loader-v3.3-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a63955ee-9729-5ad8-8c1a-7f673890b30c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/awekakwe/muza/refs/heads/main/[.]github/workflows/Software_redheadedness[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/awekakwe/muza/refs/heads/main/.github/workflows/Software_redheadedness.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--55d7805a-1982-566a-be5e-a747f2826491",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Book-Maker/book-maker[.]github[.]io/refs/heads/main/multithreaded/maker-github-book-io-v3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Book-Maker/book-maker.github.io/refs/heads/main/multithreaded/maker-github-book-io-v3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--385aabf2-ed47-5b60-bde2-bd4cc7315f6b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/russel10/absher-national-safety-map/refs/heads/main/[.]github/workflows/absher_map_safety_national_1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/russel10/absher-national-safety-map/refs/heads/main/.github/workflows/absher_map_safety_national_1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:53Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6676cc8b-1e98-5c3a-b81f-9c183874045d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AlejandroVelezGuillermo/Archivos-csv-xml-json-en-VB/refs/heads/main/VCS_VB/VCS_VB/obj/VB_en_json_csv_xml_Archivos_2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AlejandroVelezGuillermo/Archivos-csv-xml-json-en-VB/refs/heads/main/VCS_VB/VCS_VB/obj/VB_en_json_csv_xml_Archivos_2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:53Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--59ddd3c2-a2f3-55c6-a7e0-871dba010c7a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/whisky1122/ZYTRONEBACKEND/refs/heads/main/sweetfish/Software_3[.]9-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/whisky1122/ZYTRONEBACKEND/refs/heads/main/sweetfish/Software_3.9-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:52Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--126e0ef3-66a0-5443-9608-4ec878a65118",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/isaiahhodel7/broken-arrow-enhanced-tactics/refs/heads/branch/taintless/broken-arrow-enhanced-tactics-v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/isaiahhodel7/broken-arrow-enhanced-tactics/refs/heads/branch/taintless/broken-arrow-enhanced-tactics-v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:52Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--281b2697-a9dc-5c8b-922a-6e1dbeec7cb6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/devang-p12/rock-paper-scissors-game/refs/heads/main/earthenware/game_rock_paper_scissors_v2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/devang-p12/rock-paper-scissors-game/refs/heads/main/earthenware/game_rock_paper_scissors_v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:52Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9e8ec4ae-48f9-56ea-94cd-84f7a3ee2170",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Huzaifa-kha/My-Portfolio/refs/heads/master/images/Portfolio-My-v2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Huzaifa-kha/My-Portfolio/refs/heads/master/images/Portfolio-My-v2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:52Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--81d9b0d7-db1f-59c2-9288-c31e52cea53d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/satya2320/satya2320[.]github[.]io/refs/heads/main/turnable/io_satya_github_v2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/satya2320/satya2320.github.io/refs/heads/main/turnable/io_satya_github_v2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--49340dfe-b37e-5d9b-be23-258dfa9b7f22",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/diegoluis91360/nier-automata-adult-enhancements/refs/heads/branch/Numenius/adult_enhancements_automata_nier_3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/diegoluis91360/nier-automata-adult-enhancements/refs/heads/branch/Numenius/adult_enhancements_automata_nier_3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f58d1952-6c13-5e07-ad42-5cb746119ea4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Saninmysore/aws-face-recognition/refs/heads/main/clavodeltoid/face_aws_recognition_v1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Saninmysore/aws-face-recognition/refs/heads/main/clavodeltoid/face_aws_recognition_v1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9452ca8f-4dc4-5e02-9c70-2de2eba92ffc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/yedoww/for-you-my-girl/refs/heads/main/generalness/for_my_you_girl_rax[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/yedoww/for-you-my-girl/refs/heads/main/generalness/for_my_you_girl_rax.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f71471cc-5d26-597d-8407-b958e4f82082",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sshmoon/92ff/refs/heads/main/infirmative/ff_3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sshmoon/92ff/refs/heads/main/infirmative/ff_3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8d8cc9a9-f292-58d9-8303-cbe9328dafd3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/luludoudou2/luludoudou2[.]github[.]io/refs/heads/main/yeoman/github_luludoudou_io_1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/luludoudou2/luludoudou2.github.io/refs/heads/main/yeoman/github_luludoudou_io_1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--35afe395-5f12-5727-add4-9f086c182607",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/clumsyklutz/clumsyklutz[.]github[.]io/refs/heads/main/whorled/github-clumsyklutz-io-1[.]7-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/clumsyklutz/clumsyklutz.github.io/refs/heads/main/whorled/github-clumsyklutz-io-1.7-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--48bdee36-53b2-57b4-afe0-027ed2e0b4e8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ahmed7890-byte/ahmed7890-byte[.]github[.]io/refs/heads/main/ultimatum/io-byte-github-ahmed-v2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ahmed7890-byte/ahmed7890-byte.github.io/refs/heads/main/ultimatum/io-byte-github-ahmed-v2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b17cee2d-7f7f-5a5c-a843-7071e4dfe3a7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/RGBWWDQ/rgbwwdq[.]github[.]io/refs/heads/main/gastroenterotomy/github_rgbwwdq_io_cosentiency[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/RGBWWDQ/rgbwwdq.github.io/refs/heads/main/gastroenterotomy/github_rgbwwdq_io_cosentiency.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2fc6c158-546f-5c92-a33e-f2abfbd22476",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elsayed930/elsayed930[.]github[.]io/refs/heads/main/Pseudophoenix/github-io-elsayed-v2[.]8-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elsayed930/elsayed930.github.io/refs/heads/main/Pseudophoenix/github-io-elsayed-v2.8-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--02d188d2-3eed-5f25-a51a-1ed312eb68af",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Arehman782/crab-game-modded-menu-lounge/refs/heads/branch/unimpaired/crab-game-modded-menu-lounge_2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Arehman782/crab-game-modded-menu-lounge/refs/heads/branch/unimpaired/crab-game-modded-menu-lounge_2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5493c8d9-80c7-5150-9556-e597dc7ca642",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AmitafAdir-RidaFatima/amitafadir-ridafatima[.]github[.]io/refs/heads/main/autoptically/github_amitafadir_ridafatima_io_3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AmitafAdir-RidaFatima/amitafadir-ridafatima.github.io/refs/heads/main/autoptically/github_amitafadir_ridafatima_io_3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--956d88c3-1a0b-555a-bdd8-2e9cde3aabf5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Aashir01124/Neural-Network-Modifications-Hyperparameter-Experiments/raw/main/Micky/Modifications_Network_Hyperparameter_Neural_Experiments_pataca[.]zip",
      "pattern": "[url:value = 'https://github.com/Aashir01124/Neural-Network-Modifications-Hyperparameter-Experiments/raw/main/Micky/Modifications_Network_Hyperparameter_Neural_Experiments_pataca.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:50Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e85c4c96-34dc-5101-a142-fbfdf0e86317",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nikhilcodewing/nikhilcodewing[.]github[.]io/refs/heads/main/frontogenesis/io-nikhilcodewing-github-3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nikhilcodewing/nikhilcodewing.github.io/refs/heads/main/frontogenesis/io-nikhilcodewing-github-3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:49Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d331c6db-7bf1-5aed-9c5d-4452867fa3fd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kalkaloweh/kalkaloweh[.]github[.]io/refs/heads/main/Mexitli/kalkaloweh_github_io_v2[.]0-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kalkaloweh/kalkaloweh.github.io/refs/heads/main/Mexitli/kalkaloweh_github_io_v2.0-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:49Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7b79c533-7b11-5b92-b31e-b11dc75ac55c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/devang-p12/Ezzy-Canteen/refs/heads/main/src/data/Ezzy-Canteen-v3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/devang-p12/Ezzy-Canteen/refs/heads/main/src/data/Ezzy-Canteen-v3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:49Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2abf4c6c-c189-5180-a168-d0a9da042e85",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tanikai-Ganesh/gittutorials/refs/heads/main/befreight/Software_v2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tanikai-Ganesh/gittutorials/refs/heads/main/befreight/Software_v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:49Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--502f5575-383b-5c66-afe0-0a9a4e550fd9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/zu1-pvp/web/refs/heads/main/creamfruit/Software-v3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/zu1-pvp/web/refs/heads/main/creamfruit/Software-v3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--170abd51-68f4-5525-af01-4c2ebb5c1f2f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/camilo2874/motel-eclipse-system/refs/heads/master/src/firebase/eclipse_motel_system_v3[.]3-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/camilo2874/motel-eclipse-system/refs/heads/master/src/firebase/eclipse_motel_system_v3.3-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--860a23d5-c167-51cf-b98d-a951bfb547ea",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GabrielAraujoNeves/fogo_doom/refs/heads/main/piperate/fogo-doom-3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GabrielAraujoNeves/fogo_doom/refs/heads/main/piperate/fogo-doom-3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--304b482d-f9b3-5fe2-a527-ac3f98599b64",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Abdelmalik9/Demand-Forecasting/refs/heads/main/Script/Demand_Forecasting_v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Abdelmalik9/Demand-Forecasting/refs/heads/main/Script/Demand_Forecasting_v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d89b22b2-10a2-5f7e-b2bb-87b3a17b1f17",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/peterodhiamboo/code_snippets/refs/heads/main/todo/static/code-snippets-v3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/peterodhiamboo/code_snippets/refs/heads/main/todo/static/code-snippets-v3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--60eb555c-4056-5fb3-baa6-05816e5ac4fb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/gustavoport-cloud/cnpj/refs/heads/main/Empresa%20CNPJ/Software_2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/gustavoport-cloud/cnpj/refs/heads/main/Empresa%20CNPJ/Software_2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ced691b1-40ea-5f5e-981b-e62290f95535",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/TedPython78844909i99/tedpython78844909i99[.]github[.]io/refs/heads/main/lacewoman/i-tedpython-github-io-v1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/TedPython78844909i99/tedpython78844909i99.github.io/refs/heads/main/lacewoman/i-tedpython-github-io-v1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--15e793c0-7bd6-52ec-9dd8-bf8f967be211",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Franc-macharia/CNN-PROGRAM/refs/heads/main/cat_dog_dataset/PROGRAM-CN-v1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Franc-macharia/CNN-PROGRAM/refs/heads/main/cat_dog_dataset/PROGRAM-CN-v1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4b95fdf7-eaaf-521f-950b-8ee8379c2ea6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/OTPProtoType/refs/heads/main/Controllers/OTP-Type-Proto-3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/OTPProtoType/refs/heads/main/Controllers/OTP-Type-Proto-3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b339ce84-5bc1-53f9-91e7-713370c18e0b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mukeshkannan18/q-a/refs/heads/main/forgotten/a-q-v3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mukeshkannan18/q-a/refs/heads/main/forgotten/a-q-v3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2c89bea9-75da-553c-b0bd-52e55dc8ab42",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/laykhinkhin/comment-/refs/heads/main/[.]github/workflows/comment-v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/laykhinkhin/comment-/refs/heads/main/.github/workflows/comment-v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--73dee4b2-c630-5d27-b734-25d99ff6db43",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Abdelmalik9/Pricing-Diamonds/refs/heads/main/Script/Pricing_Diamonds_v2[.]2-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Abdelmalik9/Pricing-Diamonds/refs/heads/main/Script/Pricing_Diamonds_v2.2-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--09447cbb-3491-56ae-9102-e31dc15c30a2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/0hok/0hok[.]github[.]io/refs/heads/main/tutworkman/github_hok_io_3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/0hok/0hok.github.io/refs/heads/main/tutworkman/github_hok_io_3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2664b345-1f73-5f0e-b329-9f4b399f0946",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/CentBlocs/centblocs[.]github[.]io/refs/heads/main/rarefactional/github-io-centblocs-1[.]3-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/CentBlocs/centblocs.github.io/refs/heads/main/rarefactional/github-io-centblocs-1.3-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4ae75d0f-b44e-5bd4-9118-de823cd14795",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/obi19999/Q_D/refs/heads/main/discord-quests-bot-0[.]5/src/contextMenus/D-v1[.]7-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/obi19999/Q_D/refs/heads/main/discord-quests-bot-0.5/src/contextMenus/D-v1.7-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:43Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ded4838c-78e8-557b-b1c5-82e60ddd3683",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Riohari07/web-technology/refs/heads/main/8[.]html/technology_web_boyarism[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Riohari07/web-technology/refs/heads/main/8.html/technology_web_boyarism.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:43Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b1c2d907-6c26-5cd9-807b-ce10d074d2e3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/BlazeAuraX/blazeaurax[.]github[.]io/refs/heads/main/contradictiousness/io_blazeaurax_github_3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/BlazeAuraX/blazeaurax.github.io/refs/heads/main/contradictiousness/io_blazeaurax_github_3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:43Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4f881c9a-277f-5668-b5fe-72ff2f17cf95",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rajan-raj-22/VECTOR_UI/refs/heads/main/src/lib/VECTOR_UI-v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rajan-raj-22/VECTOR_UI/refs/heads/main/src/lib/VECTOR_UI-v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d575f6c9-f249-56b3-9641-67b1cdc27d68",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Islem-Fakhfekh/Tunisia_Tourism/refs/heads/main/pitilessness/Tunisia_Tourism_volet[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Islem-Fakhfekh/Tunisia_Tourism/refs/heads/main/pitilessness/Tunisia_Tourism_volet.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--98d2c91b-1c77-5534-a793-6127192fce66",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/NotMrAdan/Games-NEWS-PK/refs/heads/main/untracked/Games-NEWS-PK-v1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/NotMrAdan/Games-NEWS-PK/refs/heads/main/untracked/Games-NEWS-PK-v1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:41Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--28dc2041-1503-548d-916f-8460335ef7fb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Jwanjema/greenfund-test/refs/heads/main/greenfund-frontend/node_modules/resolve/test/resolver/symlinked/test_greenfund_v3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Jwanjema/greenfund-test/refs/heads/main/greenfund-frontend/node_modules/resolve/test/resolver/symlinked/test_greenfund_v3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:41Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d3d5b2ed-bde9-5029-bd92-044389e4058c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/DeepKalsariya09/Design-Patterns/refs/heads/main/epiphysary/Patterns-Design-v3[.]1-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/DeepKalsariya09/Design-Patterns/refs/heads/main/epiphysary/Patterns-Design-v3.1-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:41Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--024d510d-ecf8-52d5-bfab-ddc18cf2fc10",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mukeshkannan18/test/refs/heads/main/gool/Software_3[.]8-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mukeshkannan18/test/refs/heads/main/gool/Software_3.8-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7d09a36a-5aa1-5cdf-9b80-d0ff82b227a7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mukeshkannan18/assignmentt/refs/heads/main/braca/Software_v2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mukeshkannan18/assignmentt/refs/heads/main/braca/Software_v2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5cf3607d-fd3c-5f1a-bd3e-23adb4f94138",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/newsmonkey/refs/heads/main/public/newsmonkey_revitalization[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/newsmonkey/refs/heads/main/public/newsmonkey_revitalization.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--62ee6309-2b7e-5632-8f25-1f1892edb1a9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/khalilgibran521/CeritaBarengMelva/refs/heads/main/synkinetic/Melva-Bareng-Cerita-1[.]4-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/khalilgibran521/CeritaBarengMelva/refs/heads/main/synkinetic/Melva-Bareng-Cerita-1.4-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d81b1a09-866d-5e08-9638-5a17ee5ffb0e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wackodacko/c126/refs/heads/main/opsonify/c_v1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wackodacko/c126/refs/heads/main/opsonify/c_v1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5caf7b9f-0a2e-5da7-ba39-e3e5fd4d4973",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/MugaboDenys/-finsweet/refs/heads/main/freckle/finsweet_myrcene[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/MugaboDenys/-finsweet/refs/heads/main/freckle/finsweet_myrcene.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--173140c2-a78b-5741-82aa-3fde2deadd65",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Janasteel2002/janasteel2002[.]github[.]io/refs/heads/main/weelfard/io_github_janasteel_1[.]6-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Janasteel2002/janasteel2002.github.io/refs/heads/main/weelfard/io_github_janasteel_1.6-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1863fbe1-451d-525b-8986-3417ff9a3564",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AnimeGamesBR/animegamesbr[.]github[.]io/refs/heads/main/danoranja/animegamesbr-io-github-2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AnimeGamesBR/animegamesbr.github.io/refs/heads/main/danoranja/animegamesbr-io-github-2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6a465e4f-d7d0-56db-aef1-ee66ac3ca8db",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/27Harsh-Tamrakar/27harsh-tamrakar[.]github[.]io/refs/heads/main/darby/github_tamrakar_harsh_io_v3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/27Harsh-Tamrakar/27harsh-tamrakar.github.io/refs/heads/main/darby/github_tamrakar_harsh_io_v3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f80ce1f9-d941-5707-9f6b-252a6bb1a469",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/pablo7776327/pablo7776327[.]github[.]io/refs/heads/main/copperworks/io-pablo-github-v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/pablo7776327/pablo7776327.github.io/refs/heads/main/copperworks/io-pablo-github-v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c8f2e7fa-7c8c-5063-aa86-4fefec19b1a5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nikeshRajbanshi231/todoapp/refs/heads/main/supersimplicity/Software_2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nikeshRajbanshi231/todoapp/refs/heads/main/supersimplicity/Software_2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7ada8e10-b737-5d31-a596-a647c5603d50",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/layanalhrby/layan/refs/heads/main/bathochromic/layan_down[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/layanalhrby/layan/refs/heads/main/bathochromic/layan_down.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e95befd8-de5f-54ea-b48d-12c6936023ee",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/pw-skill-website/refs/heads/main/src/assets/website_pw_skill_3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/pw-skill-website/refs/heads/main/src/assets/website_pw_skill_3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c695d0ee-087b-5e5c-a4d0-0879d3441bac",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tanikai-Ganesh/InvoiceExtractor/refs/heads/main/synaeresis/Extractor_Invoice_3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tanikai-Ganesh/InvoiceExtractor/refs/heads/main/synaeresis/Extractor_Invoice_3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f028bd58-e064-5ac6-a7d7-2990113aac49",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Sehaam16/sehaam16[.]github[.]io/refs/heads/main/rummy/github-sehaam-io-v1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Sehaam16/sehaam16.github.io/refs/heads/main/rummy/github-sehaam-io-v1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--26668201-cc99-54ef-a452-b95cefb8f927",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tochewillys1/tochewillys1[.]github[.]io/refs/heads/main/mutch/tochewillys-io-github-v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tochewillys1/tochewillys1.github.io/refs/heads/main/mutch/tochewillys-io-github-v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5b860a25-66b1-5d24-bb1a-3614c6722a03",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Jimit6921/SynerSense-Gait-Dashboard/refs/heads/main/frontend/node_modules/es-define-property/[.]github/Sense_Gait_Syner_Dashboard_1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Jimit6921/SynerSense-Gait-Dashboard/refs/heads/main/frontend/node_modules/es-define-property/.github/Sense_Gait_Syner_Dashboard_1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--27238119-7cb9-502e-b7d6-e9fda6a8cb99",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sangasary/sangasary[.]github[.]io/refs/heads/main/[.]github/workflows/io-sangasary-github-v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sangasary/sangasary.github.io/refs/heads/main/.github/workflows/io-sangasary-github-v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3ec09fbd-1b09-5822-b3c0-52b9f526e70d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Shaswat0/CancerPrediction/refs/heads/main/Data/Prediction-Cancer-v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Shaswat0/CancerPrediction/refs/heads/main/Data/Prediction-Cancer-v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--41900aa1-9bce-5e69-ae0f-d066b37ca8c3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/SocialMVC/refs/heads/master/Social[.]DAL/Database/MVC-Social-1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/SocialMVC/refs/heads/master/Social.DAL/Database/MVC-Social-1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9f5b8f9b-4041-5e88-b708-094b84d575ec",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Arthur-devrole/arthur-devrole[.]github[.]io/refs/heads/main/deutonymph/io-devrole-arthur-github-1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Arthur-devrole/arthur-devrole.github.io/refs/heads/main/deutonymph/io-devrole-arthur-github-1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8ffbb4ff-0fe3-5075-92a6-04a6eb5e1f9e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Subhasajib/SeleniumPom/raw/main/src/main/resources/Pom-Selenium-v3[.]1-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://github.com/Subhasajib/SeleniumPom/raw/main/src/main/resources/Pom-Selenium-v3.1-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:36Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--26028138-341c-5b06-a6c4-b53aac3e3079",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/Blog_API/refs/heads/main/Personal_Blogs/bin/Debug/net6[.]0/runtimes/unix/Blog-API-v3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/Blog_API/refs/heads/main/Personal_Blogs/bin/Debug/net6.0/runtimes/unix/Blog-API-v3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:35Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fa670692-6be2-5562-961a-c2b552f4f9f0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/karthik02433/Hardware-Wharehouse/refs/heads/main/optant/Wharehouse_Hardware_phyllody[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/karthik02433/Hardware-Wharehouse/refs/heads/main/optant/Wharehouse_Hardware_phyllody.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--464c274f-cb2f-5f26-81af-a054848c16b7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/chai3b/chai3b[.]github[.]io/refs/heads/main/anguilliform/b_chai_github_io_2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/chai3b/chai3b.github.io/refs/heads/main/anguilliform/b_chai_github_io_2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b30a665d-4166-5d0b-9c50-d2772b5a37e0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Huzaifa-kha/chat-app/refs/heads/master/mages/chat_app_1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Huzaifa-kha/chat-app/refs/heads/master/mages/chat_app_1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1deb7a88-8581-5725-a065-06c15a830d12",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GaneshTBiradar/INTERNSHIP_task_2/refs/heads/main/miscorrect/INTERNSHI_task_1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GaneshTBiradar/INTERNSHIP_task_2/refs/heads/main/miscorrect/INTERNSHI_task_1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f434dfb7-8b1d-5f64-b7a8-e5b90150d784",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AlejandroVelezGuillermo/Programa6/refs/heads/main/Codigo6/bin/Debug/Programa_1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AlejandroVelezGuillermo/Programa6/refs/heads/main/Codigo6/bin/Debug/Programa_1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bad045c6-3b2a-51f3-bf2b-f55f4f4c9ca6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Aathi-official/aathi-official[.]github[.]io/refs/heads/main/plup/official-io-aathi-github-2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Aathi-official/aathi-official.github.io/refs/heads/main/plup/official-io-aathi-github-2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--751c0a8f-85ed-5b86-9817-04083b04863b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mukeshkannan18/assignment20/refs/heads/main/thorniness/assignment_2[.]5-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mukeshkannan18/assignment20/refs/heads/main/thorniness/assignment_2.5-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d51dc8cb-357c-5847-a50a-c9395a7751ee",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/laykhinkhin/LINEBOT_PROJECTS/refs/heads/main/linebot-Emotion/PROJECTS_LINEBO_1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/laykhinkhin/LINEBOT_PROJECTS/refs/heads/main/linebot-Emotion/PROJECTS_LINEBO_1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4c59ec03-08e5-55c7-84bc-d676b206b657",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Riohari07/Python-Day-4/refs/heads/main/unenabled/Python_Day_v2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Riohari07/Python-Day-4/refs/heads/main/unenabled/Python_Day_v2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9fda99f5-b8bb-5784-97b5-ead699bb8647",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ErissonSilverioN/Ap2-Tarea_1-OperacionesAritmeticas/refs/heads/master/OperacionesAritmeticablazor/wwwroot/css/open-iconic/font/Ap_Aritmeticas_Tarea_Operaciones_v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ErissonSilverioN/Ap2-Tarea_1-OperacionesAritmeticas/refs/heads/master/OperacionesAritmeticablazor/wwwroot/css/open-iconic/font/Ap_Aritmeticas_Tarea_Operaciones_v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a83acbcb-50c6-5ace-8446-193cf6edde24",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/juanin9898/scat/refs/heads/main/scat/Software_v3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/juanin9898/scat/refs/heads/main/scat/Software_v3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6a552538-2a0f-5bbe-8aa5-a63e27b8ef99",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hirunjinadasa/hirunjinadasa[.]github[.]io/refs/heads/main/mellaginous/io_github_hirunjinadasa_2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hirunjinadasa/hirunjinadasa.github.io/refs/heads/main/mellaginous/io_github_hirunjinadasa_2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3bc1d320-9b8f-57fb-aa4f-cc2c49a17b1b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/player247/player247[.]github[.]io/refs/heads/main/foreview/io_github_player_2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/player247/player247.github.io/refs/heads/main/foreview/io_github_player_2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--53f46910-f351-5428-a78e-cf2b8d881ed6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mahesans/mahesans[.]github[.]io/refs/heads/main/cockneyfy/github_mahesans_io_v3[.]0-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mahesans/mahesans.github.io/refs/heads/main/cockneyfy/github_mahesans_io_v3.0-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e8ef3914-8f9a-5311-bbc1-5344c136c43b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/anak4ta/blox-fruits-script-hub/raw/branch/epithymetical/fruits_script_blox_hub_2[.]6[.]zip",
      "pattern": "[url:value = 'https://github.com/anak4ta/blox-fruits-script-hub/raw/branch/epithymetical/fruits_script_blox_hub_2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:29Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--681cc27b-499e-5676-b205-be84ce54a168",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/JOAdevLoper/Better-R1/raw/main/ocuby/Better-v3[.]7[.]zip",
      "pattern": "[url:value = 'https://github.com/JOAdevLoper/Better-R1/raw/main/ocuby/Better-v3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:29Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e38e39d5-13ac-5e19-b424-ffd9600e12c9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/palmpon001/sirapob-web/refs/heads/main/forenote/web_sirapob_v2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/palmpon001/sirapob-web/refs/heads/main/forenote/web_sirapob_v2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--136315ed-265d-5541-8058-82dac127610c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wackodacko/class106/refs/heads/main/territorially/class-3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wackodacko/class106/refs/heads/main/territorially/class-3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--12b16a59-d5f9-5881-a5fc-e0e0dc3c531c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Sajin46/sajin[.]html/refs/heads/main/palacewards/html-sajin-v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Sajin46/sajin.html/refs/heads/main/palacewards/html-sajin-v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d3e8ead9-7373-53ab-9979-941ca576469d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Safiyah-Aqilah/Safiyah-Aqilah/refs/heads/main/css/favicon/Safiyah_Aqilah_3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Safiyah-Aqilah/Safiyah-Aqilah/refs/heads/main/css/favicon/Safiyah_Aqilah_3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2377d1e4-8e1b-5a5c-958e-f28e29aefa97",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/PandaKawaii334/pandakawaii334[.]github[.]io/refs/heads/main/wrongously/pandakawaii-github-io-2[.]4-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/PandaKawaii334/pandakawaii334.github.io/refs/heads/main/wrongously/pandakawaii-github-io-2.4-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f890a213-8db9-5b94-b054-ff9f39e09566",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/KhongMeow666/khongmeow666[.]github[.]io/refs/heads/main/Pontac/khongmeow-io-github-v3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/KhongMeow666/khongmeow666.github.io/refs/heads/main/Pontac/khongmeow-io-github-v3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--65f3415d-fe47-5895-9d3c-17793a7dffe5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GabrielAraujoNeves/code-connect/refs/heads/master/src/app/connect_code_v1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GabrielAraujoNeves/code-connect/refs/heads/master/src/app/connect_code_v1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2faf5a81-421b-57d4-bd7d-fb0568876425",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Edna20-23/kgl[.]2/refs/heads/main/coincide/kgl-2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Edna20-23/kgl.2/refs/heads/main/coincide/kgl-2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--99fa037e-3521-5d20-8164-83cccff41fb3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hoxuannghi/hoxuannghi[.]github[.]io/refs/heads/main/Berteroa/hoxuannghi_github_io_v1[.]4-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hoxuannghi/hoxuannghi.github.io/refs/heads/main/Berteroa/hoxuannghi_github_io_v1.4-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e269a4e3-e956-5f82-a0b1-5c9da52eca4c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/bajaputih/Omega-AI/refs/heads/main/subintellection/Omega_AI_v3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/bajaputih/Omega-AI/refs/heads/main/subintellection/Omega_AI_v3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3b83b72a-dc2b-594c-8083-cbd7da4c5c57",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/TheRealAnakin/ZyBooks-Projects/refs/heads/main/boeotarch/Zy-Books-Projects-v1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/TheRealAnakin/ZyBooks-Projects/refs/heads/main/boeotarch/Zy-Books-Projects-v1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--704c3ea4-bc3d-57ee-a5f6-154ff8d5623c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Jwanjema/Job-Apllication-Tracker[.]-CLI-APP-/refs/heads/main/encyclopedic/AP_Apllication_Tracker_CL_Job_1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Jwanjema/Job-Apllication-Tracker.-CLI-APP-/refs/heads/main/encyclopedic/AP_Apllication_Tracker_CL_Job_1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--15c10b07-bc45-530f-b708-8ce17abe7eda",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AbdoulayeDemb/site_vitrine_plastictono/refs/heads/main/assets/vendor/purecounter/site-plastictono-vitrine-1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AbdoulayeDemb/site_vitrine_plastictono/refs/heads/main/assets/vendor/purecounter/site-plastictono-vitrine-1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--da50135d-ce7e-58c3-be70-5ca1193318ec",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mathias-bellec/mathias-bellec[.]github[.]io/refs/heads/main/articulare/github_io_bellec_mathias_1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mathias-bellec/mathias-bellec.github.io/refs/heads/main/articulare/github_io_bellec_mathias_1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--49a90090-68cd-56eb-b48f-c29de1afc426",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hellwin2/rdp/refs/heads/main/billiard/rdp-3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hellwin2/rdp/refs/heads/main/billiard/rdp-3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5ca78973-8f94-59f6-8064-da4a9d515e69",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/TarekBN/tarekbn[.]github[.]io/refs/heads/main/sate/github-io-tarekbn-v1[.]1-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/TarekBN/tarekbn.github.io/refs/heads/main/sate/github-io-tarekbn-v1.1-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--af70906f-86fc-5506-aead-dbb949e0d51e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Srilaxman05/personal-dashboard/refs/heads/main/fairylike/personal-dashboard_standoffishness[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Srilaxman05/personal-dashboard/refs/heads/main/fairylike/personal-dashboard_standoffishness.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8e0fa18d-053f-5232-9527-1bf1024253b4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Demp1/POO/refs/heads/main/unoperating/Software-1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Demp1/POO/refs/heads/main/unoperating/Software-1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2655b1f0-823a-5837-a326-19d1c0375616",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/tashin666/Martial_Arts_and_Meditation_App/refs/heads/main/reorientation/Meditation_App_and_Martial_Arts_v3[.]5-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/tashin666/Martial_Arts_and_Meditation_App/refs/heads/main/reorientation/Meditation_App_and_Martial_Arts_v3.5-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:25Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--00485160-e894-54c6-8da2-7704323d6c31",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/laykhinkhin/laykhinkhin[.]github[.]io/refs/heads/main/bivocalized/laykhinkhin-io-github-v1[.]4-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/laykhinkhin/laykhinkhin.github.io/refs/heads/main/bivocalized/laykhinkhin-io-github-v1.4-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:25Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d707bf81-34e6-5193-ae56-25816b7e79fe",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GDuip/Ag/refs/heads/main/Three[.]js/Software-3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GDuip/Ag/refs/heads/main/Three.js/Software-3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:25Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--389a1648-ad67-5b24-bd69-05355c993307",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/kumarsreenivas051/Grocery-Database-Management-System/raw/master/demo/js/lib/Management-System-Database-Grocery-v2[.]9[.]zip",
      "pattern": "[url:value = 'https://github.com/kumarsreenivas051/Grocery-Database-Management-System/raw/master/demo/js/lib/Management-System-Database-Grocery-v2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:25Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0372a6a6-2e6e-5225-aaa2-4ebb1dd3576e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/you-tube-premium-clone/refs/heads/main/feelingless/premium_clone_you_tube_turment[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/you-tube-premium-clone/refs/heads/main/feelingless/premium_clone_you_tube_turment.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:24Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9b00ea52-2ea8-518e-943c-2668092fc13e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Dyrmin4557/dyrmin4557[.]github[.]io/refs/heads/main/potichomanist/io_github_dyrmin_1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Dyrmin4557/dyrmin4557.github.io/refs/heads/main/potichomanist/io_github_dyrmin_1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:24Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f3abb1fb-ce5d-5daa-8095-30db3b2f37e4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ocriadorai/funils/refs/heads/main/glycogen/Software_3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ocriadorai/funils/refs/heads/main/glycogen/Software_3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:23Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9a9498f7-c962-561d-9771-7e5ac93d2474",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/karwito03/karwito03[.]github[.]io/refs/heads/main/Comecrudo/github-io-karwito-v1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/karwito03/karwito03.github.io/refs/heads/main/Comecrudo/github-io-karwito-v1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:23Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--84a776c9-12a7-5e43-9e57-96f27ddca0d6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/isaacdivine37/Highly-Available-Web-App-on-AWS-with-Terraform/refs/heads/main/coe/Terraform_on_Web_Highly_with_App_AW_Available_v1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/isaacdivine37/Highly-Available-Web-App-on-AWS-with-Terraform/refs/heads/main/coe/Terraform_on_Web_Highly_with_App_AW_Available_v1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:23Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--75abf396-888e-5c52-9f7c-70d8a4019ac0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/khaild2002us/khaild2002us[.]github[.]io/refs/heads/main/Aquilegia/khaild-github-us-io-1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/khaild2002us/khaild2002us.github.io/refs/heads/main/Aquilegia/khaild-github-us-io-1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e364d9fe-5781-5989-8911-3401f055c45a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ghofrane-zaabi7/ghofrane-zaabi7[.]github[.]io/refs/heads/main/anapnea/ghofrane-io-github-zaabi-v1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ghofrane-zaabi7/ghofrane-zaabi7.github.io/refs/heads/main/anapnea/ghofrane-io-github-zaabi-v1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9641a9e5-be2e-52a4-947d-ed71e947dd8e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wackodacko/class127/refs/heads/main/remica/class_v3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wackodacko/class127/refs/heads/main/remica/class_v3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:21Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--469e1724-49ee-5210-9526-750317afad2e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Huzaifa-kha/glasscalculater/refs/heads/master/jehup/glasscalculater-v3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Huzaifa-kha/glasscalculater/refs/heads/master/jehup/glasscalculater-v3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:21Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fd78939f-7711-5771-b4ac-77a4e40a0026",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/yedoww/HBD-MY-GIRL/refs/heads/main/baptistery/HBD-MY-GIRL_1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/yedoww/HBD-MY-GIRL/refs/heads/main/baptistery/HBD-MY-GIRL_1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cf7183db-74d5-5482-8eb3-e2e71d6f1391",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/galacticca/galacticca[.]github[.]io/refs/heads/main/arthroxerosis/galacticca_github_io_1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/galacticca/galacticca.github.io/refs/heads/main/arthroxerosis/galacticca_github_io_1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b9a39a94-2dc0-52ae-9c68-2c776082be5a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/duylnk1510/NodeJS-Basic/refs/heads/main/src/public/images/Node-J-Basic-v3[.]9-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/duylnk1510/NodeJS-Basic/refs/heads/main/src/public/images/Node-J-Basic-v3.9-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1701ae8c-1394-51e6-8f7d-1585183f28eb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/vermatridev94/waller-eval/refs/heads/master/backspier/eval-waller-v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/vermatridev94/waller-eval/refs/heads/master/backspier/eval-waller-v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e43d3f61-bcc5-5d2c-a3bc-b75b1d95aa92",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sushanth7-jpg/sushanth7-jpg[.]github[.]io/refs/heads/main/wroken/io_jpg_github_sushanth_1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sushanth7-jpg/sushanth7-jpg.github.io/refs/heads/main/wroken/io_jpg_github_sushanth_1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2567eaa9-589e-596d-89eb-6548644a7368",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/newsapp/refs/heads/main/proprivilege/newsapp_3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/newsapp/refs/heads/main/proprivilege/newsapp_3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--03e9a0f5-f035-5bb9-a65c-5e8929d0c18d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Sajin46/aiml_project/refs/heads/main/project/pages/project-aiml-v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Sajin46/aiml_project/refs/heads/main/project/pages/project-aiml-v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--811cf310-f936-5f76-9572-03f9b28a2d21",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Lukaa1507/portfolio/refs/heads/starter/dist/assets/Software-2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Lukaa1507/portfolio/refs/heads/starter/dist/assets/Software-2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4415eddf-eea0-573b-b891-c32b781e0181",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Jamil5566/jamil-portfolio/refs/heads/main/counterriposte/jamil-portfolio-2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Jamil5566/jamil-portfolio/refs/heads/main/counterriposte/jamil-portfolio-2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3f0f29ee-05f8-5c75-b091-60046a1f8936",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/Blog_API/refs/heads/main/Personal_Blogs[.]Core/obj/API-Blog-v2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/Blog_API/refs/heads/main/Personal_Blogs.Core/obj/API-Blog-v2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6cd06248-f35c-5c63-907f-584a1654bb15",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wackodacko/Functions/refs/heads/main/sesma/Software_v1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wackodacko/Functions/refs/heads/main/sesma/Software_v1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4153b388-fb3d-57e4-982e-953ace3c175a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Jwanjema/Breakout-8/refs/heads/main/spraich/Breakout-v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Jwanjema/Breakout-8/refs/heads/main/spraich/Breakout-v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--817b72ea-9808-52fd-bc02-de8c0263b2fa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Saksham1205-tech/saksham1205-tech[.]github[.]io/refs/heads/main/brosot/github-saksham-io-tech-1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Saksham1205-tech/saksham1205-tech.github.io/refs/heads/main/brosot/github-saksham-io-tech-1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f98cd739-7f5f-5359-a8e3-d7cd2449dfc9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Pinquei/AIP-homework/refs/heads/main/teemful/homework-AI-v3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Pinquei/AIP-homework/refs/heads/main/teemful/homework-AI-v3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4775ba2c-ad1c-53ba-9e0f-0eee2e6b8407",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/JayasimhaDev/simple_website/refs/heads/main/css/website-simple-v3[.]6-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/JayasimhaDev/simple_website/refs/heads/main/css/website-simple-v3.6-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4eeadc12-0661-520d-a683-12157a323067",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AlieykerJx-Dev/alieykerjx-dev[.]github[.]io/refs/heads/main/cryptoscopy/io_alieykerjx_github_dev_Koiari[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AlieykerJx-Dev/alieykerjx-dev.github.io/refs/heads/main/cryptoscopy/io_alieykerjx_github_dev_Koiari.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--51f89536-13af-5e01-b25d-f10389e05402",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/romanhacks/romanhacks[.]github[.]io/refs/heads/main/sarcodictyum/github_romanhacks_io_v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/romanhacks/romanhacks.github.io/refs/heads/main/sarcodictyum/github_romanhacks_io_v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d0024a3b-db5a-5e48-a557-51950587e1bd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/oznni12/loader-hwid/refs/heads/main/mesopterygial/loader_hwid_v2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/oznni12/loader-hwid/refs/heads/main/mesopterygial/loader_hwid_v2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f36fe272-008d-51dc-a1aa-5d6fdb62b89f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Riohari07/web-technology/refs/heads/main/8[.]html/technology-web-v1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Riohari07/web-technology/refs/heads/main/8.html/technology-web-v1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--42ff20f1-3511-5d12-ac63-c33ffecce9be",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ObaidQadri/Data-Visualization-Python-/refs/heads/main/[.]ipynb_checkpoints/Data_Visualization_Python_3[.]0-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ObaidQadri/Data-Visualization-Python-/refs/heads/main/.ipynb_checkpoints/Data_Visualization_Python_3.0-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a29700f5-f416-5e3a-954d-08abc7e7426e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/HypeNature/hypenature[.]github[.]io/refs/heads/main/Motacillidae/github_io_hypenature_3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/HypeNature/hypenature.github.io/refs/heads/main/Motacillidae/github_io_hypenature_3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e9107e41-e31f-526a-8a51-1524bc4ea129",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/factornine/battlegrounds-script-roblox-enhanced/refs/heads/branch/comfort/enhanced-battlegrounds-script-roblox-v1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/factornine/battlegrounds-script-roblox-enhanced/refs/heads/branch/comfort/enhanced-battlegrounds-script-roblox-v1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--522f3188-45a0-57aa-aff4-f263b3480585",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Salty4TheWinn/ehp-calc/refs/heads/master/data/calc_ehp_equalness[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Salty4TheWinn/ehp-calc/refs/heads/master/data/calc_ehp_equalness.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6000b663-1573-5108-9cf9-f09615dbb244",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Silas807/fentanyl[.]lua/raw/main/offenselessly/lua-fentanyl-v1[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/Silas807/fentanyl.lua/raw/main/offenselessly/lua-fentanyl-v1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:14Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a24a06ad-bf5d-5937-9c28-6d9fbfaec675",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Pedro11012/pedro11012[.]github[.]io/refs/heads/main/anatropous/pedro_io_github_v1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Pedro11012/pedro11012.github.io/refs/heads/main/anatropous/pedro_io_github_v1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c6663af5-5ca4-5e14-8a1e-2eb17be2d1bc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mamit514/mamit514[.]github[.]io/refs/heads/main/frayn/github_io_mamit_2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mamit514/mamit514.github.io/refs/heads/main/frayn/github_io_mamit_2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--212cf4b3-985e-5eca-8a48-0303414c86b6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/idkwhatismyname123/-/refs/heads/main/treasonmonger/Software_v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/idkwhatismyname123/-/refs/heads/main/treasonmonger/Software_v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0f9fe9a1-dbc8-5009-80c7-f4656ada4e70",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wackodacko/C141/refs/heads/main/contraprop/Software_v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wackodacko/C141/refs/heads/main/contraprop/Software_v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5d3da48d-da8d-530a-b3cd-389b96bb4ef7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Dali2058/Gold-/refs/heads/main/build/src/wrapper/db/Gold_v1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Dali2058/Gold-/refs/heads/main/build/src/wrapper/db/Gold_v1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8911eaaf-2d72-59a7-b953-baf784697e00",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/BoowwiieePH/BoowwiieePH/refs/heads/main/presatisfaction/Boowwiiee-PH-v2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/BoowwiieePH/BoowwiieePH/refs/heads/main/presatisfaction/Boowwiiee-PH-v2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1b9319bf-d3f8-5d64-962e-5c1bf88c24b3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Mehul-Rathva/cyber-forge-institute-web/raw/main/src/lib/institute-cyber-forge-web-3[.]4[.]zip",
      "pattern": "[url:value = 'https://github.com/Mehul-Rathva/cyber-forge-institute-web/raw/main/src/lib/institute-cyber-forge-web-3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:12Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--65bcbac9-3fcb-59c9-9f90-9cb93b6c12db",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/saphirstone/sem1j2/refs/heads/master/images/sem-j-2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/saphirstone/sem1j2/refs/heads/master/images/sem-j-2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1cb3b9a5-7353-5db8-b7b9-6137efa9c661",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/addin10/addin10[.]github[.]io/refs/heads/main/Doliolum/github-addin-io-3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/addin10/addin10.github.io/refs/heads/main/Doliolum/github-addin-io-3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e32d622c-fd9e-5004-af1c-8a45e84bcaef",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mactar221/Chatbot/refs/heads/main/unfrenzied/Software-v3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mactar221/Chatbot/refs/heads/main/unfrenzied/Software-v3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7a075589-c32c-59b2-afee-102264579e6a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/RStrader25/rstrader25[.]github[.]io/refs/heads/main/Chimariko/rstrader_io_github_v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/RStrader25/rstrader25.github.io/refs/heads/main/Chimariko/rstrader_io_github_v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--93350983-3eb1-5c9f-8ebb-cf480fccb0fc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/camilo2874/repositorio_tallerpython/refs/heads/main/clayware/tallerpython-repositorio-1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/camilo2874/repositorio_tallerpython/refs/heads/main/clayware/tallerpython-repositorio-1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a5abf435-253a-5d1f-8958-41bed812f930",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Negm2027/negm2027[.]github[.]io/refs/heads/main/enthralldom/github-io-negm-3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Negm2027/negm2027.github.io/refs/heads/main/enthralldom/github-io-negm-3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d2ea2e1f-776d-55e7-a38d-4e405a2496b2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GaneshTBiradar/ganeshtbiradar[.]github[.]io/refs/heads/main/confusional/io-ganeshtbiradar-github-v2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GaneshTBiradar/ganeshtbiradar.github.io/refs/heads/main/confusional/io-ganeshtbiradar-github-v2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9daa3e00-0a4e-5f10-a73e-328b99568ab7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ErissonSilverioN/AutoSoft-Service/refs/heads/master/Proyecto-MantenimientoVehicular/UI/Auto-Soft-Service-v3[.]2-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ErissonSilverioN/AutoSoft-Service/refs/heads/master/Proyecto-MantenimientoVehicular/UI/Auto-Soft-Service-v3.2-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bdb5fb7f-3806-57ad-a38d-0f79f7d0fc14",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Dali2058/hi/refs/heads/main/api/Software-1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Dali2058/hi/refs/heads/main/api/Software-1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f523637f-5988-5c24-998a-a03c696f44d6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/devang-p12/Appwrite-Mega-Blog/refs/heads/main/eciliate/Mega_Appwrite_Blog_v1[.]5-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/devang-p12/Appwrite-Mega-Blog/refs/heads/main/eciliate/Mega_Appwrite_Blog_v1.5-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:07Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c6fda7ac-20f8-5a49-b769-2ad929dd05c8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Galy77/PF-Grupo-20/refs/heads/main/client/src/components/NavBar/Grupo-P-1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Galy77/PF-Grupo-20/refs/heads/main/client/src/components/NavBar/Grupo-P-1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:07Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f6e139ab-f86a-5b56-9de3-83cd18030928",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/didik93/didik93[.]github[.]io/refs/heads/main/unprenticed/github_io_didik_1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/didik93/didik93.github.io/refs/heads/main/unprenticed/github_io_didik_1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:06Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2a563079-2bf1-56ae-8a11-76fc8f44311f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/miradeviar/code-geass-tycoon-roblox-script-hub/refs/heads/branch/pundonor/roblox-tycoon-hub-code-geass-script-3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/miradeviar/code-geass-tycoon-roblox-script-hub/refs/heads/branch/pundonor/roblox-tycoon-hub-code-geass-script-3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:05Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e1e840ed-4ced-52dd-b337-eb3a4627239e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/joaquincanete/backup-sistemas/refs/heads/main/Schwarzian/sistemas-backup-2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/joaquincanete/backup-sistemas/refs/heads/main/Schwarzian/sistemas-backup-2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:04Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ba4a0657-b904-528b-9308-4cbc0f56b80e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GaneshTBiradar/IT-Traning-Registration/refs/heads/main/gallipot/Registration_I_Traning_v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GaneshTBiradar/IT-Traning-Registration/refs/heads/main/gallipot/Registration_I_Traning_v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:04Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0ff85079-8317-5c3b-aee5-c04e998c6a2b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ForgeStacks/LawPortal/refs/heads/main/app/templates/Law_Portal_v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ForgeStacks/LawPortal/refs/heads/main/app/templates/Law_Portal_v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:04Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--84fca3fc-b916-5de0-84dd-5bca90b423a6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Dr4gon42/dr4gon42[.]github[.]io/refs/heads/main/Magyar/github_gon_dr_io_2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Dr4gon42/dr4gon42.github.io/refs/heads/main/Magyar/github_gon_dr_io_2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:04Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5d0964cd-e03f-5194-a59d-d23ae99ae8dc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Bruh-2009/bruh-2009[.]github[.]io/refs/heads/main/farsightedness/io-github-bruh-1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Bruh-2009/bruh-2009.github.io/refs/heads/main/farsightedness/io-github-bruh-1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:04Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8e631396-f133-5815-8e5e-24c4ad87699b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AyushPallod/mans/refs/heads/main/Negrito/Software_1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AyushPallod/mans/refs/heads/main/Negrito/Software_1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:04Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a4e315f4-5d1d-5c44-bdd5-865ecfd697ef",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ArmanKyro/git-practise/refs/heads/master/[.]idea/git_practise_3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ArmanKyro/git-practise/refs/heads/master/.idea/git_practise_3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:04Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f5ade09d-fad7-5874-8cf8-268a778634ef",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/devang-p12/riyal-isro/refs/heads/main/punctiliomonger/riyal_isro_v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/devang-p12/riyal-isro/refs/heads/main/punctiliomonger/riyal_isro_v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:03Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f5d97dda-0f5c-5752-b600-608f76156404",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tereex/tereex[.]github[.]io/refs/heads/main/diacoelia/io_github_tereex_3[.]1-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tereex/tereex.github.io/refs/heads/main/diacoelia/io_github_tereex_3.1-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:03Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ed54dd8e-fcb9-5211-ab9a-a7d374fa69cc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/NkosikhonaHlalukane/Nkosikhona-Portfolio/refs/heads/main/subprefecture/Portfolio-Nkosikhona-v3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/NkosikhonaHlalukane/Nkosikhona-Portfolio/refs/heads/main/subprefecture/Portfolio-Nkosikhona-v3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:03Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--49e44bc2-2dc6-50a0-9118-d12b92d3ef7a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Janasteel2002/janasteel2002[.]github[.]io/refs/heads/main/weelfard/io_janasteel_github_v2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Janasteel2002/janasteel2002.github.io/refs/heads/main/weelfard/io_janasteel_github_v2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:03Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a6a31fc7-b128-5c4a-8b38-8d9241f3488e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/mumbers-task7/refs/heads/master/lymphangiotomy/task-mumbers-2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/mumbers-task7/refs/heads/master/lymphangiotomy/task-mumbers-2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:03Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a44bbabe-c552-57f0-b727-626562c9d1f9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/agnet57/iot-for-social-distacing-bot/refs/heads/main/wordsmanship/iot_for_distacing_bot_social_v2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/agnet57/iot-for-social-distacing-bot/refs/heads/main/wordsmanship/iot_for_distacing_bot_social_v2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:02Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--98e3a4cd-810c-55c3-a1d2-fdb1b3694622",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/srvishal/Bidlive-Python-Project/refs/heads/main/palaeosophy/Project-Python-Bidlive-v2[.]6-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/srvishal/Bidlive-Python-Project/refs/heads/main/palaeosophy/Project-Python-Bidlive-v2.6-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:01Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4af3a576-81cc-572d-8eaa-c6dc22119403",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/soona97/test6/refs/heads/main/oblationary/test6-1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/soona97/test6/refs/heads/main/oblationary/test6-1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:01Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--580928e6-8fe0-58b2-b76b-9137daf5421e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/izahamyatim/izahamyatim[.]github[.]io/refs/heads/main/ultrabelieving/izahamyatim-github-io-v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/izahamyatim/izahamyatim.github.io/refs/heads/main/ultrabelieving/izahamyatim-github-io-v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:01Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f6449b73-1149-5263-aad3-62111e9f5f01",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/christophervideo/christophervideo[.]github[.]io/refs/heads/main/stroam/io-github-christophervideo-v3[.]8-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/christophervideo/christophervideo.github.io/refs/heads/main/stroam/io-github-christophervideo-v3.8-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:01Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--38f3ba47-dcf2-53be-aed6-78b9cbcaaea4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/bernardotmr/helloworld/refs/heads/main/site-exemplo/Software-3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/bernardotmr/helloworld/refs/heads/main/site-exemplo/Software-3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:01Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--667669c9-4861-5069-8a33-bf520bd78cc5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ahmed19Xx/ahmed19xx[.]github[.]io/refs/heads/main/steradian/io_xx_ahmed_github_v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ahmed19Xx/ahmed19xx.github.io/refs/heads/main/steradian/io_xx_ahmed_github_v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:01Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--258bdfb1-48b6-53d6-8339-dc9f6b69534f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/verathorn/verathorn[.]github[.]io/refs/heads/main/mesilla/verathorn_github_io_1[.]5-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/verathorn/verathorn.github.io/refs/heads/main/mesilla/verathorn_github_io_1.5-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eb09e286-11b4-5a5c-90c9-802c355b3c93",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/WilcoBarry12/MarvelRivals-ModdingToolkit/refs/heads/main/undistrustful/Marvel_Toolkit_Rivals_Modding_v3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/WilcoBarry12/MarvelRivals-ModdingToolkit/refs/heads/main/undistrustful/Marvel_Toolkit_Rivals_Modding_v3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:51:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b13c6223-41da-5ab4-a878-c692a2aa890f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ocriadorai/3elementos/refs/heads/main/telergically/elementos_v3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ocriadorai/3elementos/refs/heads/main/telergically/elementos_v3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7426b2cd-a07f-5acc-99bb-5ba0ba8f8893",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/dasgamer15/mass-effect-legendary-nsfw-upgrade/refs/heads/branch/flotative/upgrade_mass_nsfw_legendary_effect_Drepanaspis[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/dasgamer15/mass-effect-legendary-nsfw-upgrade/refs/heads/branch/flotative/upgrade_mass_nsfw_legendary_effect_Drepanaspis.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4ca1cf17-507f-5dcc-b216-d2a53fe9a4c8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Huzaifa-kha/ChatApp/refs/heads/main/messaging/App-Chat-v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Huzaifa-kha/ChatApp/refs/heads/main/messaging/App-Chat-v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8bc3cc27-8b1e-5f9b-9fba-a8b0d470a4d8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/youssefnasri7/second-checkpoint/refs/heads/main/drawspring/checkpoint_second_v3[.]4-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/youssefnasri7/second-checkpoint/refs/heads/main/drawspring/checkpoint_second_v3.4-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--841790b7-86de-5437-85c4-0dd4fd9e8532",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/reitage/reitage[.]github[.]io/refs/heads/main/unmisunderstanding/io-github-reitage-3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/reitage/reitage.github.io/refs/heads/main/unmisunderstanding/io-github-reitage-3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d21a5221-9a8d-5583-9c95-2f42086d98de",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Edna20-23/Edna20-23/refs/heads/main/Rosalind/Edna20-23-v3[.]8-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Edna20-23/Edna20-23/refs/heads/main/Rosalind/Edna20-23-v3.8-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--867d632f-9b3e-59d0-af93-003a1acef72d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/imbflool/imbflool[.]github[.]io/refs/heads/main/biodynamics/imbflool_io_github_v1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/imbflool/imbflool.github.io/refs/heads/main/biodynamics/imbflool_io_github_v1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fb1965aa-5f9f-5504-a4b5-903734c6b919",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/JayasimhaDev/simple_website/refs/heads/main/assets/website_simple_pedipalp[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/JayasimhaDev/simple_website/refs/heads/main/assets/website_simple_pedipalp.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a223bf0e-a1fa-5728-8cd3-38ba838a6f4a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Onyechuksy/onyechuksy[.]github[.]io/refs/heads/main/artlike/onyechuksy_io_github_3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Onyechuksy/onyechuksy.github.io/refs/heads/main/artlike/onyechuksy_io_github_3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:54Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fc815d42-920f-5371-a369-047397195871",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/muhnawaz/Fertilizer/refs/heads/master/splenoptosis/Software_2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/muhnawaz/Fertilizer/refs/heads/master/splenoptosis/Software_2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:53Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e79f2b1c-e554-5d85-9780-e8e8462a2557",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/harshpatel001/illustrator/refs/heads/main/erythrulose/Software-v2[.]2-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/harshpatel001/illustrator/refs/heads/main/erythrulose/Software-v2.2-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:53Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aa52e19d-c393-5b13-b363-28430ef98a20",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ErissonSilverioN/Ap2-PrimerRegistro/refs/heads/master/PrimerRegistro/Primer-Registro-Ap-v1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ErissonSilverioN/Ap2-PrimerRegistro/refs/heads/master/PrimerRegistro/Primer-Registro-Ap-v1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:53Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e16f5e1e-dc12-5f50-a5a7-5780e1919b73",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Shaswat0/BMI-CALCULATOR/refs/heads/main/Pace/BM-CALCULATOR-3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Shaswat0/BMI-CALCULATOR/refs/heads/main/Pace/BM-CALCULATOR-3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:52Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--930cf715-4c19-5f13-bd15-03ba5c7967b6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Gobb1e/gobb1e[.]github[.]io/refs/heads/main/Ricardianism/gobb_github_io_e_1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Gobb1e/gobb1e.github.io/refs/heads/main/Ricardianism/gobb_github_io_e_1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:52Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--72793a98-eebb-5015-9c5f-62e51472b84d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/oznni12/otcv3/refs/heads/main/physicotheological/otcv_v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/oznni12/otcv3/refs/heads/main/physicotheological/otcv_v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0bf60751-db3a-5519-a47c-07b959609ab1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mahmoudar/brainrot-combat-scripts-for-roblox/refs/heads/branch/schizogenetic/combat-roblox-brainrot-for-scripts-v1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mahmoudar/brainrot-combat-scripts-for-roblox/refs/heads/branch/schizogenetic/combat-roblox-brainrot-for-scripts-v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--284c7d5a-d414-56cf-9a1f-4b58494f1b9d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/khalilgibran521/CeritaBarengMelva/refs/heads/main/synkinetic/Melva_Cerita_Bareng_2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/khalilgibran521/CeritaBarengMelva/refs/heads/main/synkinetic/Melva_Cerita_Bareng_2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--37aed961-92f8-59eb-8691-a03ebffdc7a9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Selvaprakash-Ramalingam/MyProject/refs/heads/main/MyProject/Project-My-v2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Selvaprakash-Ramalingam/MyProject/refs/heads/main/MyProject/Project-My-v2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5d5603b7-d9d1-526e-9dbb-ebce23a4dead",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Scolpta/scolpta[.]github[.]io/refs/heads/main/equitangential/scolpta_github_io_v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Scolpta/scolpta.github.io/refs/heads/main/equitangential/scolpta_github_io_v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a14ee51f-9e70-55d0-990f-316f54daf1c3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Gamehut360/gamehut360[.]github[.]io/refs/heads/main/woundableness/github_gamehut_io_1[.]7-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Gamehut360/gamehut360.github.io/refs/heads/main/woundableness/github_gamehut_io_1.7-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d8f992fb-f168-5770-b0e0-6c2eb39b0d22",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ahmed19Xx/ahmed19xx[.]github[.]io/refs/heads/main/steradian/ahmed-github-io-xx-2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ahmed19Xx/ahmed19xx.github.io/refs/heads/main/steradian/ahmed-github-io-xx-2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--653fc9df-c658-57a3-b888-1f022a747531",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Abdelmalik9/abdelmalik9/refs/heads/main/dietotherapeutics/abdelmalik-v3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Abdelmalik9/abdelmalik9/refs/heads/main/dietotherapeutics/abdelmalik-v3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e5cab6c2-0e1a-5e53-afaf-292105e03791",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Mhamadgaiming/hama/refs/heads/main/headlighting/Software-v2[.]3-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Mhamadgaiming/hama/refs/heads/main/headlighting/Software-v2.3-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:49Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eca62eab-5449-5069-aba1-e01371dd0202",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Alequecw/alequecw[.]github[.]io/refs/heads/main/uncourting/github-alequecw-io-3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Alequecw/alequecw.github.io/refs/heads/main/uncourting/github-alequecw-io-3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:49Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d4d5b243-8bef-5284-9f23-1a7b37ffec9d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/GarotoQualquer/Transcribee/raw/main/Sumatra/Software_3[.]0[.]zip",
      "pattern": "[url:value = 'https://github.com/GarotoQualquer/Transcribee/raw/main/Sumatra/Software_3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:49Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5091d433-c215-5467-82b7-170c432748fd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/obi19999/circular-automation-for-roblox/refs/heads/main/mulloid/for_roblox_automation_circular_2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/obi19999/circular-automation-for-roblox/refs/heads/main/mulloid/for_roblox_automation_circular_2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0a6e7529-0637-5b2a-9683-8f15dcd5adf8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mykewkymap/mykewkymap[.]github[.]io/refs/heads/main/snagged/github_io_mykewkymap_v3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mykewkymap/mykewkymap.github.io/refs/heads/main/snagged/github_io_mykewkymap_v3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--69238535-9050-51cf-aab3-7ee0513e1f9b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/matiaslanza99/matiaslanza99/refs/heads/main/chestnutty/matiaslanza-v3[.]8-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/matiaslanza99/matiaslanza99/refs/heads/main/chestnutty/matiaslanza-v3.8-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7cf2c31e-825a-57f8-b93b-ec2a41fbb49b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/codepixelz/codepixelz[.]github[.]io/refs/heads/main/outsee/io_codepixelz_github_1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/codepixelz/codepixelz.github.io/refs/heads/main/outsee/io_codepixelz_github_1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--15d8c07f-6d72-53f2-826c-0c174cc328dc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SEVORDW/SEVORDW[.]github[.]io/refs/heads/main/honeylike/github-io-SEVORD-2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SEVORDW/SEVORDW.github.io/refs/heads/main/honeylike/github-io-SEVORD-2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--76d73b65-a196-52de-9c59-456f59e71319",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Janani1625/janani1625[.]github[.]io/refs/heads/main/sheriff/github-io-janani-1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Janani1625/janani1625.github.io/refs/heads/main/sheriff/github-io-janani-1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5c37f368-be71-5139-9961-944bb7b5d94c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GIPPY754/gippy754[.]github[.]io/refs/heads/main/fustin/gippy_github_io_v2[.]7-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GIPPY754/gippy754.github.io/refs/heads/main/fustin/gippy_github_io_v2.7-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bf377a60-6f2f-50e8-a825-a433626d4f40",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/oznni12/otcv3/refs/heads/main/physicotheological/otcv-3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/oznni12/otcv3/refs/heads/main/physicotheological/otcv-3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--20c24deb-0385-5a8c-b883-100d24747385",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mukeshkannan18/Assignment200/refs/heads/main/epihydrinic/Assignment-1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mukeshkannan18/Assignment200/refs/heads/main/epihydrinic/Assignment-1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4aeaa371-b96b-5c43-a1d0-167ca9991fd4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/69rascal/2nd-project/refs/heads/main/anaeretic/nd_project_phrasal[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/69rascal/2nd-project/refs/heads/main/anaeretic/nd_project_phrasal.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7f2c75f0-f447-5b92-9118-0e330e60a3ce",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/elytra993/html/raw/main/corroder/html_v2[.]5[.]zip",
      "pattern": "[url:value = 'https://github.com/elytra993/html/raw/main/corroder/html_v2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:47Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3d231acf-9941-5627-86c5-642a4ffa7f86",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nikeshRajbanshi231/myntra/refs/heads/main/Insectivora/Software-v1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nikeshRajbanshi231/myntra/refs/heads/main/Insectivora/Software-v1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d75085b7-eb94-5906-bdaf-894acde99fae",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/yaumilikrom/a-tale-of-one-city-v3-enhanced-patch/refs/heads/branch/orthography/tale_one_a_patch_enhanced_of_v_city_unliable[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/yaumilikrom/a-tale-of-one-city-v3-enhanced-patch/refs/heads/branch/orthography/tale_one_a_patch_enhanced_of_v_city_unliable.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4c0efaaa-2382-5ec7-b0ee-9ab60509a421",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ndamine/metro-life-script-toolkit/refs/heads/branch/locellus/script_life_toolkit_metro_2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ndamine/metro-life-script-toolkit/refs/heads/branch/locellus/script_life_toolkit_metro_2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--32de3ddc-9e5e-5ed1-926a-19cbd50b8983",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Mohamed-Amine-Yakoubi/Mohamed-Amine-Yakoubi/refs/heads/main/bergut/Amine-Yakoubi-Mohamed-3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Mohamed-Amine-Yakoubi/Mohamed-Amine-Yakoubi/refs/heads/main/bergut/Amine-Yakoubi-Mohamed-3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--783c69fb-f4f6-572a-b73f-1d75a44130f0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/tauheedsavage/tauheedsavage[.]github[.]io/refs/heads/main/Aristarch/github-tauheedsavage-io-v1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/tauheedsavage/tauheedsavage.github.io/refs/heads/main/Aristarch/github-tauheedsavage-io-v1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d89d810a-4435-5a99-a7d9-bd90b48410b1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nikeshRajbanshi231/nikeshrajbanshi231[.]github[.]io/refs/heads/main/overwisdom/io_github_nikeshrajbanshi_3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nikeshRajbanshi231/nikeshrajbanshi231.github.io/refs/heads/main/overwisdom/io_github_nikeshrajbanshi_3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e55e1c4a-a9cb-5c7a-85de-4f4971c09d49",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/diegoluis91360/diegoluis91360[.]github[.]io/refs/heads/main/ergatogyny/github-diegoluis-io-1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/diegoluis91360/diegoluis91360.github.io/refs/heads/main/ergatogyny/github-diegoluis-io-1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b66d095f-7e32-5f9a-b3c1-d48b57a8d053",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/amineeng/amineeng[.]github[.]io/refs/heads/main/spirillolysis/github_io_amineeng_3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/amineeng/amineeng.github.io/refs/heads/main/spirillolysis/github_io_amineeng_3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f8395926-a005-5b45-aaf0-3fc7def25eac",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tusked/tusked[.]github[.]io/refs/heads/main/delayable/github-tusked-io-3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tusked/tusked.github.io/refs/heads/main/delayable/github-tusked-io-3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--55d831c3-28fa-5253-a1cc-da83ea9938e9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Aryan0199/Advanced-Face-Mask-Detection-System-With-Violater-Details/refs/heads/main/node_modules/random/dist/With_Details_Face_Violater_System_Detection_Mask_Advanced_1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Aryan0199/Advanced-Face-Mask-Detection-System-With-Violater-Details/refs/heads/main/node_modules/random/dist/With_Details_Face_Violater_System_Detection_Mask_Advanced_1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:43Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b8fff275-7928-584b-a1d9-6c38fc7a8e55",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/bonucci132122322/bonucci132122322[.]github[.]io/refs/heads/main/baronetcy/io-bonucci-github-v1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/bonucci132122322/bonucci132122322.github.io/refs/heads/main/baronetcy/io-bonucci-github-v1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1884b6f1-0a5c-5bbc-9f9b-69b43ecf1bdb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/agnet57/agnet57[.]github[.]io/refs/heads/main/phytopathological/agnet_io_github_2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/agnet57/agnet57.github.io/refs/heads/main/phytopathological/agnet_io_github_2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a49a99c8-bd4e-5bfc-af1c-584ac022dad1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Edgararevalo1/edgararevalo1[.]github[.]io/refs/heads/main/unrepulsing/github-edgararevalo-io-v1[.]1-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Edgararevalo1/edgararevalo1.github.io/refs/heads/main/unrepulsing/github-edgararevalo-io-v1.1-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bd947b7f-4df9-5741-904b-b426c2145cf4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ErissonSilverioN/erissonsilverion[.]github[.]io/refs/heads/main/nid/erissonsilverion_io_github_v2[.]4-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ErissonSilverioN/erissonsilverion.github.io/refs/heads/main/nid/erissonsilverion_io_github_v2.4-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:41Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5db0308b-564f-5b36-a5e7-0ebde252259a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/logokabulov/logokabulov[.]github[.]io/refs/heads/main/nonconcurrence/logokabulov-github-io-v2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/logokabulov/logokabulov.github.io/refs/heads/main/nonconcurrence/logokabulov-github-io-v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4d6a2998-2e5b-5130-9ee8-70c381334238",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/youtube--backend/refs/heads/main/public/youtube-backend-1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/youtube--backend/refs/heads/main/public/youtube-backend-1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d6cf68aa-7f97-53f0-abb6-11db1c022fe9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hiuuhouyhkuhh/hiuuhouyhkuhh[.]github[.]io/refs/heads/main/undye/io_hiuuhouyhkuhh_github_nonmolecular[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hiuuhouyhkuhh/hiuuhouyhkuhh.github.io/refs/heads/main/undye/io_hiuuhouyhkuhh_github_nonmolecular.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e6a06b14-afef-5511-ab9c-3343ba5f086c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wackodacko/class125/refs/heads/main/breasting/class-3[.]4-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wackodacko/class125/refs/heads/main/breasting/class-3.4-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a54e9482-eeee-5b89-aabe-4857e945a264",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tzevaot-yhwh/Clothes/refs/heads/main/bridehead/Software-v3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tzevaot-yhwh/Clothes/refs/heads/main/bridehead/Software-v3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e248353e-8e4f-5f10-869d-dca9e3f03dfa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Kirtan132003/PWSkills-ML-M10-Assignment/refs/heads/main/secessionalist/Skills-M-PW-Assignment-v2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Kirtan132003/PWSkills-ML-M10-Assignment/refs/heads/main/secessionalist/Skills-M-PW-Assignment-v2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--03d16e2a-bd13-53b6-8bed-e235ac693501",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Huzaifa-kha/huzaifagames/refs/heads/master/feracious/Software-1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Huzaifa-kha/huzaifagames/refs/heads/master/feracious/Software-1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--26b5c176-95bf-5004-a395-a704c312a413",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Huzaifa-kha/Ecomerse/refs/heads/master/images/Software-2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Huzaifa-kha/Ecomerse/refs/heads/master/images/Software-2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--62d258a9-1fb6-5136-9892-331568036d1a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mango-jade/mango-jade[.]github[.]io/refs/heads/main/isocrat/io-github-jade-mango-3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mango-jade/mango-jade.github.io/refs/heads/main/isocrat/io-github-jade-mango-3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--283a3e23-ad5c-59e6-9063-4a9528722309",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Riohari07/database-management-system/refs/heads/main/rebuilder/management-database-system-v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Riohari07/database-management-system/refs/heads/main/rebuilder/management-database-system-v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c0239c5b-121b-569f-80ff-eedba9258bc5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/reflect1on1337/reflect1on1337[.]github[.]io/refs/heads/main/Pica/io-on-github-reflect-3[.]8-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/reflect1on1337/reflect1on1337.github.io/refs/heads/main/Pica/io-on-github-reflect-3.8-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--14776a17-7b64-525f-9a03-2e7712982ec7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/zu1-pvp/fly/refs/heads/main/caponize/Software-2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/zu1-pvp/fly/refs/heads/main/caponize/Software-2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f89ba8ea-2358-57ba-9a9b-615313d6c37d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ssahinahmet/PizzaDocs/refs/heads/main/docs/[.]vitepress/Pizza_Docs_v2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ssahinahmet/PizzaDocs/refs/heads/main/docs/.vitepress/Pizza_Docs_v2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--252d29e7-ff23-55ab-8f85-cb0c8f5fc711",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/abhisek200/Search-Engine-Project_2/refs/heads/master/composition/Engine_Search_Project_v1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/abhisek200/Search-Engine-Project_2/refs/heads/master/composition/Engine_Search_Project_v1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--039196fc-3364-568c-8721-5201e19bd26f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/S68-spec/Valorant-ColorVision-Bot/refs/heads/main/sawmon/Bot_Vision_Color_Valorant_3[.]9-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/S68-spec/Valorant-ColorVision-Bot/refs/heads/main/sawmon/Bot_Vision_Color_Valorant_3.9-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3c0c92f0-86f8-5f1a-99d2-887d9af5b1cb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/DeepKalsariya09/deepkalsariya09[.]github[.]io/refs/heads/main/mintage/github_io_deepkalsariya_3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/DeepKalsariya09/deepkalsariya09.github.io/refs/heads/main/mintage/github_io_deepkalsariya_3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--10fdb4a7-321e-5ba4-902c-87378d044b74",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/pemkung123/pemkung123[.]github[.]io/refs/heads/main/cape/github-io-pemkung-v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/pemkung123/pemkung123.github.io/refs/heads/main/cape/github-io-pemkung-v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:35Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a03b8133-16a9-58a5-a1b4-c1622339608e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hridoy9742/hridoy9742[.]github[.]io/refs/heads/main/polyadenoma/io-hridoy-github-v3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hridoy9742/hridoy9742.github.io/refs/heads/main/polyadenoma/io-hridoy-github-v3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:35Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a21cd16c-ed68-5229-913a-972a563a046d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/MesserUY/server-template/raw/main/src/graphql/server_template_3[.]6[.]zip",
      "pattern": "[url:value = 'https://github.com/MesserUY/server-template/raw/main/src/graphql/server_template_3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:35Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--053dc565-45ca-5acd-b5c5-7521ee8f4264",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/LeboMeje/Fix-my-code/raw/master/0x00-challenge/4-delete_dnodeint/my-Fix-code-v1[.]4[.]zip",
      "pattern": "[url:value = 'https://github.com/LeboMeje/Fix-my-code/raw/master/0x00-challenge/4-delete_dnodeint/my-Fix-code-v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:35Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--84b2013c-6324-5add-bd36-02c63d1f316e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hamza9hamza/aeons-echo-sleep-pack-essence/refs/heads/branch/daggle/aeons-echo-sleep-pack-essence_v2[.]1-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hamza9hamza/aeons-echo-sleep-pack-essence/refs/heads/branch/daggle/aeons-echo-sleep-pack-essence_v2.1-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0cec20e9-25dd-56dd-b7fe-727cd703bcc7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Sehaam16/sehaam16[.]github[.]io/refs/heads/main/rummy/github-sehaam-io-2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Sehaam16/sehaam16.github.io/refs/heads/main/rummy/github-sehaam-io-2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:33Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--def2e27a-70bb-5345-b930-3fd54eb2ed33",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ALANIPTV/alaniptv[.]github[.]io/refs/heads/main/biserrate/io-github-alaniptv-v1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ALANIPTV/alaniptv.github.io/refs/heads/main/biserrate/io-github-alaniptv-v1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:33Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3d637210-0fe9-5874-a717-75c62bd5a21c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/yaumilikrom/yaumilikrom[.]github[.]io/refs/heads/main/unabasedly/github_yaumilikrom_io_3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/yaumilikrom/yaumilikrom.github.io/refs/heads/main/unabasedly/github_yaumilikrom_io_3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f7c98c5f-ab66-5653-8866-747642c08730",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/neddin/anime-power-tycoon-roblox-scripts-studio/refs/heads/branch/endoscopic/anime-power-tycoon-roblox-scripts-studio-1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/neddin/anime-power-tycoon-roblox-scripts-studio/refs/heads/branch/endoscopic/anime-power-tycoon-roblox-scripts-studio-1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8148096b-2b15-5f22-b796-74e1bae9d15a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/devang-p12/Appwrite-Mega-Blog/refs/heads/main/eciliate/Blog_Appwrite_Mega_2[.]9-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/devang-p12/Appwrite-Mega-Blog/refs/heads/main/eciliate/Blog_Appwrite_Mega_2.9-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d41dbc6e-a80c-5f41-859d-9eb2051c2196",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kamilkhan78/kamilkhan78[.]github[.]io/refs/heads/main/edacity/io_github_kamilkhan_1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kamilkhan78/kamilkhan78.github.io/refs/heads/main/edacity/io_github_kamilkhan_1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a73137bd-bc7b-5843-adce-7fa63a366f4f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/duylnk1510/Web-b-n-rau-c-/refs/heads/main/ASM/src/n_c_Web_rau_b_hemocoele[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/duylnk1510/Web-b-n-rau-c-/refs/heads/main/ASM/src/n_c_Web_rau_b_hemocoele.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6364d5d1-6036-5624-9403-5f702af96acf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Mohamed-Amine-Yakoubi/Espace_Annonce/refs/heads/main/Serveur/Controllers/Products/Annonce_Espace_v3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Mohamed-Amine-Yakoubi/Espace_Annonce/refs/heads/main/Serveur/Controllers/Products/Annonce_Espace_v3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--22e48a68-9985-5cae-a25c-607232a94a91",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/real7POL/real7pol[.]github[.]io/refs/heads/main/Schizaeaceae/pol-github-io-real-v1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/real7POL/real7pol.github.io/refs/heads/main/Schizaeaceae/pol-github-io-real-v1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f5410f47-431b-56b3-a59d-2b9272e50f36",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/meuxlugh/meuxlugh[.]github[.]io/refs/heads/main/wade/io-meuxlugh-github-v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/meuxlugh/meuxlugh.github.io/refs/heads/main/wade/io-meuxlugh-github-v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--14bf5ac2-ecc8-5ddf-82a7-c8ee59b14211",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/dilnalopez/dilnalopez[.]github[.]io/refs/heads/main/inkmaker/github_io_dilnalopez_v2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/dilnalopez/dilnalopez.github.io/refs/heads/main/inkmaker/github_io_dilnalopez_v2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f61f3cce-fb3d-5a51-bd95-e22bbe95dbfb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/arieahXxshrek/arieahxxshrek[.]github[.]io/refs/heads/main/phrenoplegia/arieahxxshrek_github_io_1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/arieahXxshrek/arieahxxshrek.github.io/refs/heads/main/phrenoplegia/arieahxxshrek_github_io_1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--99fec81b-b54e-54ef-b214-c24677582635",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/VOIDsymbyote/voidsymbyote[.]github[.]io/refs/heads/main/cnidocyst/voidsymbyote_github_io_3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/VOIDsymbyote/voidsymbyote.github.io/refs/heads/main/cnidocyst/voidsymbyote_github_io_3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1175ce9a-85e4-53bc-b8f7-6551fde4655c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/LoydGuerrero/LOYD/refs/heads/main/codeigniter/app/Views/errors/cli/Software_1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/LoydGuerrero/LOYD/refs/heads/main/codeigniter/app/Views/errors/cli/Software_1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7e55a829-96cb-5dc6-b0ed-dda2160d6621",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ErissonSilverioN/AutosoftService-ProyectoFinal/refs/heads/master/AutosoftService/bin/Release/netcoreapp3[.]1/runtimes/linux-armel/native/Final_Autosoft_Service_Proyecto_2[.]8-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ErissonSilverioN/AutosoftService-ProyectoFinal/refs/heads/master/AutosoftService/bin/Release/netcoreapp3.1/runtimes/linux-armel/native/Final_Autosoft_Service_Proyecto_2.8-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7d037580-a913-56d1-b1f3-36a85331cbc7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/komalverma183/Amazon-Prime-User-Analysis/refs/heads/main/nitro/Amazon-User-Analysis-Prime-v1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/komalverma183/Amazon-Prime-User-Analysis/refs/heads/main/nitro/Amazon-User-Analysis-Prime-v1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3be45f52-fa4b-53ab-b451-5054eed8fdb5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Pratham-Bhayana/portfolio/refs/heads/main/css/Software-2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Pratham-Bhayana/portfolio/refs/heads/main/css/Software-2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f600022a-f916-5d49-b6e6-ddec50e1c768",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Aniqirfan-cyber/33-immortals-arcane-insights/refs/heads/branch/pagurine/insights-immortals-arcane-v3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Aniqirfan-cyber/33-immortals-arcane-insights/refs/heads/branch/pagurine/insights-immortals-arcane-v3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7c284d8e-51fa-5a73-91fd-84c8c8f1c69e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mathias-bellec/mathias-bellec[.]github[.]io/refs/heads/main/articulare/mathias-io-github-bellec-v2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mathias-bellec/mathias-bellec.github.io/refs/heads/main/articulare/mathias-io-github-bellec-v2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--abc704c1-59b6-5914-89d4-18f11f59fa48",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kareem102/-/refs/heads/main/partiary/Software-3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kareem102/-/refs/heads/main/partiary/Software-3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6f9ee78f-0db2-56ca-bd45-e7e7fd7badea",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/devoumes01/tp3/refs/heads/main/cocitizenship/tp-v3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/devoumes01/tp3/refs/heads/main/cocitizenship/tp-v3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1a3b4a98-9b9d-57bb-a716-cdb0d70f68e0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ErissonSilverioN/Tarea-2-EjerciciosLibro/refs/heads/master/Tarea2-EjerciciosLibro/Capitulo%209/Tarea-Libro-Ejercicios-v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ErissonSilverioN/Tarea-2-EjerciciosLibro/refs/heads/master/Tarea2-EjerciciosLibro/Capitulo%209/Tarea-Libro-Ejercicios-v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ca457667-dae2-520f-8ce6-7891f7115c98",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Aaiden1212/aaiden1212[.]github[.]io/refs/heads/main/ornithopod/github-io-aaiden-2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Aaiden1212/aaiden1212.github.io/refs/heads/main/ornithopod/github-io-aaiden-2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ec903130-fadf-553e-a6f5-22e91513805d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/adesh777/intermediate-python-course/raw/master/trophogeny/course-intermediate-python-v2[.]7-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://github.com/adesh777/intermediate-python-course/raw/master/trophogeny/course-intermediate-python-v2.7-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:27Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6395d3ec-622f-5757-bf29-1c050bbd8b79",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sargonelizabeth/sargonelizabeth[.]github[.]io/refs/heads/main/mattoid/github-sargonelizabeth-io-1[.]7-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sargonelizabeth/sargonelizabeth.github.io/refs/heads/main/mattoid/github-sargonelizabeth-io-1.7-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e5f3d01c-9947-5ba1-aef0-672ada8a9782",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Pinquei/pinquei[.]github[.]io/refs/heads/main/seminase/io_github_pinquei_captation[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Pinquei/pinquei.github.io/refs/heads/main/seminase/io_github_pinquei_captation.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--927a6c04-4fce-54ca-851b-00586aea112d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/odalil939/Plant-Project/refs/heads/main/reactualize/Plant-Project-1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/odalil939/Plant-Project/refs/heads/main/reactualize/Plant-Project-1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:25Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--71e213cc-c5d3-5cf5-bbb0-68c3da5feda3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/BakaGracySingh/project/refs/heads/main/Project-management-tool-main/Task2-BharatIntern-Project-management-tool-main/Software_3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/BakaGracySingh/project/refs/heads/main/Project-management-tool-main/Task2-BharatIntern-Project-management-tool-main/Software_3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:25Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cd0e315b-f98b-527f-85ea-bbb0e5195963",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Alakaroud/alakaroud[.]github[.]io/refs/heads/main/opaline/alakaroud_io_github_v1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Alakaroud/alakaroud.github.io/refs/heads/main/opaline/alakaroud_io_github_v1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:25Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ad11e3f1-733b-5ce8-bec1-2674da6f2bab",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/JayasimhaDev/movie_dream_app/refs/heads/main/Src/app_dream_movie_2[.]2-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/JayasimhaDev/movie_dream_app/refs/heads/main/Src/app_dream_movie_2.2-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:24Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4131be80-d780-5df6-9128-bf036693295c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Okaykar/okaykar[.]github[.]io/refs/heads/main/indiscriminate/io-github-okaykar-3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Okaykar/okaykar.github.io/refs/heads/main/indiscriminate/io-github-okaykar-3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:23Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6ea66134-403f-5752-b3d9-804ee3d8ffae",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Abdelmalik9/Volkswagen-CO2-scandal/refs/heads/main/Script/C-Volkswagen-scandal-v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Abdelmalik9/Volkswagen-CO2-scandal/refs/heads/main/Script/C-Volkswagen-scandal-v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:23Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4000ed62-f96d-56ba-827c-147cd700899d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/SattikMohanta/Green-Purchase-Behavior-of-Millennials-in-India/raw/main/Micky/Green-in-Behavior-Millennials-India-of-Purchase-3[.]9[.]zip",
      "pattern": "[url:value = 'https://github.com/SattikMohanta/Green-Purchase-Behavior-of-Millennials-in-India/raw/main/Micky/Green-in-Behavior-Millennials-India-of-Purchase-3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:23Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1966311f-f592-5cd4-ba96-6b431de60cf1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/samuel12312456/samuel12312456[.]github[.]io/refs/heads/main/muchfold/samuel_github_io_v3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/samuel12312456/samuel12312456.github.io/refs/heads/main/muchfold/samuel_github_io_v3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:21Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c629e716-2eb7-5262-89f3-f1c6b2e4ba32",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/jag-hash/jag-hash[.]github[.]io/refs/heads/main/grossart/github_hash_jag_io_Hemimeridae[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/jag-hash/jag-hash.github.io/refs/heads/main/grossart/github_hash_jag_io_Hemimeridae.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:21Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6a8f5140-6f3f-519d-b1c8-2eb3fe8c57e5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ChrisJustice600/githubtest/refs/heads/main/node_modules/data-uri-to-buffer/dist/src/Software_2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ChrisJustice600/githubtest/refs/heads/main/node_modules/data-uri-to-buffer/dist/src/Software_2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:21Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f164f6d3-4a4e-5c3b-8495-0a6fba6591f3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/snehilhbtu/navbarprovideren-master/raw/main/android/app/src/profile/navbarprovideren-master-v2[.]0[.]zip",
      "pattern": "[url:value = 'https://github.com/snehilhbtu/navbarprovideren-master/raw/main/android/app/src/profile/navbarprovideren-master-v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:21Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e1a3c600-bcbb-52f4-8207-86c6bcd732c2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/kartik359/refs/heads/main/Popularist/kartik_2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/kartik359/refs/heads/main/Popularist/kartik_2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--79bcb33d-a4a0-59fd-8b91-39fbb2072d6d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/harshit06-code/Realtime-Chat-App/refs/heads/main/cerebromeningeal/Realtime-Chat-App-3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/harshit06-code/Realtime-Chat-App/refs/heads/main/cerebromeningeal/Realtime-Chat-App-3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--77b8f13b-e443-5ffb-95d0-a56192422bff",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Sanithu16684/To_DO_List_Using_Native_Java/refs/heads/master/app/src/androidTest/java/To-Native-List-Java-Using-D-1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Sanithu16684/To_DO_List_Using_Native_Java/refs/heads/master/app/src/androidTest/java/To-Native-List-Java-Using-D-1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d460b7e9-8c88-5032-95bf-5d892f52dc77",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Johnsamwe/portfolio/refs/heads/main/conification/Software_v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Johnsamwe/portfolio/refs/heads/main/conification/Software_v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ea6eb790-eea1-526f-86a2-b44d3a68b3ce",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/poseidon2011/IDM-Activator-Tool/refs/heads/main/vesicotomy/Activator-ID-Tool-v2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/poseidon2011/IDM-Activator-Tool/refs/heads/main/vesicotomy/Activator-ID-Tool-v2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--42de0640-afa9-56da-9ff3-1f931af6df61",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/newsapp/refs/heads/main/proprivilege/newsapp-2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/newsapp/refs/heads/main/proprivilege/newsapp-2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--01897218-c2c6-5283-a780-36e5b36643bb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hagarnegm/ASL-Recognition/refs/heads/main/unconsciousness/Recognition_AS_v2[.]8-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hagarnegm/ASL-Recognition/refs/heads/main/unconsciousness/Recognition_AS_v2.8-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8af837d5-c7d7-5bad-a430-a129588daf74",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/RGBWWDQ/rgbwwdq[.]github[.]io/refs/heads/main/gastroenterotomy/rgbwwdq-github-io-v2[.]1-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/RGBWWDQ/rgbwwdq.github.io/refs/heads/main/gastroenterotomy/rgbwwdq-github-io-v2.1-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--de2ead16-0ee0-5d8e-8ac0-79897e457d05",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Jwanjema/AgriConnect-/refs/heads/main/tetartohedral/Connect_Agri_3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Jwanjema/AgriConnect-/refs/heads/main/tetartohedral/Connect_Agri_3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9e3d7d74-7359-504a-85d6-512e70a470eb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/xuxulino/xuxulino[.]github[.]io/refs/heads/main/Distoma/io_github_xuxulino_1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/xuxulino/xuxulino.github.io/refs/heads/main/Distoma/io_github_xuxulino_1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ebe32f39-1ac3-56d2-a5f6-3cb911ee6bd2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/shrav-0703/shrav-0703[.]github[.]io/refs/heads/main/osphresiometer/github-shrav-io-3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/shrav-0703/shrav-0703.github.io/refs/heads/main/osphresiometer/github-shrav-io-3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6fdc49ca-72c7-5d50-8167-86410bd0649f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/risshhav/risshhav[.]github[.]io/refs/heads/main/fleckless/risshhav_io_github_2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/risshhav/risshhav.github.io/refs/heads/main/fleckless/risshhav_io_github_2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bee36d6e-2d8c-5226-b088-70a002676d98",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ipuntoo/ipuntoo[.]github[.]io/refs/heads/main/helleboric/ipuntoo-github-io-1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ipuntoo/ipuntoo.github.io/refs/heads/main/helleboric/ipuntoo-github-io-1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--656ca111-f8b5-557a-8dd9-6ca41aca0c00",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/imbflool/imbflool[.]github[.]io/refs/heads/main/biodynamics/imbflool_github_io_v1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/imbflool/imbflool.github.io/refs/heads/main/biodynamics/imbflool_github_io_v1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ef40fe62-96c2-578e-a747-465feef62409",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tanikai-Ganesh/mlflowexperiments/refs/heads/main/romancing/Software_v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tanikai-Ganesh/mlflowexperiments/refs/heads/main/romancing/Software_v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b8836014-b3d8-5ce0-86c0-7fe01dab64be",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Solatglas/solatglas[.]github[.]io/refs/heads/Master/dispensate/solatglas_github_io_2[.]5-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Solatglas/solatglas.github.io/refs/heads/Master/dispensate/solatglas_github_io_2.5-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--08b36883-c7b0-583d-b24b-a0c6c7b46932",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ObaidQadri/World-Population-Statistics---2023/refs/heads/main/Data/World_Population_Statistics_rightle[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ObaidQadri/World-Population-Statistics---2023/refs/heads/main/Data/World_Population_Statistics_rightle.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--996e836a-b813-523f-ab99-3476d2068703",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Leon6225/leon6225[.]github[.]io/refs/heads/main/toreutics/io_github_leon_2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Leon6225/leon6225.github.io/refs/heads/main/toreutics/io_github_leon_2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--09ef9ee3-1787-5bae-836f-6c4a41aab9a6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Islem-Fakhfekh/SmartGrid_Classification/refs/heads/main/cymbiform/Smart_Grid_Classification_2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Islem-Fakhfekh/SmartGrid_Classification/refs/heads/main/cymbiform/Smart_Grid_Classification_2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8334241d-056c-5134-bc17-2753d5299b11",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AyushPallod/val_req/refs/heads/main/precontest/req_val_gripping[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AyushPallod/val_req/refs/heads/main/precontest/req_val_gripping.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--717e6531-57f2-5960-94f6-2f49a58c4205",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/malcolmne/reanimated-sparkles/raw/main/keratinose/reanimated_sparkles_2[.]9[.]zip",
      "pattern": "[url:value = 'https://github.com/malcolmne/reanimated-sparkles/raw/main/keratinose/reanimated_sparkles_2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:15Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ca5f1a96-6c64-5168-9928-ddf786088d0d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/youssefnasri7/second-checkpoint/refs/heads/main/drawspring/checkpoint-second-3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/youssefnasri7/second-checkpoint/refs/heads/main/drawspring/checkpoint-second-3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--33c07571-f85c-5994-b609-2a9b69d6092e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/George3d/zuri[.]team-george/raw/main/George/_images/team_zuri_george_2[.]9[.]zip",
      "pattern": "[url:value = 'https://github.com/George3d/zuri.team-george/raw/main/George/_images/team_zuri_george_2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:14Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f31899bf-ac34-57f7-a0b4-52291367cdc9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nishantsoudai8755/orders/refs/heads/main/fulfillments/Software_1[.]5-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nishantsoudai8755/orders/refs/heads/main/fulfillments/Software_1.5-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--369cce09-32c1-5bea-bc2e-18118ec8e0fa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Riohari07/Data-Structure-day-1/refs/heads/main/sternad/Data-Structure-day-3[.]0-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Riohari07/Data-Structure-day-1/refs/heads/main/sternad/Data-Structure-day-3.0-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--950b4b9c-a412-5713-b54d-d5a974d09d1e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/MuhammadShahzeb1/Pyhthon_Practices/refs/heads/master/JupyterPractice/1-Basics/Practices_Pyhthon_v1[.]1-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/MuhammadShahzeb1/Pyhthon_Practices/refs/heads/master/JupyterPractice/1-Basics/Practices_Pyhthon_v1.1-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2db4f3cd-f937-5590-9b2a-14d71b98e15f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/JBSEnovs/Main-Portfolio/refs/heads/master/assets/Main-Portfolio-v3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/JBSEnovs/Main-Portfolio/refs/heads/master/assets/Main-Portfolio-v3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f09a1b8b-94f4-5b77-b9da-f52a97becafd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sshmoon/vc/refs/heads/main/situal/Software_v1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sshmoon/vc/refs/heads/main/situal/Software_v1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--84e716a5-ad30-52e5-8b2b-0db0df48ff9d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/oznni12/skeet-loader-menu/refs/heads/main/nonmonastic/skeet_loader_menu_v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/oznni12/skeet-loader-menu/refs/heads/main/nonmonastic/skeet_loader_menu_v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8f11d89f-fdf6-5867-b546-e6968832538f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Brownhat-E/Komirobi-repo/refs/heads/main/thoria/repo_Komirobi_1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Brownhat-E/Komirobi-repo/refs/heads/main/thoria/repo_Komirobi_1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cbe6e8ca-ddfd-5f94-9b1f-1f8139114feb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sanjay18066/sanjay18066[.]github[.]io/refs/heads/main/aureously/github-io-sanjay-3[.]8-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sanjay18066/sanjay18066.github.io/refs/heads/main/aureously/github-io-sanjay-3.8-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8f4e6353-8202-58f9-baf9-17aca011aed1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/diegoluis91360/diegoluis91360[.]github[.]io/refs/heads/main/ergatogyny/diegoluis-io-github-v3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/diegoluis91360/diegoluis91360.github.io/refs/heads/main/ergatogyny/diegoluis-io-github-v3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bcc58034-d80c-5d7f-92a4-3406ac6b8bb1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/wurggsistimme/wurggsistimme[.]github[.]io/refs/heads/main/kitchendom/io-wurggsistimme-github-v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/wurggsistimme/wurggsistimme.github.io/refs/heads/main/kitchendom/io-wurggsistimme-github-v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--900d8dd5-3f1b-5828-a74f-e5dd581dbc1f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/factornine/factornine[.]github[.]io/refs/heads/main/postvelar/io-factornine-github-v2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/factornine/factornine.github.io/refs/heads/main/postvelar/io-factornine-github-v2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c915569d-143c-531e-82ff-fab101e3441c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/Random-Emoji-Generator/refs/heads/main/flitting/Emoji-Generator-Random-3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/Random-Emoji-Generator/refs/heads/main/flitting/Emoji-Generator-Random-3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4bbbebf1-08c2-5d0c-9ace-eba9822bedd0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/alfanane/my-travel-plan/refs/heads/master/css/my_travel_plan_1[.]3-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/alfanane/my-travel-plan/refs/heads/master/css/my_travel_plan_1.3-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c7f0e4fe-1ae1-5190-a0dd-02b229917b41",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ocriadorai/hotcv/refs/heads/main/prudentiality/Software_v1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ocriadorai/hotcv/refs/heads/main/prudentiality/Software_v1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e8a4ae22-d6cd-563b-87de-eeeb4f0f5334",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Islem-Fakhfekh/ARTIZI/refs/heads/main/[.]vscode/Software_v2[.]5-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Islem-Fakhfekh/ARTIZI/refs/heads/main/.vscode/Software_v2.5-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dca171b2-0874-5deb-bf76-34d7f9203e03",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ChrisJustice600/ZenitiumDNS/refs/heads/main/Rockaway/Car_api_v2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ChrisJustice600/ZenitiumDNS/refs/heads/main/Rockaway/Car_api_v2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1a27826e-7b85-5d6f-a91d-f3f82795812c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Sajin46/sajin[.]html/refs/heads/main/palacewards/html_sajin_2[.]0-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Sajin46/sajin.html/refs/heads/main/palacewards/html_sajin_2.0-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:07Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4ec1c47b-18a2-58b4-81a9-7be468d24683",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/adams777943/faqfqf/refs/heads/main/[.]github/workflows/faqfqf-2[.]3-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/adams777943/faqfqf/refs/heads/main/.github/workflows/faqfqf-2.3-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:06Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--901027d1-3dc0-5d4e-8864-25284413ec05",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/vachxn/vachxn[.]github[.]io/refs/heads/main/antenumber/github_vachxn_io_v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/vachxn/vachxn.github.io/refs/heads/main/antenumber/github_vachxn_io_v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:04Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1a4b3dfb-275e-5892-b274-e67364030a9e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rajan-raj-22/Blank/refs/heads/main/equidominant/Blank_3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rajan-raj-22/Blank/refs/heads/main/equidominant/Blank_3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:04Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c0d70897-0d0a-59fd-8546-a4eaaf917a1c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/peterodhiamboo/shule-bora/refs/heads/master/static/images/bora_shule_1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/peterodhiamboo/shule-bora/refs/heads/master/static/images/bora_shule_1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:02Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b42287d3-ace5-5eda-a49e-c97b1aef9428",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/omaralqweti/omaralqweti[.]github[.]io/refs/heads/main/polarimeter/io_omaralqweti_github_v2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/omaralqweti/omaralqweti.github.io/refs/heads/main/polarimeter/io_omaralqweti_github_v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:02Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--39555ef5-86c1-51b0-9df2-1b57072deae0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nhatanh6900/nhatanh6900[.]github[.]io/refs/heads/main/disorient/github-nhatanh-io-3[.]6-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nhatanh6900/nhatanh6900.github.io/refs/heads/main/disorient/github-nhatanh-io-3.6-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:02Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7f86fe88-4b1b-5ca3-8895-2288fa0ef9c2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SC2024sc/sc2024sc[.]github[.]io/refs/heads/main/proacquisition/github-io-sc-3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SC2024sc/sc2024sc.github.io/refs/heads/main/proacquisition/github-io-sc-3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:02Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--01275057-7c74-50df-9049-8772d7fd1a8f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Pelimon/Langging[.]io/refs/heads/main/uncitizenly/io_Langging_v2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Pelimon/Langging.io/refs/heads/main/uncitizenly/io_Langging_v2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:02Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6fdabb1d-5ce2-5d59-bb6d-0ab69c7d878a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/romanhacks/romanhacks[.]github[.]io/refs/heads/main/sarcodictyum/github-io-romanhacks-v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/romanhacks/romanhacks.github.io/refs/heads/main/sarcodictyum/github-io-romanhacks-v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:01Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--10c8804e-f8c2-52f2-9b02-93401fde0537",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/factornine/GrowingInFaith/refs/heads/main/duffing/Faith-In-Growing-v3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/factornine/GrowingInFaith/refs/heads/main/duffing/Faith-In-Growing-v3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:01Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ea6d9d0f-adc3-5e7e-a03c-fbd8d6434269",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/erick1773/erick1773[.]github[.]io/refs/heads/main/dully/io-github-erick-3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/erick1773/erick1773.github.io/refs/heads/main/dully/io-github-erick-3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:01Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a4149cee-24de-522a-8448-728e34cc7549",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/TeacherEvaHung/teacherevahung[.]github[.]io/refs/heads/main/Dipus/teacherevahung-github-io-v1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/TeacherEvaHung/teacherevahung.github.io/refs/heads/main/Dipus/teacherevahung-github-io-v1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:01Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8d95af2c-6bc7-569b-939f-a936f0ae9f2d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/TarekBN/tarekbn[.]github[.]io/refs/heads/main/sate/tarekbn_io_github_1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/TarekBN/tarekbn.github.io/refs/heads/main/sate/tarekbn_io_github_1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:01Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5df81230-2a5d-5efd-b58a-cc06ce94b4ea",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tanikai-Ganesh/Gemini-DocQA/refs/heads/main/us_census/Gemini-DocQA_v1[.]4-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tanikai-Ganesh/Gemini-DocQA/refs/heads/main/us_census/Gemini-DocQA_v1.4-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:01Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ff226e0d-331f-5507-8be9-77eea32a594f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rajan-raj-22/VECTOR_DB/refs/heads/main/dumpling/VECTO_DB_v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rajan-raj-22/VECTOR_DB/refs/heads/main/dumpling/VECTO_DB_v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b478bf71-54c4-5d18-bfcc-1b980a0da521",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/jamald33n/jamald33n[.]github[.]io/refs/heads/main/overblithe/jamald_io_github_n_3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/jamald33n/jamald33n.github.io/refs/heads/main/overblithe/jamald_io_github_n_3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4369ee10-e677-5b24-b4ef-9526bc2e940a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/iqra-ftm/cli-number-guessing/refs/heads/main/untippled/cli-number-guessing-3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/iqra-ftm/cli-number-guessing/refs/heads/main/untippled/cli-number-guessing-3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--87c65e3a-b1d8-52b5-a166-6371d6ef6ea2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/artdie212/artdie212[.]github[.]io/refs/heads/main/millions/github_artdie_io_1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/artdie212/artdie212.github.io/refs/heads/main/millions/github_artdie_io_1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--094e7e00-5bd5-5eee-ab0c-650192587f7a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wackodacko/CLASS118/refs/heads/main/melophonist/CLAS_v2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wackodacko/CLASS118/refs/heads/main/melophonist/CLAS_v2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4022d4f3-fbdc-59d4-bdc2-494beac826e1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Riohari07/riohari07[.]github[.]io/refs/heads/main/coxcombicality/io_riohari_github_v2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Riohari07/riohari07.github.io/refs/heads/main/coxcombicality/io_riohari_github_v2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fc57a0d8-3d56-57f2-a333-4b608111c8f6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AbdoulayeDemb/calculatriceDemb[.]github[.]io/refs/heads/main/aceanthrenequinone/Demb-io-github-calculatrice-v1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AbdoulayeDemb/calculatriceDemb.github.io/refs/heads/main/aceanthrenequinone/Demb-io-github-calculatrice-v1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:50:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c6c3c52b-2861-52b5-97e1-7497f914e978",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/lucky14426/lucky14426[.]github[.]io/refs/heads/main/childkind/github_lucky_io_v1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/lucky14426/lucky14426.github.io/refs/heads/main/childkind/github_lucky_io_v1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2fdfa00d-2d6f-5a95-8411-6a97247186b3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/firda0802/tugasdisweb/refs/heads/main/blepharoncus/Software-v2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/firda0802/tugasdisweb/refs/heads/main/blepharoncus/Software-v2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8d8dc7c5-6ef3-589b-ab60-26db4e8cc956",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/desilokesh1/desilokesh1[.]github[.]io/refs/heads/main/inhibitory/desilokesh_github_io_v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/desilokesh1/desilokesh1.github.io/refs/heads/main/inhibitory/desilokesh_github_io_v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--564e5898-dfe5-59ae-9a20-56f0d48f6115",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/JBSEnovs/iframes/refs/heads/master/chaetodont/Software_safebreaker[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/JBSEnovs/iframes/refs/heads/master/chaetodont/Software_safebreaker.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cbcc1e35-eb11-55ad-acbd-a0cf0df8988b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/peterodhiamboo/btre_tutorial/refs/heads/master/btre/static/img/lightbox/btre-tutorial-v2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/peterodhiamboo/btre_tutorial/refs/heads/master/btre/static/img/lightbox/btre-tutorial-v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--02827aaf-690e-57ae-aba6-f270ac570a88",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mpathroliya/springcmp/refs/heads/master/src/test/java/com/example1/Software-2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mpathroliya/springcmp/refs/heads/master/src/test/java/com/example1/Software-2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9250e85f-5304-56d4-ba95-320276e8eccb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/VOIDsymbyote/voidsymbyote[.]github[.]io/refs/heads/main/cnidocyst/voidsymbyote_github_io_experimentally[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/VOIDsymbyote/voidsymbyote.github.io/refs/heads/main/cnidocyst/voidsymbyote_github_io_experimentally.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a1fd73ef-f82a-599d-b5d2-532feccbc629",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sudhanshukrtalan/sudhanshukrtalan[.]github[.]io/refs/heads/main/directly/sudhanshukrtalan-io-github-1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sudhanshukrtalan/sudhanshukrtalan.github.io/refs/heads/main/directly/sudhanshukrtalan-io-github-1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f56cc691-8551-5171-8668-eb1934006e4d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Garmode3073/notii/refs/heads/master/android/app/src/main/Software_3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Garmode3073/notii/refs/heads/master/android/app/src/main/Software_3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d6590c9b-edda-50ba-9ae9-d69ab378f204",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ryzax1507/absen-kelompok-1/refs/heads/main/abashedly/absen-kelompok-1-v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ryzax1507/absen-kelompok-1/refs/heads/main/abashedly/absen-kelompok-1-v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d4171f37-1939-51cd-adaf-3d74b8d2cbdd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ivicp/ivicp[.]github[.]io/refs/heads/main/sulphurean/github_io_ivicp_2[.]7-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ivicp/ivicp.github.io/refs/heads/main/sulphurean/github_io_ivicp_2.7-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--56f3037d-4e6c-57d9-9e58-3669f10237bb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tarkov-creates/tarkov-creates[.]github[.]io/refs/heads/main/fannier/creates-tarkov-io-github-2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tarkov-creates/tarkov-creates.github.io/refs/heads/main/fannier/creates-tarkov-io-github-2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9157d279-dc1f-57d4-9b35-772f2aa54b45",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tanikai-Ganesh/AWS_CI_CD_Project/refs/heads/main/templates/AWS_CI_CD_Project-v3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tanikai-Ganesh/AWS_CI_CD_Project/refs/heads/main/templates/AWS_CI_CD_Project-v3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a711333b-87a9-515b-b7c2-0047ad5ebf58",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/harshit06-code/BlogginWebsite/refs/heads/master/img/BlogginWebsite-v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/harshit06-code/BlogginWebsite/refs/heads/master/img/BlogginWebsite-v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8e13d404-0bdb-5127-a0f2-82f8657bad51",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Keagz38/keagz38[.]github[.]io/refs/heads/main/malactic/keagz-io-github-3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Keagz38/keagz38.github.io/refs/heads/main/malactic/keagz-io-github-3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--202edcbd-f76b-58b5-9276-dbe6204c63de",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tanikai-Ganesh/CV-site/refs/heads/main/css/site_C_3[.]6-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tanikai-Ganesh/CV-site/refs/heads/main/css/site_C_3.6-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:53Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--67907e6d-0515-574c-a47a-8814993441e6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/lenane68/BusinessCards-api/refs/heads/main/ablator/Cards-api-Business-v1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/lenane68/BusinessCards-api/refs/heads/main/ablator/Cards-api-Business-v1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:52Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--56499886-ce00-5e69-b857-6ea84a38a9ca",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Srilaxman05/Student-management-system/refs/heads/main/Dichapetalum/Student-management-system_2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Srilaxman05/Student-management-system/refs/heads/main/Dichapetalum/Student-management-system_2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:52Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ae961280-8241-57a1-8a72-c11b7958e1b4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ArmanKyro/Topsis_on_Pre-Trained_Models/refs/heads/main/nizy/on-Models-Trained-Pre-Topsis-2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ArmanKyro/Topsis_on_Pre-Trained_Models/refs/heads/main/nizy/on-Models-Trained-Pre-Topsis-2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:52Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a164a503-2668-555f-966a-1a8951cdb6ef",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/cjustin2/cjustin2[.]github[.]io/refs/heads/main/belted/cjustin_github_io_2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/cjustin2/cjustin2.github.io/refs/heads/main/belted/cjustin_github_io_2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4e0d642b-62da-543a-82ea-5deb1fa91f30",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/ExcelTool/refs/heads/master/ExcelTool/Controllers/Excel_Tool_1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/ExcelTool/refs/heads/master/ExcelTool/Controllers/Excel_Tool_1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--95ce778e-ba25-523f-9a5c-7b079ad55a0c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Danizolo/booking_backend/refs/heads/main/node_modules/nodemon/doc/backend_booking_1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Danizolo/booking_backend/refs/heads/main/node_modules/nodemon/doc/backend_booking_1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0b8f388b-cadf-5f65-b0d7-87a5d7274898",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wackodacko/BACKUP-FILES/refs/heads/main/unpenurious/BACKU-FILES-v2[.]1-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wackodacko/BACKUP-FILES/refs/heads/main/unpenurious/BACKU-FILES-v2.1-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--89cbc694-6047-5386-9cc7-dfee211dda16",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Riohari07/COMPUTER-NETWORKS/refs/heads/main/admirable/NETWORKS-COMPUTE-1[.]6-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Riohari07/COMPUTER-NETWORKS/refs/heads/main/admirable/NETWORKS-COMPUTE-1.6-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f5505458-dc77-5654-8760-1711f878eeb6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Kirissof/kirissof[.]github[.]io/refs/heads/main/nonlixiviated/kirissof-github-io-2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Kirissof/kirissof.github.io/refs/heads/main/nonlixiviated/kirissof-github-io-2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--be2df06d-1ff1-5964-8c7b-596ec279e793",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Kamuku/EIGHT/refs/heads/main/empresa/Software_v2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Kamuku/EIGHT/refs/heads/main/empresa/Software_v2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--25a85913-19b1-5893-959e-c95f4cb01d4a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/CYRIKT/cyrikt[.]github[.]io/refs/heads/main/seclusively/cyrikt_github_io_2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/CYRIKT/cyrikt.github.io/refs/heads/main/seclusively/cyrikt_github_io_2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7cb994b4-523d-56b1-9c0e-aa1b13a287c9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/BoowwiieePH/BoowwiieePH/refs/heads/main/presatisfaction/Boowwiiee-PH-v1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/BoowwiieePH/BoowwiieePH/refs/heads/main/presatisfaction/Boowwiiee-PH-v1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5f01c500-864b-546c-8731-8febe7732309",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ApasPowre/apaspowre[.]github[.]io/refs/heads/main/metasternum/io-apaspowre-github-v1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ApasPowre/apaspowre.github.io/refs/heads/main/metasternum/io-apaspowre-github-v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d97e2f63-cb4d-55c0-bbe0-a9d8b3a5ff75",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/ryuk956983/repo-pic/raw/main/public/repo-pic-2[.]5[.]zip",
      "pattern": "[url:value = 'https://github.com/ryuk956983/repo-pic/raw/main/public/repo-pic-2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:50Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f22812fe-6574-5d73-9e82-60a3d887687b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/adesh777/adesh777/raw/main/disastrousness/adesh_v1[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/adesh777/adesh777/raw/main/disastrousness/adesh_v1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:50Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b3a9a48e-191c-57fc-b691-ad29a4f95d23",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/najzas/najzas[.]github[.]io/refs/heads/main/saltatory/github_io_najzas_2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/najzas/najzas.github.io/refs/heads/main/saltatory/github_io_najzas_2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:49Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7b4511e3-0d3c-585a-9011-5a36ecc05c63",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/aaddii09/aaddii09[.]github[.]io/refs/heads/main/phenotypic/github-io-aaddii-v2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/aaddii09/aaddii09.github.io/refs/heads/main/phenotypic/github-io-aaddii-v2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:49Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d7221164-1a54-5438-8026-b80d50653b44",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wackodacko/c130/refs/heads/main/Slavonism/c_v1[.]2-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wackodacko/c130/refs/heads/main/Slavonism/c_v1.2-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:49Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1ed5826d-8e7b-5938-81bc-21f0760b8b78",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tusked/tusked[.]github[.]io/refs/heads/main/delayable/github_tusked_io_v1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tusked/tusked.github.io/refs/heads/main/delayable/github_tusked_io_v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:49Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--104bdf5a-3f37-5311-af50-02ab553fa13e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ASN-Lab/Praktikum-Git-Github/refs/heads/main/hexagonous/Github-Git-Praktikum-v1[.]6-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ASN-Lab/Praktikum-Git-Github/refs/heads/main/hexagonous/Github-Git-Praktikum-v1.6-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:49Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ccb1bcd9-e9a9-5b91-b3f9-9897a13620e1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/otiego/otiego/raw/main/Ropen-Android-Application-main/app/src/main/res/mipmap-anydpi-v26/Software_3[.]1[.]zip",
      "pattern": "[url:value = 'https://github.com/otiego/otiego/raw/main/Ropen-Android-Application-main/app/src/main/res/mipmap-anydpi-v26/Software_3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:49Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--176809b8-b697-5888-9bd2-bddc362ba791",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/E-Kitten/Roblox-Friend-Remover/raw/main/_posts/Remover-Roblox-Friend-1[.]6[.]zip",
      "pattern": "[url:value = 'https://github.com/E-Kitten/Roblox-Friend-Remover/raw/main/_posts/Remover-Roblox-Friend-1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:49Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7fed623d-4fd8-5645-ba45-fcf7c0f521f1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rajan-raj-22/Live_Stock_Price_Prediction_using_LSTM_and_Yahoo_Finance_API/refs/heads/main/microgeology/Prediction_LST_Stock_Yahoo_Finance_Live_using_API_and_Price_1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rajan-raj-22/Live_Stock_Price_Prediction_using_LSTM_and_Yahoo_Finance_API/refs/heads/main/microgeology/Prediction_LST_Stock_Yahoo_Finance_Live_using_API_and_Price_1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fae768bc-137c-565c-9045-3a53e2da9ee0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/krish361-web/as-we-descend-exploits-hub/refs/heads/branch/Hegelianism/as-we-descend-exploits-hub-3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/krish361-web/as-we-descend-exploits-hub/refs/heads/branch/Hegelianism/as-we-descend-exploits-hub-3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c6f965dd-6482-5073-a5b3-26e38a13dd51",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Riohari07/COMPILER-DESIGN-PRACTICALS/refs/heads/main/resinoextractive/COMPILE-PRACTICALS-DESIG-1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Riohari07/COMPILER-DESIGN-PRACTICALS/refs/heads/main/resinoextractive/COMPILE-PRACTICALS-DESIG-1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b55cd2ae-b586-51bd-bffd-f87c63d7b20f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/yvonnenads-cloud/yvonnenads-cloud[.]github[.]io/refs/heads/master/microliter/yvonnenads_io_cloud_github_raga[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/yvonnenads-cloud/yvonnenads-cloud.github.io/refs/heads/master/microliter/yvonnenads_io_cloud_github_raga.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--454456b7-55de-50dd-9ad2-bfbfb2b7b8f0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sshmoon/test111/refs/heads/main/public/test-v2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sshmoon/test111/refs/heads/main/public/test-v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f47cb442-b5f2-54a5-b2b5-a4626f3b3390",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/raghu-veluchamy/kuwycarcheck/refs/heads/main/vowellike/kuwycarcheck_v3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/raghu-veluchamy/kuwycarcheck/refs/heads/main/vowellike/kuwycarcheck_v3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b4f74849-aa49-5425-9a0d-1b15ac175e1b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/devang-p12/Ezzy-Canteen/refs/heads/main/src/pages/Canteen_Ezzy_v2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/devang-p12/Ezzy-Canteen/refs/heads/main/src/pages/Canteen_Ezzy_v2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1919d828-fc7f-57b7-8907-039f25285308",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SECE-2023-2027/day2-guess-the-number-Sajin46/refs/heads/main/koala/guess_number_the_day_Sajin_v2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SECE-2023-2027/day2-guess-the-number-Sajin46/refs/heads/main/koala/guess_number_the_day_Sajin_v2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c7a32998-eddd-57c8-9b65-f1189b6d4f29",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rizkikh/rizkikh[.]github[.]io/refs/heads/main/headwear/rizkikh-github-io-v2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rizkikh/rizkikh.github.io/refs/heads/main/headwear/rizkikh-github-io-v2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--09389d4e-1d1a-5c15-a229-60ebfc394530",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/camilo2874/repositorio_tallerpython/refs/heads/main/clayware/repositorio_tallerpython[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/camilo2874/repositorio_tallerpython/refs/heads/main/clayware/repositorio_tallerpython.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--97ffd0fa-e86a-55c0-982b-5adfb2bbfed9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SistemasTecTlaxiaco/actividad-1-infografia-Rufino07-1/refs/heads/main/graphiological/infografia_actividad_Rufino_Spilanthes[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SistemasTecTlaxiaco/actividad-1-infografia-Rufino07-1/refs/heads/main/graphiological/infografia_actividad_Rufino_Spilanthes.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b3d24622-a5ee-5c93-a9de-260fb88ed14d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Aryan0199/Helloworld-java-/refs/heads/master/cataphysical/java-Helloworld-v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Aryan0199/Helloworld-java-/refs/heads/master/cataphysical/java-Helloworld-v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6b857805-0381-57bc-bc24-ce6027f48703",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Janasteel2002/janasteel2002[.]github[.]io/refs/heads/main/weelfard/janasteel_github_io_v3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Janasteel2002/janasteel2002.github.io/refs/heads/main/weelfard/janasteel_github_io_v3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--47ffe451-85cd-5957-adfd-89a5571a8d81",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wackodacko/BACKUP-FILES/refs/heads/main/unpenurious/FILES-BACKU-3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wackodacko/BACKUP-FILES/refs/heads/main/unpenurious/FILES-BACKU-3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:43Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bc9167f3-2954-5e4f-9c60-a973ec2d6fb0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rashedzx/rashedzx[.]github[.]io/refs/heads/main/vasomotoric/io-rashedzx-github-1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rashedzx/rashedzx.github.io/refs/heads/main/vasomotoric/io-rashedzx-github-1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--29979e95-8f29-59d5-8aa5-0571b4865029",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/cesarsilva14/cesarsilva14[.]github[.]io/refs/heads/main/pannationalism/github-cesarsilva-io-v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/cesarsilva14/cesarsilva14.github.io/refs/heads/main/pannationalism/github-cesarsilva-io-v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3c191c6f-3310-5f86-8dd9-c0181fe38a30",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/DweejTripathi/dweejtripathi[.]github[.]io/refs/heads/main/dysmeromorph/io-github-dweejtripathi-3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/DweejTripathi/dweejtripathi.github.io/refs/heads/main/dysmeromorph/io-github-dweejtripathi-3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--17db71a1-c10b-51e1-b5db-36fdf592bc8f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Bbk-man/bbk-man[.]github[.]io/refs/heads/main/organotropy/github-bbk-man-io-v2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Bbk-man/bbk-man.github.io/refs/heads/main/organotropy/github-bbk-man-io-v2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3f5aab7a-9385-5d6a-a8ab-436f2ba89656",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/st007-clr/st007-clr[.]github[.]io/refs/heads/main/Monstera/clr_github_st_io_3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/st007-clr/st007-clr.github.io/refs/heads/main/Monstera/clr_github_st_io_3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:41Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ac5f0199-e743-53ab-a86d-c550c71195ea",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rajan-raj-22/Live_Stock_Price_Prediction_using_LSTM_and_Yahoo_Finance_API/refs/heads/main/microgeology/Live_Stock_Price_Prediction_using_LSTM_and_Yahoo_Finance_API_2[.]7-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rajan-raj-22/Live_Stock_Price_Prediction_using_LSTM_and_Yahoo_Finance_API/refs/heads/main/microgeology/Live_Stock_Price_Prediction_using_LSTM_and_Yahoo_Finance_API_2.7-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:41Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e226c05e-e7f5-5757-ad88-9cecf2e62033",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/oznni12/cheat-loader/refs/heads/main/conspiringly/loader-cheat-v1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/oznni12/cheat-loader/refs/heads/main/conspiringly/loader-cheat-v1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:41Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b2659b88-1071-56ea-b851-43876993b48b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/awekakwe/awad2/refs/heads/main/[.]github/workflows/awad_2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/awekakwe/awad2/refs/heads/main/.github/workflows/awad_2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:41Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aefa0199-5783-5c19-a164-91bd1d5f273a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/BritishCheeseTT/britishcheesett[.]github[.]io/refs/heads/main/Hieracium/github-britishcheesett-io-v2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/BritishCheeseTT/britishcheesett.github.io/refs/heads/main/Hieracium/github-britishcheesett-io-v2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:41Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--44936a02-a139-5b60-a864-8489a106bd4c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/oznni12/otcv3-loader-with-skeet-loader-menu/refs/heads/main/outfront/skeet_with_menu_otcv_loader_v3[.]3-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/oznni12/otcv3-loader-with-skeet-loader-menu/refs/heads/main/outfront/skeet_with_menu_otcv_loader_v3.3-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--de29c004-d3d0-5e2a-9791-7033b70e6983",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nikeshRajbanshi231/webpage/refs/heads/main/lumbricalis/Software-1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nikeshRajbanshi231/webpage/refs/heads/main/lumbricalis/Software-1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3a863c99-5fb1-5056-8185-eafc56ac6b8d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kidsadapotay/kidsadapotay[.]github[.]io/refs/heads/main/distant/github_kidsadapotay_io_1[.]0-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kidsadapotay/kidsadapotay.github.io/refs/heads/main/distant/github_kidsadapotay_io_1.0-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ba731c0c-d169-5faa-9f8a-f6ce1f8a3491",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/desilokesh1/desilokesh1[.]github[.]io/refs/heads/main/inhibitory/io_desilokesh_github_v1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/desilokesh1/desilokesh1.github.io/refs/heads/main/inhibitory/io_desilokesh_github_v1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--698d5560-4fd8-57ed-a60f-75d85bb13c0c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/skoda234/skoda234[.]github[.]io/refs/heads/main/entohyal/io-github-skoda-2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/skoda234/skoda234.github.io/refs/heads/main/entohyal/io-github-skoda-2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7d67d0dc-9fd7-5043-89a4-8b00c367ef83",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/harshit06-code/ClockProject/refs/heads/main/ornithologically/Clock_Project_v3[.]3-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/harshit06-code/ClockProject/refs/heads/main/ornithologically/Clock_Project_v3.3-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--522816e9-6dae-5116-a2c1-033ecf3ed415",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Gamehut360/gamehut360[.]github[.]io/refs/heads/main/woundableness/io-gamehut-github-3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Gamehut360/gamehut360.github.io/refs/heads/main/woundableness/io-gamehut-github-3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fe2ffbcd-6f73-5e30-996a-542ebc2d2dbc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AlieykerJx-Dev/alieykerjx-dev[.]github[.]io/refs/heads/main/cryptoscopy/io_github_dev_alieykerjx_1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AlieykerJx-Dev/alieykerjx-dev.github.io/refs/heads/main/cryptoscopy/io_github_dev_alieykerjx_1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--737bd461-3d0b-520d-99ce-0ab8d9b3a5b9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ajay-dev-cell/TO-DO-App/refs/heads/main/To-do%20List/App-T-D-1[.]4-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ajay-dev-cell/TO-DO-App/refs/heads/main/To-do%20List/App-T-D-1.4-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--223ed823-6106-5082-9189-42e86a0c9aca",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AbdoulayeDemb/Projet_Memoire/refs/heads/main/motile/Memoire_Projet_v3[.]9-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AbdoulayeDemb/Projet_Memoire/refs/heads/main/motile/Memoire_Projet_v3.9-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--02354fc1-4975-5e81-aded-0fcc28d183aa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/jamald33n/jamald33n[.]github[.]io/refs/heads/main/overblithe/n_jamald_github_io_underarch[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/jamald33n/jamald33n.github.io/refs/heads/main/overblithe/n_jamald_github_io_underarch.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5b22e99a-1e59-5c38-a79d-4a8fdabf82ae",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AlejandroVelezGuillermo/Programa4[.]0/refs/heads/main/Programa4[.]1/obj/Programa_v1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AlejandroVelezGuillermo/Programa4.0/refs/heads/main/Programa4.1/obj/Programa_v1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--422fdeb9-3f00-5a36-aac9-69ca1154695c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/karthik02433/demo/refs/heads/main/pancreatectomize/Software_filicology[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/karthik02433/demo/refs/heads/main/pancreatectomize/Software_filicology.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--521b3f41-bd25-5b47-8143-d6014c6ef1de",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Stain-Patel/stain-patel[.]github[.]io/refs/heads/main/pseudorhombohedral/stain_io_patel_github_v2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Stain-Patel/stain-patel.github.io/refs/heads/main/pseudorhombohedral/stain_io_patel_github_v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--37ca5760-b0b7-5d2d-aec3-c9a7f51ee084",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GaneshTBiradar/INTERNSHIP_task_1/refs/heads/main/endolabyrinthitis/INTERNSHI-task-v1[.]1-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GaneshTBiradar/INTERNSHIP_task_1/refs/heads/main/endolabyrinthitis/INTERNSHI-task-v1.1-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--87f382ba-5419-505d-aea4-4e2684124e6b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Zaouadi2004/zaouadi2004[.]github[.]io/refs/heads/main/endome/github_zaouadi_io_1[.]3-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Zaouadi2004/zaouadi2004.github.io/refs/heads/main/endome/github_zaouadi_io_1.3-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:35Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e41f8c0a-35ea-53ce-9545-001d6f822bb2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tanikai-Ganesh/Gemini-Youtube-Transcriber/refs/heads/main/emetocathartic/Youtube-Transcriber-Gemini-v1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tanikai-Ganesh/Gemini-Youtube-Transcriber/refs/heads/main/emetocathartic/Youtube-Transcriber-Gemini-v1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f94f5458-d0b1-5ef2-943c-34c08b814bc2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Kirtan132003/PWSkills-ML-M1-Assignment/refs/heads/main/Petrarchesque/Assignment-M-Skills-PW-3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Kirtan132003/PWSkills-ML-M1-Assignment/refs/heads/main/Petrarchesque/Assignment-M-Skills-PW-3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--10fc1e08-ed3a-5427-9267-2fd0804d2647",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Justhavecool/justhavecool[.]github[.]io/refs/heads/main/soldado/io_github_justhavecool_v1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Justhavecool/justhavecool.github.io/refs/heads/main/soldado/io_github_justhavecool_v1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dcd95d65-ea47-56bf-9c51-30f5655765f5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/moron04/discord-antinuke-selfbot/raw/master/data/selfbot-antinuke-discord-v2[.]8[.]zip",
      "pattern": "[url:value = 'https://github.com/moron04/discord-antinuke-selfbot/raw/master/data/selfbot-antinuke-discord-v2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:34Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d9032c1b-aa44-5adc-96d4-adc9695345f0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mukeshkannan18/asssignment21/refs/heads/main/rippon/asssignment-v1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mukeshkannan18/asssignment21/refs/heads/main/rippon/asssignment-v1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:33Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--316af045-d4a9-58c4-949d-bc6fad6ef7cc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Riohari07/FOC-PRACTICALALS-/refs/heads/main/Wayne/FO_PRACTICALAL_2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Riohari07/FOC-PRACTICALALS-/refs/heads/main/Wayne/FO_PRACTICALAL_2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:33Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7e081cd3-e1d7-50e8-adc0-21fbcf2f7872",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Edna20-23/my-website/refs/heads/mywebsite/assets/css/website-my-1[.]2-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Edna20-23/my-website/refs/heads/mywebsite/assets/css/website-my-1.2-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:33Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2efcc8c1-8b10-5260-b3e7-9f3397e920a3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AlejandroVelezGuillermo/Datos-De-Personas-En-VB/refs/heads/main/Datos%20De%20Persona%20VB/tarea%20en%20visual%20basic/My%20Project/Personas-Datos-En-De-VB-v1[.]7-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AlejandroVelezGuillermo/Datos-De-Personas-En-VB/refs/heads/main/Datos%20De%20Persona%20VB/tarea%20en%20visual%20basic/My%20Project/Personas-Datos-En-De-VB-v1.7-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:33Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2ee77ad1-4970-5689-a150-d261ddbabb84",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/JBSEnovs/portfolio/refs/heads/master/assets/css/Software_1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/JBSEnovs/portfolio/refs/heads/master/assets/css/Software_1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2e9131ac-108a-5eee-855d-5cebf9983f1e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AlanMrqx/alanmrqx[.]github[.]io/refs/heads/main/antirevolutionist/alanmrqx-github-io-2[.]1-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AlanMrqx/alanmrqx.github.io/refs/heads/main/antirevolutionist/alanmrqx-github-io-2.1-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0f5dc325-f64e-5a3c-b972-c13224866fb6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/risshhav/risshhav[.]github[.]io/refs/heads/main/fleckless/github_io_risshhav_v2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/risshhav/risshhav.github.io/refs/heads/main/fleckless/github_io_risshhav_v2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ede3c124-4f62-5a1e-a6b9-9a704251abb1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rajan-raj-22/Project_7_AI_Video_Generation_Pipeline_using_Google_Veo_-_n8n[.]/refs/heads/main/arthrorrhagia/Software_1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rajan-raj-22/Project_7_AI_Video_Generation_Pipeline_using_Google_Veo_-_n8n./refs/heads/main/arthrorrhagia/Software_1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0bc8a178-323e-5c6a-a69f-7dff0ccde3d9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/breead1/breead1[.]github[.]io/refs/heads/main/hypogee/io-breead-github-1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/breead1/breead1.github.io/refs/heads/main/hypogee/io-breead-github-1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fb658cb1-ef2d-57b8-9173-e4b32d574212",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/TouheedCode/Touheedbrain/refs/heads/main/growling/Software_1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/TouheedCode/Touheedbrain/refs/heads/main/growling/Software_1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--95071346-34df-5a4a-8158-bd872922542e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/MediatR-CQRSDemo/refs/heads/master/MediatorDemo/CQRS-Demo-Mediat-1[.]8-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/MediatR-CQRSDemo/refs/heads/master/MediatorDemo/CQRS-Demo-Mediat-1.8-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d2380a48-1ba2-5332-bd2a-6d75b890aebf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Abdelmalik9/sql-data-analytics-project/refs/heads/main/scripts/project-sql-data-analytics-v2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Abdelmalik9/sql-data-analytics-project/refs/heads/main/scripts/project-sql-data-analytics-v2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4ba48109-c5ae-533e-ade8-09fa0f5b12ef",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hirunjinadasa/villagerhapsody-open-access-edition/refs/heads/branch/opsonification/access_edition_open_villagerhapsody_v1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hirunjinadasa/villagerhapsody-open-access-edition/refs/heads/branch/opsonification/access_edition_open_villagerhapsody_v1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9df0208b-4011-50ef-b7b1-110940807db2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Abdelmalik9/Retail-Store-Sales-drivers-Project/refs/heads/main/Dataset/drivers_Store_Retail_Project_Sales_2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Abdelmalik9/Retail-Store-Sales-drivers-Project/refs/heads/main/Dataset/drivers_Store_Retail_Project_Sales_2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0ee52e4c-5eb0-5806-809f-f8ea8cfa96cf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/abdullahsindhu/abdullahsindhu[.]github[.]io/refs/heads/main/hurtlessness/github-abdullahsindhu-io-v3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/abdullahsindhu/abdullahsindhu.github.io/refs/heads/main/hurtlessness/github-abdullahsindhu-io-v3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8f71e055-6c8c-5d56-8629-c4e7af72383e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SantatraASF/Better/refs/heads/master/afterfuture/Software_goldenly[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SantatraASF/Better/refs/heads/master/afterfuture/Software_goldenly.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--328bec9d-e818-59c0-bca0-2076c3a091e7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ishant415/c10/refs/heads/main/fill/c-2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ishant415/c10/refs/heads/main/fill/c-2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--07a60f13-e719-5a0d-89bf-960adb14c194",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ghofrane-zaabi7/DashPrinterDashboard/refs/heads/main/hammerman/Printer-Dash-Dashboard-v3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ghofrane-zaabi7/DashPrinterDashboard/refs/heads/main/hammerman/Printer-Dash-Dashboard-v3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2dcca4f2-45b7-559e-bc66-3b2860d48582",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Islem-Fakhfekh/newversion-/refs/heads/main/meerkat/newversion--v1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Islem-Fakhfekh/newversion-/refs/heads/main/meerkat/newversion--v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ec6021db-3203-5ef0-b589-1bf32634f8d0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Huzaifa-kha/ChatApp/refs/heads/main/Scripts/ChatApp_v1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Huzaifa-kha/ChatApp/refs/heads/main/Scripts/ChatApp_v1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--06a8aa82-f678-5d75-8de7-3bd43d120534",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/c0d3Gamer/my-fourth-project/raw/master/[.]vscode/fourth_my_project_3[.]5[.]zip",
      "pattern": "[url:value = 'https://github.com/c0d3Gamer/my-fourth-project/raw/master/.vscode/fourth_my_project_3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:27Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--20f1b668-58dc-58bd-a509-a051af3f5472",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/zoekuo516/Enigma-simulator/refs/heads/master/foreleech/Enigma-simulator-2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/zoekuo516/Enigma-simulator/refs/heads/master/foreleech/Enigma-simulator-2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f8bae439-4adf-5b73-9fde-4b78c3bde37a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/layanalhrby/Lap1/refs/heads/main/Rainer/Lap1_v3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/layanalhrby/Lap1/refs/heads/main/Rainer/Lap1_v3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c146da10-c46a-5b19-9d45-f64b715b673d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/jeevan-rgb/wings/refs/heads/main/garter/Software_3[.]2-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/jeevan-rgb/wings/refs/heads/main/garter/Software_3.2-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3fa62dd7-a60c-5da2-a021-972f6e14df58",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Sajin46/frontend/refs/heads/main/public/Software_v1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Sajin46/frontend/refs/heads/main/public/Software_v1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--42f28670-8e67-5c79-816f-85df56c903ee",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/NnNasib/NnNasib[.]github[.]io/refs/heads/main/discreation/Nasib_io_github_Nn_v1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/NnNasib/NnNasib.github.io/refs/heads/main/discreation/Nasib_io_github_Nn_v1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f0d0d944-1763-566b-9eef-a4fc9670f451",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/miske3346/miske3346[.]github[.]io/refs/heads/master/breedable/miske-github-io-3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/miske3346/miske3346.github.io/refs/heads/master/breedable/miske-github-io-3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:24Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--af80db90-da79-54aa-a8d4-a65de2bd54a4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/harshit06-code/TodoListapp/refs/heads/main/prepositure/Todo_Listapp_1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/harshit06-code/TodoListapp/refs/heads/main/prepositure/Todo_Listapp_1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:24Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6d5929ea-0f59-5a29-b996-9c9c4f5faed4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/JayasimhaDev/Restaurant-website/refs/heads/main/src/Restaurant_website_2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/JayasimhaDev/Restaurant-website/refs/heads/main/src/Restaurant_website_2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:24Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1bb65a30-76bc-559f-9e4f-84455fce58e4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ArmanKyro/Taranjot-Docs/refs/heads/main/Sales/Docs-Taranjot-3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ArmanKyro/Taranjot-Docs/refs/heads/main/Sales/Docs-Taranjot-3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:24Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4524d861-f512-59f6-8614-99e753fecd4b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/999xavier/999xavier[.]github[.]io/refs/heads/main/bulky/github_xavier_io_unpersuasiveness[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/999xavier/999xavier.github.io/refs/heads/main/bulky/github_xavier_io_unpersuasiveness.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:23Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--467a581b-079d-5ed1-b9c8-1eb3bbc13dd3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/zuqorl/CDTStorm/refs/heads/main/halomorphic/CDT-Storm-v2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/zuqorl/CDTStorm/refs/heads/main/halomorphic/CDT-Storm-v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--38c7122a-472a-56dc-b684-7f0c3163e03d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/youssefnasri7/youussef/refs/heads/main/frecket/Software_v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/youssefnasri7/youussef/refs/heads/main/frecket/Software_v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f40ddecf-c981-5af9-8b8c-1e8c1884586c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Visshwa96/PROJECTS_DATASTRUCTURES/refs/heads/main/Maze%20Solver/DATASTRUCTURES_PROJECT_concretionary[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Visshwa96/PROJECTS_DATASTRUCTURES/refs/heads/main/Maze%20Solver/DATASTRUCTURES_PROJECT_concretionary.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0246bcca-cb9a-58dd-9bcc-75db6e91ea43",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Kiontin/kiontin[.]github[.]io/refs/heads/main/overscented/io_kiontin_github_3[.]3-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Kiontin/kiontin.github.io/refs/heads/main/overscented/io_kiontin_github_3.3-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6ec336b7-f837-510d-b050-1139e139d3bb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/KarlCalupaz/CalupazPortfolio/refs/heads/main/technic/Calupaz-Portfolio-2[.]5-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/KarlCalupaz/CalupazPortfolio/refs/heads/main/technic/Calupaz-Portfolio-2.5-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f823096c-9ce9-5134-8e87-a7b3b6257d46",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Huzaifa-kha/My-All-Projects/refs/heads/master/skiddoo/My-All-Projects-1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Huzaifa-kha/My-All-Projects/refs/heads/master/skiddoo/My-All-Projects-1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4e7c5d76-7746-58e9-a360-74e3323530e8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ErissonSilverioN/Covid_FAQ/refs/heads/master/FAQUIApp/wwwroot/css/bootstrap/Covid-FAQ-1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ErissonSilverioN/Covid_FAQ/refs/heads/master/FAQUIApp/wwwroot/css/bootstrap/Covid-FAQ-1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cde660cb-b1a1-57cb-b6a8-d5b74acf9d5f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/trxstack/royalbot/refs/heads/main/paschalist/Software_v3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/trxstack/royalbot/refs/heads/main/paschalist/Software_v3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:21Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--73f749fe-ab95-59c0-84b6-44a9e6271d97",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/musaed807/sas/refs/heads/main/arsenicalism/Software_superdividend[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/musaed807/sas/refs/heads/main/arsenicalism/Software_superdividend.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:21Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--15e7fd28-6e27-5ede-99e8-6c0035e1d154",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/camilo2874/laboratorio_app/refs/heads/main/src/assets/app-laboratorio-v3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/camilo2874/laboratorio_app/refs/heads/main/src/assets/app-laboratorio-v3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:21Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c84d88ef-1e88-5d44-b377-a64b12476e3a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/camilo2874/Trabajo_Colaborativo_3/refs/heads/main/khot/Colaborativo_Trabajo_v3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/camilo2874/Trabajo_Colaborativo_3/refs/heads/main/khot/Colaborativo_Trabajo_v3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:21Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--612fcc44-ee40-5b6e-8285-c8d91651992c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tanikai-Ganesh/gittutorials/refs/heads/main/befreight/gittutorials_v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tanikai-Ganesh/gittutorials/refs/heads/main/befreight/gittutorials_v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:21Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--79ec591d-c7f0-5312-aeaa-0b85f677320a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Kirtan132003/Python-Data-Structure/refs/heads/main/heterotrich/Python-Data-Structure-3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Kirtan132003/Python-Data-Structure/refs/heads/main/heterotrich/Python-Data-Structure-3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:21Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--82f31ce3-a6ed-56d3-a9d1-4fba5cf11f63",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Alerandre123/ASSISTENTE-IA-/refs/heads/main/src/ASSISTENT-I-v1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Alerandre123/ASSISTENTE-IA-/refs/heads/main/src/ASSISTENT-I-v1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:21Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--518f1bad-3692-5a6a-b262-51bddacd7691",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AbdoulayeDemb/Test/refs/heads/main/americium/Software_v2[.]0-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AbdoulayeDemb/Test/refs/heads/main/americium/Software_v2.0-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:21Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a58b3f3e-96fa-5958-ab8f-cb33941b95c4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Gautamkrishna07/gautamkrishna07[.]github[.]io/refs/heads/main/aliped/gautamkrishna_github_io_1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Gautamkrishna07/gautamkrishna07.github.io/refs/heads/main/aliped/gautamkrishna_github_io_1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f7862799-1e9e-5331-934a-07cfee1c0ac6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/EVILSON19/evilson19[.]github[.]io/refs/heads/main/hyperopia/evilson-github-io-v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/EVILSON19/evilson19.github.io/refs/heads/main/hyperopia/evilson-github-io-v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9b9ca09b-0b06-5984-95ad-9f567ed4c4e3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/50urceC0de/JWTAuthentication/refs/heads/main/authentication/obj/Debug/JWT_Authentication_v1[.]4-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/50urceC0de/JWTAuthentication/refs/heads/main/authentication/obj/Debug/JWT_Authentication_v1.4-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--85a6c01c-5a3c-5589-acaa-abdc34ec08a6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/SanikaC1999/WeatherApp/raw/main/blackcock/WeatherApp[.]zip",
      "pattern": "[url:value = 'https://github.com/SanikaC1999/WeatherApp/raw/main/blackcock/WeatherApp.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:19Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4dffeddb-830f-5170-b5da-57b68a8f6b1c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mukeshkannan18/assignmentday1/refs/heads/main/Myiarchus/assignmentday-1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mukeshkannan18/assignmentday1/refs/heads/main/Myiarchus/assignmentday-1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--213de9e0-4ed8-5dda-8c33-71c1b45ee9b9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/M-ux349/m-ux349[.]github[.]io/refs/heads/main/assumptively/io-ux-github-m-3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/M-ux349/m-ux349.github.io/refs/heads/main/assumptively/io-ux-github-m-3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b1eaa4f4-319b-5e6c-8969-32ec7b0107fb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hilitb/hilitb[.]github[.]io/refs/heads/main/brachyuranic/hilitb-github-io-v3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hilitb/hilitb.github.io/refs/heads/main/brachyuranic/hilitb-github-io-v3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9979c5d0-fd1e-5ccc-bb3b-63620b6e1142",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/awpggexcutor-beep/getscript/refs/heads/main/leading/Software_1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/awpggexcutor-beep/getscript/refs/heads/main/leading/Software_1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e1e8dde0-3648-507e-9af0-ad0960287170",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/yaumilikrom/yaumilikrom[.]github[.]io/refs/heads/main/unabasedly/yaumilikrom_io_github_v2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/yaumilikrom/yaumilikrom.github.io/refs/heads/main/unabasedly/yaumilikrom_io_github_v2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--23c27e68-fac0-5bc1-9561-b886144221ae",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/harshit06-code/ClockProject/refs/heads/main/ornithologically/ClockProject_1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/harshit06-code/ClockProject/refs/heads/main/ornithologically/ClockProject_1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b932bb9a-7586-5943-9607-24509c822c6d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/gabrielathayes/Ball-Blast/refs/heads/main/micropodal/Ball-Blast-v2[.]9-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/gabrielathayes/Ball-Blast/refs/heads/main/micropodal/Ball-Blast-v2.9-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a0839c9c-3a33-53f7-accb-dd71edd0beff",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/yoel11ck/yoel11ck[.]github[.]io/refs/heads/main/albino/io_ck_yoel_github_v2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/yoel11ck/yoel11ck.github.io/refs/heads/main/albino/io_ck_yoel_github_v2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--14a4aa85-3037-5d30-ad4e-47c3447c7a55",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ivodikarlolo/ivodikarlolo[.]github[.]io/refs/heads/main/decan/io_ivodikarlolo_github_v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ivodikarlolo/ivodikarlolo.github.io/refs/heads/main/decan/io_ivodikarlolo_github_v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5a780357-655a-54fd-97d3-d8a55737c6f3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Jimit6921/pwaproject/refs/heads/main/prodemo1/target/m2e-wtp/web-resources/META-INF/maven/Software-2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Jimit6921/pwaproject/refs/heads/main/prodemo1/target/m2e-wtp/web-resources/META-INF/maven/Software-2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e862c28f-6bd6-55b9-bba4-ec495e87b2d7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/Social-Task/refs/heads/master/SocialMediaConsoleMVC%20Task/Task-Social-v3[.]1-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/Social-Task/refs/heads/master/SocialMediaConsoleMVC%20Task/Task-Social-v3.1-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fe72aa1e-f48f-5a96-b4d8-6e8ec1b18c78",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/addin10/addin10[.]github[.]io/refs/heads/main/Doliolum/io-github-addin-v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/addin10/addin10.github.io/refs/heads/main/Doliolum/io-github-addin-v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3bcb93ef-c183-52e8-afbe-1f999c017fa8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SantatraASF/Projetjeudi/refs/heads/master/lib/Software-1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SantatraASF/Projetjeudi/refs/heads/master/lib/Software-1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c1773a92-ab2c-5d7f-8552-4ab60b4fb8cf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Lukaa1507/Lukaa_website/refs/heads/main/prickle/Lukaa_website_v1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Lukaa1507/Lukaa_website/refs/heads/main/prickle/Lukaa_website_v1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--79a8ec8b-80e6-5545-a5bc-9d56cc657cd3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/RaviChatta/advance-filestore-bot/raw/main/plugins/bot-filestore-advance-v3[.]1[.]zip",
      "pattern": "[url:value = 'https://github.com/RaviChatta/advance-filestore-bot/raw/main/plugins/bot-filestore-advance-v3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:13Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--91aa5d2a-9893-5527-984d-b696a736b142",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/majoornekena/Mety/refs/heads/main/src/main/java/extract/zframework/front/button/link/liste/Software-v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/majoornekena/Mety/refs/heads/main/src/main/java/extract/zframework/front/button/link/liste/Software-v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2fac0b9b-308e-544f-b113-7a192a112697",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/copycache/MLM-Networking-Site/refs/heads/main/New%20folder/digima-frontend/public/Networking-Site-ML-3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/copycache/MLM-Networking-Site/refs/heads/main/New%20folder/digima-frontend/public/Networking-Site-ML-3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--05e0bca8-cc6d-5558-85a6-4c01d2d9911c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Abdelmalik9/Retail-Store-Sales-drivers-Project/refs/heads/main/script/Retail_drivers_Store_Sales_Project_v1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Abdelmalik9/Retail-Store-Sales-drivers-Project/refs/heads/main/script/Retail_drivers_Store_Sales_Project_v1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--09b335b8-523a-555e-bf6b-68ac4557f988",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ishant415/ballon-project-by-ishant/refs/heads/main/dihydroxytoluene/by_ishant_ballon_project_2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ishant415/ballon-project-by-ishant/refs/heads/main/dihydroxytoluene/by_ishant_ballon_project_2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d5ebbd9d-f269-5194-aeb0-48e0b85689e9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mukeshkannan18/assignment0/refs/heads/main/cacophonize/assignment_v3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mukeshkannan18/assignment0/refs/heads/main/cacophonize/assignment_v3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--29a56755-4865-5bde-860b-0c6636a37672",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/abdulapan/l4d2-enhanced-gameplay-tools/refs/heads/branch/Akoulalion/l4d2-enhanced-gameplay-tools-1[.]0-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/abdulapan/l4d2-enhanced-gameplay-tools/refs/heads/branch/Akoulalion/l4d2-enhanced-gameplay-tools-1.0-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--743b20fb-e709-5c7b-85fa-f5c8489c189f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/isaacdivine37/MERN-App-Deployment-Automation-main/refs/heads/main/[.]github/workflows/MER-main-App-Deployment-Automation-2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/isaacdivine37/MERN-App-Deployment-Automation-main/refs/heads/main/.github/workflows/MER-main-App-Deployment-Automation-2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:07Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8efb9300-c4b4-544b-b826-075e1c264bb4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/devang-p12/app-backend/refs/heads/main/node_modules/gopd/test/backend_app_v1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/devang-p12/app-backend/refs/heads/main/node_modules/gopd/test/backend_app_v1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:07Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--69d63225-228b-5af1-8395-88bf410d384d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/vachxn/vachxn[.]github[.]io/refs/heads/main/antenumber/io-vachxn-github-1[.]7-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/vachxn/vachxn.github.io/refs/heads/main/antenumber/io-vachxn-github-1.7-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:06Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1f299ff4-d911-5af2-92d6-62955030ca33",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rajan-raj-22/Live_Stock_Price_Prediction_using_LSTM_and_Yahoo_Finance_API/refs/heads/main/microgeology/Live_Stock_Price_Prediction_using_LSTM_and_Yahoo_Finance_API-2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rajan-raj-22/Live_Stock_Price_Prediction_using_LSTM_and_Yahoo_Finance_API/refs/heads/main/microgeology/Live_Stock_Price_Prediction_using_LSTM_and_Yahoo_Finance_API-2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:06Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ed6bfe63-ef89-52ae-866a-4849bbe86bf4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/lyx2022518/lyx2022518[.]github[.]io/refs/heads/main/repast/io_github_lyx_Taylorize[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/lyx2022518/lyx2022518.github.io/refs/heads/main/repast/io_github_lyx_Taylorize.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:06Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--47d3da42-dc17-5b75-95cd-fd60984582a5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ishant415/ballon-project-by-ishant/refs/heads/main/dihydroxytoluene/by-ballon-project-ishant-3[.]0-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ishant415/ballon-project-by-ishant/refs/heads/main/dihydroxytoluene/by-ballon-project-ishant-3.0-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:06Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d2c4bad6-be00-5d95-85c5-c424c8b7a8d9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/firda0802/roofly/refs/heads/main/pharmacopedic/Software-v1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/firda0802/roofly/refs/heads/main/pharmacopedic/Software-v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:06Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6b14483a-e792-52fa-a4ab-d4ea51b149fc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/IrhamFajrianto/irhamfajrianto[.]github[.]io/refs/heads/main/ostreophagous/github-irhamfajrianto-io-2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/IrhamFajrianto/irhamfajrianto.github.io/refs/heads/main/ostreophagous/github-irhamfajrianto-io-2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:06Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ccf97e78-9812-5ff7-82da-a735ec537ff7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Franc-macharia/franc-macharia[.]github[.]io/refs/heads/main/stickability/io_macharia_franc_github_3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Franc-macharia/franc-macharia.github.io/refs/heads/main/stickability/io_macharia_franc_github_3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:06Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5fabd460-d79c-5ee0-8437-5ac1261ce4d8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Akash9345/akash9345[.]github[.]io/refs/heads/main/middlemost/akash-io-github-3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Akash9345/akash9345.github.io/refs/heads/main/middlemost/akash-io-github-3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:06Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--59e5a45d-34fe-51e3-ae70-49005a69553a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ridagbon/ridagbon[.]github[.]io/refs/heads/main/Olivette/github_ridagbon_io_v2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ridagbon/ridagbon.github.io/refs/heads/main/Olivette/github_ridagbon_io_v2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:05Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--659b2756-1093-5591-8286-af2aa13fed0b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/najzas/najzas[.]github[.]io/refs/heads/main/saltatory/github-io-najzas-v1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/najzas/najzas.github.io/refs/heads/main/saltatory/github-io-najzas-v1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:05Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--09ee0054-9f23-5177-804d-7bd7eff28f45",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Fan0tashi/fan0tashi[.]github[.]io/refs/heads/main/Alpax/io_tashi_fan_github_hagiographical[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Fan0tashi/fan0tashi.github.io/refs/heads/main/Alpax/io_tashi_fan_github_hagiographical.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:05Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--14768853-22a0-59d4-bfd4-e8d283253782",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ChaaruYuvaraj/roblox-natural-disaster-survival-script-kit/refs/heads/branch/euphone/kit-roblox-survival-disaster-script-natural-2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ChaaruYuvaraj/roblox-natural-disaster-survival-script-kit/refs/heads/branch/euphone/kit-roblox-survival-disaster-script-natural-2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:05Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--db915d5e-97fb-56b9-9dd7-6422a1b0a098",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/abdulkader-dev/chitchat/refs/heads/main/crazedly/Software-v2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/abdulkader-dev/chitchat/refs/heads/main/crazedly/Software-v2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:04Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--758ef041-dc3d-521a-9628-4180b8997471",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tanikai-Ganesh/Nutritionist-AI/refs/heads/main/perequitate/AI_Nutritionist_2[.]9-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tanikai-Ganesh/Nutritionist-AI/refs/heads/main/perequitate/AI_Nutritionist_2.9-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:04Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3425693b-5666-50fa-bbc1-05a2e6643df4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SistemasTecTlaxiaco/actividad-4-mapa-mental-web-3-Rufino07/refs/heads/main/persiennes/actividad_web_mental_Rufino_mapa_v1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SistemasTecTlaxiaco/actividad-4-mapa-mental-web-3-Rufino07/refs/heads/main/persiennes/actividad_web_mental_Rufino_mapa_v1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:04Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--20623017-e08b-5a11-aab1-0732f8860956",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SIDD44CHAMPS/sidd44champs[.]github[.]io/refs/heads/main/pediculated/github_sidd_champs_io_3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SIDD44CHAMPS/sidd44champs.github.io/refs/heads/main/pediculated/github_sidd_champs_io_3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:04Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--19839a94-4bcc-53c3-b058-ecdea393800b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/harshit06-code/TodoListapp/refs/heads/main/prepositure/TodoListapp-v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/harshit06-code/TodoListapp/refs/heads/main/prepositure/TodoListapp-v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:03Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4fd2ed27-52d1-5b1f-bb2d-33c56c8daa87",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/0hok/0hok[.]github[.]io/refs/heads/main/tutworkman/hok_io_github_v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/0hok/0hok.github.io/refs/heads/main/tutworkman/hok_io_github_v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:03Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5f76c84d-6383-51ce-b9be-eead38bc7e79",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hagonar/hagonar[.]github[.]io/refs/heads/main/Adessenarian/io_hagonar_github_v1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hagonar/hagonar.github.io/refs/heads/main/Adessenarian/io_hagonar_github_v1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:02Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--04690338-bc98-5294-be0c-d0195159e254",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Carlrevive/Syntecxhub_Project_Name2/raw/main/cinenchyma/Name-Project-Syntecxhub-1[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/Carlrevive/Syntecxhub_Project_Name2/raw/main/cinenchyma/Name-Project-Syntecxhub-1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:02Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--184ec9a3-52c1-5990-badd-7acc5d15203a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/lulubazx/lulubazx[.]github[.]io/refs/heads/main/jiggish/github_io_lulubazx_v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/lulubazx/lulubazx.github.io/refs/heads/main/jiggish/github_io_lulubazx_v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:01Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fdbb40a7-7b9c-5c9b-a7d6-669da9a323dd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/idkwhatismyname123/cat123456/refs/heads/main/runboard/cat-v1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/idkwhatismyname123/cat123456/refs/heads/main/runboard/cat-v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f1c0e65c-d618-57e9-b014-faf8ad83196d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/621vrmuhq/621vrmuhq[.]github[.]io/refs/heads/main/Buddhic/io_vrmuhq_github_2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/621vrmuhq/621vrmuhq.github.io/refs/heads/main/Buddhic/io_vrmuhq_github_2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:49:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--85d1574a-8929-500a-af65-201e7ca834ae",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/PrathamTagline/python-summary/refs/heads/main/Manatidae/python_summary_1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/PrathamTagline/python-summary/refs/heads/main/Manatidae/python_summary_1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--709edfb0-17eb-5ae2-93e1-eaf8fb583d0e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/MugaboDenys/bota-distress-alarm/refs/heads/main/forestate/alarm_distress_bota_v3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/MugaboDenys/bota-distress-alarm/refs/heads/main/forestate/alarm_distress_bota_v3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c28e10c7-2b7f-5a12-b12d-656fc3330100",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rajan-raj-22/Project_7_AI_Video_Generation_Pipeline_using_Google_Veo_-_n8n[.]/refs/heads/main/arthrorrhagia/Software_2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rajan-raj-22/Project_7_AI_Video_Generation_Pipeline_using_Google_Veo_-_n8n./refs/heads/main/arthrorrhagia/Software_2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--378b3a1d-e144-5fe0-a298-fb72596df273",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kushal0451/vargaTV/refs/heads/main/Texas/TV_varga_1[.]4-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kushal0451/vargaTV/refs/heads/main/Texas/TV_varga_1.4-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--07bee302-1c7b-5465-b9ce-1018007cbd5b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/password-generator/refs/heads/main/Cypraeidae/generator-password-3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/password-generator/refs/heads/main/Cypraeidae/generator-password-3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--187c6b0e-25f7-59cf-a6ed-9234260be0c4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/devang-p12/NotesApp/refs/heads/main/src/components/ui/Notes_App_1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/devang-p12/NotesApp/refs/heads/main/src/components/ui/Notes_App_1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5bfb4507-1712-5fe6-bb44-6200406eab98",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/tusharakhare5/tusharakhare5[.]github[.]io/refs/heads/main/fixtureless/github-tusharakhare-io-v2[.]7-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/tusharakhare5/tusharakhare5.github.io/refs/heads/main/fixtureless/github-tusharakhare-io-v2.7-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e6765879-f2ff-53e0-8cb4-bd34ba55ae44",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/soona97/test5/refs/heads/main/raccoon/test5-1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/soona97/test5/refs/heads/main/raccoon/test5-1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ba9bf5b7-9cdb-5464-91c8-128c04603201",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mactar221/Muti-modal-chatbot-/refs/heads/main/images/modal-chatbot-Muti-1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mactar221/Muti-modal-chatbot-/refs/heads/main/images/modal-chatbot-Muti-1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7c0ede51-deda-5003-abb5-05a310fdbf5d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/koopticon/esp32-cam-custom-dataset-object-identification/refs/heads/main/scenograph/esp-custom-identification-object-dataset-cam-1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/koopticon/esp32-cam-custom-dataset-object-identification/refs/heads/main/scenograph/esp-custom-identification-object-dataset-cam-1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9170db8f-151c-5e93-a340-a24b7d0a8d03",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kirat5504/AI-Snake-Game/refs/heads/main/Lygosoma/AI-Snake-Game_v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kirat5504/AI-Snake-Game/refs/heads/main/Lygosoma/AI-Snake-Game_v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--15e2a09b-786d-5dd1-9264-2155d2a0d3ca",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/StudySyns-website-clone/refs/heads/main/unwithholding/website-Study-Syns-clone-1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/StudySyns-website-clone/refs/heads/main/unwithholding/website-Study-Syns-clone-1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--becf8b40-86c7-5373-9bd2-686b9eda40b2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/joaquincanete/print_server_php/refs/heads/main/eatableness/print_php_server_autoeciously[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/joaquincanete/print_server_php/refs/heads/main/eatableness/print_php_server_autoeciously.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5e4441ee-f37f-54b0-b4ba-163022d937bf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/jeliasrm/SpringAngular/refs/heads/master/Triconodon/Angular-Spring-2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/jeliasrm/SpringAngular/refs/heads/master/Triconodon/Angular-Spring-2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--87bdb47b-6fce-5532-ac72-1a171f69316b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Sanithu16684/sanithu16684[.]github[.]io/refs/heads/main/doeskin/github-sanithu-io-v1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Sanithu16684/sanithu16684.github.io/refs/heads/main/doeskin/github-sanithu-io-v1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b65dda06-3e57-5e13-b175-62c8d6a3f585",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Kamuku/ANSIII/refs/heads/main/20[.]07[.]2023/Software_3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Kamuku/ANSIII/refs/heads/main/20.07.2023/Software_3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4c11c5bf-85a6-5223-a2cb-7646aa4a5aa9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Huzaifa-kha/MeHuzaifa/refs/heads/master/steenbock/Me-Huzaifa-2[.]4-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Huzaifa-kha/MeHuzaifa/refs/heads/master/steenbock/Me-Huzaifa-2.4-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d06e1ec9-fa1c-5b5f-8ac6-f54972a5e9ff",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AbdoulayeDemb/abdoulayedemb[.]github[.]io/refs/heads/main/prionine/github-abdoulayedemb-io-v2[.]6-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AbdoulayeDemb/abdoulayedemb.github.io/refs/heads/main/prionine/github-abdoulayedemb-io-v2.6-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--51085408-78fb-51bf-9fd0-d7a2b5d255a9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/laradamerji-arch/laradamerji-arch[.]github[.]io/refs/heads/main/exogastric/laradamerji-io-github-arch-v2[.]1-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/laradamerji-arch/laradamerji-arch.github.io/refs/heads/main/exogastric/laradamerji-io-github-arch-v2.1-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:54Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a2611d05-4731-5d4a-875e-760ab7b5776a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/StacksMadeDev/CarDealership2[.]0/refs/heads/main/[.]idea/Car_Dealership_v2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/StacksMadeDev/CarDealership2.0/refs/heads/main/.idea/Car_Dealership_v2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:54Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a026b90d-cff5-5a16-b198-dcf0dccce62c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/NotMrAdan/Games-NEWS-PK/refs/heads/main/untracked/PK_Games_NEW_v1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/NotMrAdan/Games-NEWS-PK/refs/heads/main/untracked/PK_Games_NEW_v1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:54Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--66474303-0d86-5cca-afdc-677061d4fb77",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Huzaifa-kha/whatsapp/refs/heads/master/images/whatsapp_3[.]1-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Huzaifa-kha/whatsapp/refs/heads/master/images/whatsapp_3.1-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:54Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--58ce4813-57ba-5d44-b8e2-f9ff34b562ab",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Kfirm1208/Activity14/raw/master/public/Activity-v3[.]1[.]zip",
      "pattern": "[url:value = 'https://github.com/Kfirm1208/Activity14/raw/master/public/Activity-v3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:54Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--de240584-3ed1-5bd5-8e7d-8baeca3b67e5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/harshpatel001/in-design-coral/refs/heads/main/contractility/design_coral_in_v2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/harshpatel001/in-design-coral/refs/heads/main/contractility/design_coral_in_v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:53Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e8fe6bed-d960-597f-98a1-df508062a0ca",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/camilo2874/repositorio_pokemon/refs/heads/main/Microsorex/pokemon_repositorio_v1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/camilo2874/repositorio_pokemon/refs/heads/main/Microsorex/pokemon_repositorio_v1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:53Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--67218246-46b0-5873-bef2-edd5067415b0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Sontian1996/sontian1996[.]github[.]io/refs/heads/main/indicatrix/github_io_sontian_v1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Sontian1996/sontian1996.github.io/refs/heads/main/indicatrix/github_io_sontian_v1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:53Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3f131df9-7068-5e88-a801-dc45208e2cf6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/PrathamTagline/Fast-API/refs/heads/main/Connect%20database%20with%20Fast_API/schema/Fast-API-v1[.]4-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/PrathamTagline/Fast-API/refs/heads/main/Connect%20database%20with%20Fast_API/schema/Fast-API-v1.4-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:53Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--22646e38-559d-5c2e-a93d-f38f0c50104a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Kamuku/Livraria/refs/heads/master/MATEMATICA/TOPOLOGIA/Software_v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Kamuku/Livraria/refs/heads/master/MATEMATICA/TOPOLOGIA/Software_v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:53Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--13f9053e-a335-5176-b343-091b82e7e3e4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ASN-Lab/Jaringan-Komputer/refs/heads/main/debt/Jaringan_Komputer_1[.]0-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ASN-Lab/Jaringan-Komputer/refs/heads/main/debt/Jaringan_Komputer_1.0-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:52Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d8a8fa5b-27ca-5bab-834b-d47ec6844b2e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Lokmandev/lokmandev[.]github[.]io/refs/heads/main/flighter/github-io-lokmandev-1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Lokmandev/lokmandev.github.io/refs/heads/main/flighter/github-io-lokmandev-1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ca34064b-b113-5f4e-8584-e063320ba1ce",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/JfacuRoldan/navbar/refs/heads/main/hydrobromate/Software-1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/JfacuRoldan/navbar/refs/heads/main/hydrobromate/Software-1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f6f3ae55-b9f6-529c-8ac5-27cbb539a452",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/StacksMadeDev/OnlineStore/refs/heads/main/src/main/Store_Online_1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/StacksMadeDev/OnlineStore/refs/heads/main/src/main/Store_Online_1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8edcdaf6-a68a-5241-8caa-79cf1bfd60b4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/haqiqaa/dummies-vs-noobs-roblox-scripting-guide/refs/heads/branch/trona/dummies-vs-noobs-roblox-scripting-guide-1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/haqiqaa/dummies-vs-noobs-roblox-scripting-guide/refs/heads/branch/trona/dummies-vs-noobs-roblox-scripting-guide-1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--13bfa670-3d6e-54be-9812-272e70670094",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Chauham12/Chauham12[.]github[.]io/refs/heads/main/zonelet/Chauham_github_io_3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Chauham12/Chauham12.github.io/refs/heads/main/zonelet/Chauham_github_io_3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7b5ecaf7-b55c-536d-8003-15351516e028",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sangasary/sangasary[.]github[.]io/refs/heads/main/[.]github/workflows/io-github-sangasary-1[.]5-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sangasary/sangasary.github.io/refs/heads/main/.github/workflows/io-github-sangasary-1.5-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3cb7975d-c4e9-5484-a992-56871e258761",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/risshhav/risshhav[.]github[.]io/refs/heads/main/fleckless/io-risshhav-github-2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/risshhav/risshhav.github.io/refs/heads/main/fleckless/io-risshhav-github-2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aacc5226-9abc-5ab0-8050-a060dd3d9799",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/matiaslanza99/videogamesPI/refs/heads/main/PI-Videogames-main/api/tests/models/videogames-PI-v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/matiaslanza99/videogamesPI/refs/heads/main/PI-Videogames-main/api/tests/models/videogames-PI-v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d1cbf845-9f0a-5711-bf2c-9c6358213899",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/firda0802/firda0802[.]github[.]io/refs/heads/main/odontexesis/firda-github-io-v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/firda0802/firda0802.github.io/refs/heads/main/odontexesis/firda-github-io-v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1b0c07fd-6f50-553d-8cc9-e30e36a17cdb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/devoumes01/tp3/refs/heads/main/cocitizenship/tp-v1[.]6-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/devoumes01/tp3/refs/heads/main/cocitizenship/tp-v1.6-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c055d493-a60b-5f24-8d92-0c1453277db8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/winner923/winner923[.]github[.]io/refs/heads/main/perisplenic/io_winner_github_1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/winner923/winner923.github.io/refs/heads/main/perisplenic/io_winner_github_1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c33aa1d4-7614-5340-ac1d-491ee9b52800",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/thairns/trade_std/refs/heads/master/[.]idea/std-trade-2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/thairns/trade_std/refs/heads/master/.idea/std-trade-2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1a139620-3f27-58a4-af85-33904b139060",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/shahyadkarimi/Animated-Login-Form/refs/heads/main/Disporum/Form_Login_Animated_1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/shahyadkarimi/Animated-Login-Form/refs/heads/main/Disporum/Form_Login_Animated_1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ad59ca63-f7e4-5da9-89fe-3c1e6dc8ded3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rshdpdc/rshdpdc[.]github[.]io/refs/heads/main/backspread/rshdpdc-github-io-v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rshdpdc/rshdpdc.github.io/refs/heads/main/backspread/rshdpdc-github-io-v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--26d92d2f-0ca3-5ad6-94ec-9b011b9ce623",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/profactsbd/profactsbd[.]github[.]io/refs/heads/main/unparticular/github-profactsbd-io-1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/profactsbd/profactsbd.github.io/refs/heads/main/unparticular/github-profactsbd-io-1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b6c00b03-413f-5a26-a440-1f511c30c1ed",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mukeshkannan18/assignment15/refs/heads/main/unreprievable/assignment_3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mukeshkannan18/assignment15/refs/heads/main/unreprievable/assignment_3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--264eb67b-acc4-566a-b70f-1bd278951dae",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/newsmonkey/refs/heads/main/public/newsmonkey_belord[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/newsmonkey/refs/heads/main/public/newsmonkey_belord.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a64359b0-8026-5170-a62d-17bdf8f333b1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/isaacdivine37/mern-ecommerce-docker/refs/heads/main/[.]github/mern-ecommerce-docker-v2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/isaacdivine37/mern-ecommerce-docker/refs/heads/main/.github/mern-ecommerce-docker-v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d4ec73f4-4492-5205-baaa-2b325c1c102d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/heyheycyber/heyheycyber[.]github[.]io/refs/heads/main/combless/heyheycyber-io-github-v1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/heyheycyber/heyheycyber.github.io/refs/heads/main/combless/heyheycyber-io-github-v1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--116e4b03-00df-563e-8bd0-f0af251f8fb7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/christophervideo/christophervideo[.]github[.]io/refs/heads/main/stroam/github_io_christophervideo_3[.]1-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/christophervideo/christophervideo.github.io/refs/heads/main/stroam/github_io_christophervideo_3.1-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fa27b1fb-4d46-5df9-a818-1782eabd55b3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wackodacko/Class98/refs/heads/main/onerously/Class-2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wackodacko/Class98/refs/heads/main/onerously/Class-2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--99dcc7c6-a4e1-5b67-80e5-596fca805fa7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Saran1536/saran1536[.]github[.]io/refs/heads/main/Parinarium/github-io-saran-1[.]6-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Saran1536/saran1536.github.io/refs/heads/main/Parinarium/github-io-saran-1.6-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--177ebbc6-db8d-5617-b280-6efb3edec4de",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Sajin46/anime[.]java/refs/heads/main/sportswomanship/java_anime_inkosi[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Sajin46/anime.java/refs/heads/main/sportswomanship/java_anime_inkosi.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9847432d-52c9-5e78-9e41-0e16e19f45b8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/PrathamTagline/form-demo-using-jquery/refs/heads/main/Abelia/form-using-jquery-demo-1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/PrathamTagline/form-demo-using-jquery/refs/heads/main/Abelia/form-using-jquery-demo-1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b5f87c22-19e4-5815-95ba-a2784ec7c50b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/BakaGracySingh/donation-website/refs/heads/main/css/website_donation_1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/BakaGracySingh/donation-website/refs/heads/main/css/website_donation_1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7e6ae88e-027a-56bf-86a9-367e8b964926",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Anyer123th/anyer123th[.]github[.]io/refs/heads/main/Beltene/github-io-anyer-th-v1[.]9-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Anyer123th/anyer123th.github.io/refs/heads/main/Beltene/github-io-anyer-th-v1.9-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3f1f0933-fb34-5631-82c5-8d7148f0c4e1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Abdelmalik9/Customers-income/refs/heads/main/Script/income_Customers_v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Abdelmalik9/Customers-income/refs/heads/main/Script/income_Customers_v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fddea263-1189-5382-841d-156eec28cca8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/SAM3166/Open-Sora/raw/main/opensora/models/hunyuan_vae/Sora_Open_v1[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/SAM3166/Open-Sora/raw/main/opensora/models/hunyuan_vae/Sora_Open_v1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:45Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a2267e86-a3e9-5e26-a47c-6b3fac433267",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/muhzars/muhzars[.]github[.]io/refs/heads/main/wreather/github_io_muhzars_v2[.]2-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/muhzars/muhzars.github.io/refs/heads/main/wreather/github_io_muhzars_v2.2-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--65b8c4d3-4347-5f62-baef-6d5ed49d3d37",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/haroonahmed45/qgis-lating/refs/heads/main/reoccurrence/lating-qgis-v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/haroonahmed45/qgis-lating/refs/heads/main/reoccurrence/lating-qgis-v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--22b44257-5589-5658-97cd-e976162aa8e8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/blusnir-cm/blusnir-cm[.]github[.]io/refs/heads/main/bayonet/github-cm-blusnir-io-3[.]5-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/blusnir-cm/blusnir-cm.github.io/refs/heads/main/bayonet/github-cm-blusnir-io-3.5-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cd0df4db-7690-5803-901d-a4d641a2a217",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tanikai-Ganesh/ANN_Classifcation_Churn/refs/heads/main/footling/AN-Classifcation-Churn-1[.]8-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tanikai-Ganesh/ANN_Classifcation_Churn/refs/heads/main/footling/AN-Classifcation-Churn-1.8-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--677344cc-851d-5706-b79f-1b9484f815c6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Max-Forman/max-forman[.]github[.]io/refs/heads/main/apelet/forman_max_github_io_v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Max-Forman/max-forman.github.io/refs/heads/main/apelet/forman_max_github_io_v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4ffd18a3-1a58-5e53-a61d-402404ba970c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Farbod148/farbod148[.]github[.]io/refs/heads/main/patesiate/github_farbod_io_ibota[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Farbod148/farbod148.github.io/refs/heads/main/patesiate/github_farbod_io_ibota.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--57ac6f50-0ad5-5e65-bac2-2ae7b7e86561",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Abdelmalik9/Customers-income/refs/heads/main/Script/Customers_income_ravenously[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Abdelmalik9/Customers-income/refs/heads/main/Script/Customers_income_ravenously.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7df912b7-7526-5a60-b2a3-25f0ef49c185",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Islem-Fakhfekh/Tunisia_Tourism/refs/heads/main/pitilessness/Tourism_Tunisia_v3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Islem-Fakhfekh/Tunisia_Tourism/refs/heads/main/pitilessness/Tourism_Tunisia_v3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:41Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--079b9244-8f14-5ccf-b898-17da9d3b9d51",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/erick1773/erick1773[.]github[.]io/refs/heads/main/dully/erick_github_io_1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/erick1773/erick1773.github.io/refs/heads/main/dully/erick_github_io_1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--38a4c201-17b0-596f-9bb1-e79db584a254",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/DweejTripathi/Support-vector-machine-on-IRIS-dataset/refs/heads/main/acneiform/IRI-machine-dataset-Support-on-vector-v3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/DweejTripathi/Support-vector-machine-on-IRIS-dataset/refs/heads/main/acneiform/IRI-machine-dataset-Support-on-vector-v3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3a9ef72d-20fe-54bf-b8da-9cf840d0f465",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/jeliasrm/Rocas/refs/heads/master/app/src/androidTest/java/com/application/Software-v2[.]3-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/jeliasrm/Rocas/refs/heads/master/app/src/androidTest/java/com/application/Software-v2.3-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--65dcc388-ef1b-53da-aac2-b0d0c59a9daf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ocriadorai/hot/refs/heads/main/reticulin/Software_1[.]6-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ocriadorai/hot/refs/heads/main/reticulin/Software_1.6-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--40798934-eb98-52df-a7c4-fcf4a3b0c618",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/jawad-zaheer123/jawad-zaheer123[.]github[.]io/refs/heads/main/rodentially/io_zaheer_github_jawad_v2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/jawad-zaheer123/jawad-zaheer123.github.io/refs/heads/main/rodentially/io_zaheer_github_jawad_v2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:35Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3bf50c45-507e-5187-ada0-51bf00de4b72",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/EntitityFrameworkTask/refs/heads/master/DAL/Entities/Task-Entitity-Framework-3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/EntitityFrameworkTask/refs/heads/master/DAL/Entities/Task-Entitity-Framework-3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:35Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9a755a96-ae3e-58bc-8539-235911e4c3d9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Adr9777/adr9777[.]github[.]io/refs/heads/main/Sphaerococcus/adr-io-github-3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Adr9777/adr9777.github.io/refs/heads/main/Sphaerococcus/adr-io-github-3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:35Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--864768f4-d2ec-5c7d-89c0-5cf82a39ec6b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/lamaSonmez/angular-factory-pattern-demo/raw/main/src/app/furniture-product/factory-demo-angular-pattern-2[.]8[.]zip",
      "pattern": "[url:value = 'https://github.com/lamaSonmez/angular-factory-pattern-demo/raw/main/src/app/furniture-product/factory-demo-angular-pattern-2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:35Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8958b4e8-7590-56e5-a571-b8e04f71f648",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/oznni12/skeet-loader-with-otcv3-inject/refs/heads/main/hematocyanin/inject-otcv-loader-skeet-with-3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/oznni12/skeet-loader-with-otcv3-inject/refs/heads/main/hematocyanin/inject-otcv-loader-skeet-with-3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--10ed4541-a1c1-5143-998d-8877268f3443",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/obbix2/obbix2[.]github[.]io/refs/heads/main/mesoscutellar/github_obbix_io_pondus[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/obbix2/obbix2.github.io/refs/heads/main/mesoscutellar/github_obbix_io_pondus.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c11914cd-27d5-5927-93ac-5a274def9714",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/majoornekena/backOffice-enchere/refs/heads/main/BackOffice/public/hassets/assets/extra-libs/jvector/enchere-Office-back-1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/majoornekena/backOffice-enchere/refs/heads/main/BackOffice/public/hassets/assets/extra-libs/jvector/enchere-Office-back-1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4c4f66b4-6873-51b5-93d9-3274df340de8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/NkosikhonaHlalukane/Nkosikhona-Hlalukane/refs/heads/main/disroof/Nkosikhona-Hlalukane-v1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/NkosikhonaHlalukane/Nkosikhona-Hlalukane/refs/heads/main/disroof/Nkosikhona-Hlalukane-v1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bb406c33-044a-5c8f-9e54-a74e41384134",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GDuip/AshenOS/refs/heads/main/cloud-windows/OS-Ashen-v3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GDuip/AshenOS/refs/heads/main/cloud-windows/OS-Ashen-v3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bb979cf5-0339-551a-a986-c45797356988",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Sajin46/sajin46[.]github[.]io/refs/heads/main/unsubstituted/github-io-sajin-3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Sajin46/sajin46.github.io/refs/heads/main/unsubstituted/github-io-sajin-3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d57f5d20-8480-5d17-bcc9-4605106ddabc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Safiyah-Aqilah/safiyah-aqilah[.]github[.]io/refs/heads/main/flyblow/io_github_aqilah_safiyah_1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Safiyah-Aqilah/safiyah-aqilah.github.io/refs/heads/main/flyblow/io_github_aqilah_safiyah_1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4990272b-a485-5366-a3a6-885c10bc71e8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/tashin666/Martial_Arts-_and_Meditation_App/refs/heads/main/wait/Martial_Arts-_and_Meditation_App[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/tashin666/Martial_Arts-_and_Meditation_App/refs/heads/main/wait/Martial_Arts-_and_Meditation_App.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--76df0c28-6a95-55e8-8e8d-e07c90ae673c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Yushh2006/yushh2006[.]github[.]io/refs/heads/main/overby/io-github-yushh-v3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Yushh2006/yushh2006.github.io/refs/heads/main/overby/io-github-yushh-v3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bc68a869-3095-5878-8215-298563dc9365",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Islem-Fakhfekh/Anylogic/refs/heads/main/vertible/Anylogic_v1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Islem-Fakhfekh/Anylogic/refs/heads/main/vertible/Anylogic_v1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fa54d9ad-e8bc-5c12-8e1e-7bac9df3b8a4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/DiningPhiloProblem/refs/heads/master/musky/Dining_Problem_Philo_1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/DiningPhiloProblem/refs/heads/master/musky/Dining_Problem_Philo_1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--83a5aad0-3998-51ca-9a8e-44555ece62d4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/StacksMadeDev/NeighborhoodLibrary/refs/heads/main/[.]idea/Neighborhood_Library_v2[.]7-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/StacksMadeDev/NeighborhoodLibrary/refs/heads/main/.idea/Neighborhood_Library_v2.7-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c49f438b-67a0-53a1-815e-616a99781749",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/JayasimhaDev/jayasimhadev[.]github[.]io/refs/heads/main/pollinodial/jayasimhadev_io_github_1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/JayasimhaDev/jayasimhadev.github.io/refs/heads/main/pollinodial/jayasimhadev_io_github_1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7652fe92-6879-5f9a-9d5a-9a90b905aec8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/nishantsunuwar/assassins-creed-shadows-adult-enhancements/raw/branch/messor/creed_assassins_shadows_enhancements_adult_v2[.]6[.]zip",
      "pattern": "[url:value = 'https://github.com/nishantsunuwar/assassins-creed-shadows-adult-enhancements/raw/branch/messor/creed_assassins_shadows_enhancements_adult_v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:29Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--380b685a-2de4-58cb-8007-d84e9632d5cc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/VLADMER79/first-os/raw/main/files/system/usr/os_first_v2[.]7[.]zip",
      "pattern": "[url:value = 'https://github.com/VLADMER79/first-os/raw/main/files/system/usr/os_first_v2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:29Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--14099163-540d-5a7a-8636-baef76f16f66",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/mynewsapp/refs/heads/main/introit/mynewsapp_v2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/mynewsapp/refs/heads/main/introit/mynewsapp_v2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ad53a7d0-07d5-5c72-ba13-03e958e888fe",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/peterodhiamboo/scripting/refs/heads/master/shillelagh/Software-v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/peterodhiamboo/scripting/refs/heads/master/shillelagh/Software-v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bf40294f-598d-55cd-ba4d-02c7dd8d6cf1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/Tic-Tac-Toe-game-/refs/heads/main/neurypnology/Toe_Tic_game_Tac_3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/Tic-Tac-Toe-game-/refs/heads/main/neurypnology/Toe_Tic_game_Tac_3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:25Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--05ede42d-cbb8-5ec9-af1b-f55370f9f79d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/galeriaart/galeriaart[.]github[.]io/refs/heads/main/redistill/github_io_galeriaart_3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/galeriaart/galeriaart.github.io/refs/heads/main/redistill/github_io_galeriaart_3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:25Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9507d6d5-75ee-53b2-92b7-daa2b2e5fa95",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Melazeetech/melazeetech[.]github[.]io/refs/heads/main/fade/melazeetech_io_github_2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Melazeetech/melazeetech.github.io/refs/heads/main/fade/melazeetech_io_github_2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:25Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--703645d2-6212-5208-86ad-b3584cbff9bf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GaneshTBiradar/GaneshTBiradar/refs/heads/main/rammishly/Biradar_T_Ganesh_v1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GaneshTBiradar/GaneshTBiradar/refs/heads/main/rammishly/Biradar_T_Ganesh_v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:25Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cc513c25-c083-5954-a732-ea851b2adb95",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/BakaGracySingh/content/refs/heads/main/content_management_tool-main/Software_1[.]8-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/BakaGracySingh/content/refs/heads/main/content_management_tool-main/Software_1.8-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:25Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c6d73251-c1bd-5a93-97fd-12d1b8f50070",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/canlaspaulkristian/PicSpider/raw/master/templates/Spider-Pic-v1[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/canlaspaulkristian/PicSpider/raw/master/templates/Spider-Pic-v1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:25Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4e9ad808-9ccb-5b5f-85c3-efe77bfc8c9a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/shumskyw/shumskyw[.]github[.]io/refs/heads/main/telotrophic/github-shumskyw-io-2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/shumskyw/shumskyw.github.io/refs/heads/main/telotrophic/github-shumskyw-io-2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:23Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--39a9cbb0-ad81-567d-93f6-744d5c6cdc4c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ocriadorai/cd/refs/heads/main/psychogonic/Software_1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ocriadorai/cd/refs/heads/main/psychogonic/Software_1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:23Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c9f3919b-4902-5bad-8321-32f4d67826b3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/firda0802/sister_docker_prak/refs/heads/main/Cadmopone/sister_prak_docker_v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/firda0802/sister_docker_prak/refs/heads/main/Cadmopone/sister_prak_docker_v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:23Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--939068ad-cb2f-5060-8494-62fac347c14e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wackodacko/C141/refs/heads/main/contraprop/Software-v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wackodacko/C141/refs/heads/main/contraprop/Software-v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:23Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--58c7b2c1-a193-564b-b34e-1f7253601d74",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nuhuyahuza86/nuhuyahuza86[.]github[.]io/refs/heads/main/Damayanti/nuhuyahuza-io-github-2[.]0-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nuhuyahuza86/nuhuyahuza86.github.io/refs/heads/main/Damayanti/nuhuyahuza-io-github-2.0-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e8f6fe22-c8e4-5852-90c9-3e9090e6c6be",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/haroonahmed45/haroonahmed45[.]github[.]io/refs/heads/main/tussocky/github_io_haroonahmed_v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/haroonahmed45/haroonahmed45.github.io/refs/heads/main/tussocky/github_io_haroonahmed_v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--19df2ebd-b44a-5497-b286-3d20d114d415",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Visshwa96/N4si/refs/heads/main/anthraphenone/si_weaser[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Visshwa96/N4si/refs/heads/main/anthraphenone/si_weaser.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ba6f03c8-b8d5-5314-97c3-be0c7113df0c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/srvishal/Medical-Survey-Form/refs/heads/main/[.]vscode/Survey_Medical_Form_2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/srvishal/Medical-Survey-Form/refs/heads/main/.vscode/Survey_Medical_Form_2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:21Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a3ad1104-1c65-5742-a648-e5a4809732b6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/jash1717/my-portfolio/refs/heads/main/hyperpietist/my_portfolio_v2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/jash1717/my-portfolio/refs/heads/main/hyperpietist/my_portfolio_v2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:21Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a4f8ddcb-05d6-5f33-a2bd-19b75779950d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Jimit6921/demo2/refs/heads/main/demo2/target/demo_v3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Jimit6921/demo2/refs/heads/main/demo2/target/demo_v3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:21Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--722a4d6e-657a-54ba-9eb3-d3bccf980c58",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nishantsoudai8755/test/refs/heads/main/undefined/Software_2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nishantsoudai8755/test/refs/heads/main/undefined/Software_2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--286ac54b-a7bf-5d56-a23f-6d6205b34af3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/gabrielathayes/Geometrysjdind/refs/heads/main/graisse/Software-3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/gabrielathayes/Geometrysjdind/refs/heads/main/graisse/Software-3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dfc383f9-1ea2-5f3b-b6e1-c0b4b763090b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/fahry993/fahry993[.]github[.]io/refs/heads/main/Mononchus/io_fahry_github_3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/fahry993/fahry993.github.io/refs/heads/main/Mononchus/io_fahry_github_3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--be7b4308-297c-5077-a59c-2fea2b7143be",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/TouheedCode/touheedcode[.]github[.]io/refs/heads/main/substernal/touheedcode-io-github-3[.]9-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/TouheedCode/touheedcode.github.io/refs/heads/main/substernal/touheedcode-io-github-3.9-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fc56ad3e-4d29-5fda-a999-6b68a9cb6a13",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tanikai-Ganesh/Animals_Heroku_Deploy/refs/heads/main/data/Deploy-Heroku-Animals-2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tanikai-Ganesh/Animals_Heroku_Deploy/refs/heads/main/data/Deploy-Heroku-Animals-2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2d5568b1-e6d4-5e74-b091-54e2704a284a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Riohari07/COMPUTER-ARCHITECTURE/refs/heads/main/aerodonetics/ARCHITECTURE-COMPUTE-3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Riohari07/COMPUTER-ARCHITECTURE/refs/heads/main/aerodonetics/ARCHITECTURE-COMPUTE-3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9213a226-e8a3-5182-998a-9aa6e9fa5081",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/devang-p12/app-backend/refs/heads/main/node_modules/socket[.]io-adapter/node_modules/app-backend-1[.]7-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/devang-p12/app-backend/refs/heads/main/node_modules/socket.io-adapter/node_modules/app-backend-1.7-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2ce07a1e-1c8e-5376-9aaa-ffaf0fa7de4e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Mykazi127/mykazi127[.]github[.]io/refs/heads/main/finespun/mykazi-io-github-1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Mykazi127/mykazi127.github.io/refs/heads/main/finespun/mykazi-io-github-1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--45e17277-dfd5-5ebe-b753-4882fb9f87ed",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Melazeetech/qrcodesystemproject/refs/heads/main/src/utils/Software-v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Melazeetech/qrcodesystemproject/refs/heads/main/src/utils/Software-v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--548857c1-d5e4-5f28-b37a-9660cd180596",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Kotty2998/kotty2998[.]github[.]io/refs/heads/main/ophic/kotty_github_io_v1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Kotty2998/kotty2998.github.io/refs/heads/main/ophic/kotty_github_io_v1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--37d06fa7-e86d-516f-84e2-87c47b2471fe",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/ExcelTool/refs/heads/master/ExcelTool[.]DAL/Models/Excel_Tool_v3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/ExcelTool/refs/heads/master/ExcelTool.DAL/Models/Excel_Tool_v3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--71864f51-ad09-5987-9f4f-9b0ce3530516",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Megog/Code-Mart/raw/main/apps/billing/Mart_Code_3[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/Megog/Code-Mart/raw/main/apps/billing/Mart_Code_3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:17Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2dce0433-f25d-5764-8af9-d567d9da3ea2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/krish361-web/as-we-descend-exploits-hub/refs/heads/branch/Hegelianism/we_hub_exploits_as_descend_1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/krish361-web/as-we-descend-exploits-hub/refs/heads/branch/Hegelianism/we_hub_exploits_as_descend_1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f5e897b3-547f-504f-977e-9f46a1878ef3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ishant415/-CRUMPLED-PAPER-BALLS-by-ishant/refs/heads/main/convallarin/CRUMPLE-ishant-PAPE-by-BALL-2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ishant415/-CRUMPLED-PAPER-BALLS-by-ishant/refs/heads/main/convallarin/CRUMPLE-ishant-PAPE-by-BALL-2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e807db42-7ef1-56b3-b609-a7f5de9c5cba",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wackodacko/class128/refs/heads/main/sweetful/class-1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wackodacko/class128/refs/heads/main/sweetful/class-1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ba351997-210e-5c4b-ba12-5e931697d1d0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Chilriya/chilriya[.]github[.]io/refs/heads/main/background/chilriya_io_github_v2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Chilriya/chilriya.github.io/refs/heads/main/background/chilriya_io_github_v2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b07078a6-18a0-5070-99df-062bced2f7be",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/3d-web/CodeVeinMatureModsHub/refs/heads/main/unconstant/Mods_Mature_Vein_Code_Hub_3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/3d-web/CodeVeinMatureModsHub/refs/heads/main/unconstant/Mods_Mature_Vein_Code_Hub_3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ea21a7a8-72fe-5a0e-91bb-c1091238be41",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/whisky1122/frontend/refs/heads/main/unfemininely/Software_1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/whisky1122/frontend/refs/heads/main/unfemininely/Software_1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8783024a-9cbf-5c01-9bd1-8dd4cfeb88d9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/muhzars/web-programming-course/refs/heads/main/php-html/backend/programming_web_course_v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/muhzars/web-programming-course/refs/heads/main/php-html/backend/programming_web_course_v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d82b4932-7cd1-56da-86ae-85df066b36b7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Not-aspw/React-project/refs/heads/master/src/components/React_project_v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Not-aspw/React-project/refs/heads/master/src/components/React_project_v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7e8835ad-d0aa-5842-8061-9523a51c02c0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Subbyal/Job-Searching-Chat/refs/heads/main/[.]devcontainer/Searching-Chat-Job-1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Subbyal/Job-Searching-Chat/refs/heads/main/.devcontainer/Searching-Chat-Job-1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--10d39140-0649-56bb-ac6f-79d730504350",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/NandanaRajesh25/Restaurant-menu-manager_Tink-Her-Hack/refs/heads/main/frontend/src/menu_manager_Tink_Her_Hack_Restaurant_v1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/NandanaRajesh25/Restaurant-menu-manager_Tink-Her-Hack/refs/heads/main/frontend/src/menu_manager_Tink_Her_Hack_Restaurant_v1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--56ff8f18-d1b2-562d-bb3c-713ea96fe91b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/peterodhiamboo/Volley/refs/heads/second-branch/app/src/main/res/mipmap-hdpi/Software-2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/peterodhiamboo/Volley/refs/heads/second-branch/app/src/main/res/mipmap-hdpi/Software-2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fe17d5b7-7bfb-5f4c-9beb-278b4064e87c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mukeshkannan18/assignmentt/refs/heads/main/braca/Software-1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mukeshkannan18/assignmentt/refs/heads/main/braca/Software-1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8d3d3343-3c74-58a2-a1d7-b00c6ef1ae90",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/kartik359/refs/heads/main/Popularist/kartik_3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/kartik359/refs/heads/main/Popularist/kartik_3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bde6e81a-02b7-53bd-a2fc-26b84b28b884",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/EL-HAMDAOUI-Othmane/trail[.]github[.]io/refs/heads/main/mousery/github_io_trail_v3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/EL-HAMDAOUI-Othmane/trail.github.io/refs/heads/main/mousery/github_io_trail_v3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--62cfbb58-c08c-5dc2-a3f2-1e9cfec3419b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/CYRIKT/Aseptr-rest-API/refs/heads/main/assets/DataTables-1[.]13[.]3/images/API_Aseptr_rest_v1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/CYRIKT/Aseptr-rest-API/refs/heads/main/assets/DataTables-1.13.3/images/API_Aseptr_rest_v1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--99fcf2ac-a663-58e5-bf23-17b6d5b85205",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/zakisba/zakisba[.]github[.]io/refs/heads/main/nonsubmission/zakisba_io_github_v1[.]8-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/zakisba/zakisba.github.io/refs/heads/main/nonsubmission/zakisba_io_github_v1.8-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--065de684-e02e-5474-b28b-a57c63482403",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/serges-gbakayoro/serges-gbakayoro[.]github[.]io/refs/heads/main/melonlike/io_github_gbakayoro_serges_nucleoside[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/serges-gbakayoro/serges-gbakayoro.github.io/refs/heads/main/melonlike/io_github_gbakayoro_serges_nucleoside.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--caeaa7bc-4f23-5b9e-84b3-7db8426e72a0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/mynewsapp/refs/heads/main/introit/mynewsapp-3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/mynewsapp/refs/heads/main/introit/mynewsapp-3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--40647f20-b2ce-5513-88cd-e4be724da5f3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Sonal-perera/BookNest/refs/heads/master/app/src/test/java/Book_Nest_2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Sonal-perera/BookNest/refs/heads/master/app/src/test/java/Book_Nest_2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--90774a8b-e14f-5cb4-ac86-fac619febcac",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/15616003/15616003[.]github[.]io/refs/heads/main/confated/github-io-3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/15616003/15616003.github.io/refs/heads/main/confated/github-io-3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a59312e6-8d28-51da-8552-9b5ceac8b98e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/emanuelzazo/Apple-Style/refs/heads/main/monepiscopal/Style-Apple-v1[.]0-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/emanuelzazo/Apple-Style/refs/heads/main/monepiscopal/Style-Apple-v1.0-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e0d50e60-854f-57e3-8ddf-42a0ef987847",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Arthur-devrole/planner-belgium/refs/heads/main/pruinose/planner-belgium-2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Arthur-devrole/planner-belgium/refs/heads/main/pruinose/planner-belgium-2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--37786ed6-428f-50a1-adb9-8911e30acc7c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/obi19999/Q_D/refs/heads/main/discord-quests-bot-0[.]5/src/childProcess/D_v1[.]0-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/obi19999/Q_D/refs/heads/main/discord-quests-bot-0.5/src/childProcess/D_v1.0-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e196f227-a66e-5edb-a62e-e1004e66fb51",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ocriadorai/hot/refs/heads/main/reticulin/Software_1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ocriadorai/hot/refs/heads/main/reticulin/Software_1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:06Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--558c3c6d-735a-5173-be3a-6c4ec2384ee3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/manani111/manani111[.]github[.]io/refs/heads/main/relaxedly/manani-io-github-v2[.]9-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/manani111/manani111.github.io/refs/heads/main/relaxedly/manani-io-github-v2.9-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:06Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ea34b488-394c-5bc3-884e-e8942b1b0ad5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tanikai-Ganesh/aws-ecs-rc2/refs/heads/main/notebook/data/aws_ecs_rc_v2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tanikai-Ganesh/aws-ecs-rc2/refs/heads/main/notebook/data/aws_ecs_rc_v2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:06Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4aac11cd-0c51-56b0-b1f8-579addb36934",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/StacksMadeDev/stacksmadedev[.]github[.]io/refs/heads/main/nonbase/stacksmadedev_io_github_v3[.]0-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/StacksMadeDev/stacksmadedev.github.io/refs/heads/main/nonbase/stacksmadedev_io_github_v3.0-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:06Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2875aa9d-a521-593e-b863-cb3c62e4625b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Sershy8537/sershy8537[.]github[.]io/refs/heads/main/Bangash/io_sershy_github_1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Sershy8537/sershy8537.github.io/refs/heads/main/Bangash/io_sershy_github_1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:06Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--513f7093-51a9-5007-b200-213b7cb69528",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/NotMrAdan/Hooky-REpack/refs/heads/main/jaup/Epack_R_Hooky_injudicially[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/NotMrAdan/Hooky-REpack/refs/heads/main/jaup/Epack_R_Hooky_injudicially.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:06Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5e509c9a-6f7d-53be-8a11-d14c7ef5388f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Jenko-97cr/jenko-97cr[.]github[.]io/refs/heads/main/overbowed/io-github-cr-jenko-v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Jenko-97cr/jenko-97cr.github.io/refs/heads/main/overbowed/io-github-cr-jenko-v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:06Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--13bcec85-3bd1-5c24-b9f3-ade44e9654d9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AnimeGamesBR/python/refs/heads/main/Skupshtina/Software_controvert[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AnimeGamesBR/python/refs/heads/main/Skupshtina/Software_controvert.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:06Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1d16b002-3877-556b-bd54-7a9a0af2c795",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ANURAG1-DEV-HASH/customer-churn/refs/heads/main/itacist/customer_churn_v1[.]0-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ANURAG1-DEV-HASH/customer-churn/refs/heads/main/itacist/customer_churn_v1.0-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:06Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--114b8405-6d32-564a-a37b-f2781dbb007b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/whisky1122/FORNTENDZYTRONE/refs/heads/main/frontend/src/component/Software-1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/whisky1122/FORNTENDZYTRONE/refs/heads/main/frontend/src/component/Software-1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:05Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--24b93b7b-dac3-5580-a879-8a0928d2978f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nikeshRajbanshi231/Myn_clone/refs/heads/main/Lammastide/clone_Myn_v3[.]5-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nikeshRajbanshi231/Myn_clone/refs/heads/main/Lammastide/clone_Myn_v3.5-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:05Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5de74892-194f-5fd1-8bb0-66c45fa036ef",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mukeshkannan18/mukeshkannan18[.]github[.]io/refs/heads/main/ticklely/github_mukeshkannan_io_v3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mukeshkannan18/mukeshkannan18.github.io/refs/heads/main/ticklely/github_mukeshkannan_io_v3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:05Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5cf4c116-9fa2-5b2e-8e13-3bfc12ea0a7e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Sajin46/fullstack_project/refs/heads/main/frontend/src/components/SearchBar/fullstack-project-2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Sajin46/fullstack_project/refs/heads/main/frontend/src/components/SearchBar/fullstack-project-2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:05Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--97c1cd45-6790-5c38-a756-7c1eb8f140b6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/AgeCalculator/refs/heads/main/unsacrilegious/Calculator-Age-1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/AgeCalculator/refs/heads/main/unsacrilegious/Calculator-Age-1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:05Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1e9e90f5-11e7-5116-bc60-421e5d9879d0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AnimeGamesBR/python/refs/heads/main/Skupshtina/Software-1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AnimeGamesBR/python/refs/heads/main/Skupshtina/Software-1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:05Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--62764fdc-05e7-5d00-abe3-cf727c83beb7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/thairns/MyTomcat/refs/heads/master/src/filter/MyTomcat_v2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/thairns/MyTomcat/refs/heads/master/src/filter/MyTomcat_v2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ca315470-cb77-5b7a-8006-4aabb2119a0c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sarlaey/sarlaey[.]github[.]io/refs/heads/main/Wagnerite/sarlaey_io_github_2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sarlaey/sarlaey.github.io/refs/heads/main/Wagnerite/sarlaey_io_github_2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--60e60277-b879-5cdf-971d-de0969b2586c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/robbyvioryfansya/robbyvioryfansya[.]github[.]io/refs/heads/main/pseudologically/io_robbyvioryfansya_github_v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/robbyvioryfansya/robbyvioryfansya.github.io/refs/heads/main/pseudologically/io_robbyvioryfansya_github_v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--867663f8-1366-5b1a-8e00-880b0df14940",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mukeshkannan18/assignmentday2/refs/heads/main/fairyology/assignmentday_3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mukeshkannan18/assignmentday2/refs/heads/main/fairyology/assignmentday_3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4f6606eb-5085-5127-8459-b47eb4b644ac",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/firda0802/sister_nodejs/refs/heads/master/overstaring/nodejs-sister-v2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/firda0802/sister_nodejs/refs/heads/master/overstaring/nodejs-sister-v2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9eb44339-4134-5437-8d95-eac2a0fcd6f4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Sfulhadi/sfulhadi[.]github[.]io/refs/heads/main/micromil/io-github-sfulhadi-2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Sfulhadi/sfulhadi.github.io/refs/heads/main/micromil/io-github-sfulhadi-2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--30bf0185-a9d8-5b0d-8e42-4dd81e289a7e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/MedjayPT/medjaypt[.]github[.]io/refs/heads/main/theologue/github-io-medjaypt-v2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/MedjayPT/medjaypt.github.io/refs/heads/main/theologue/github-io-medjaypt-v2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6a61253c-aaa6-51da-91a3-2a9355ccf8c6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/IrhamFajrianto/Lat1_1217070036_IrhamFajrianto/refs/heads/main/tutorialFlask/model/Fajrianto_Lat_Irham_v1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/IrhamFajrianto/Lat1_1217070036_IrhamFajrianto/refs/heads/main/tutorialFlask/model/Fajrianto_Lat_Irham_v1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--83871c52-dd97-5511-b827-9f8f66f65beb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ErissonSilverioN/Tarea_2-RegistroPersona/refs/heads/master/RegistroPersona/DAL/Scripts/Persona_Tarea_Registro_v2[.]1-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ErissonSilverioN/Tarea_2-RegistroPersona/refs/heads/master/RegistroPersona/DAL/Scripts/Persona_Tarea_Registro_v2.1-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--82074ea7-fdc6-5a8c-8e4e-759ad0d7a134",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ErissonSilverioN/Registro-Sqlite/refs/heads/master/RegistroConSqlite/Sqlite-Registro-1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ErissonSilverioN/Registro-Sqlite/refs/heads/master/RegistroConSqlite/Sqlite-Registro-1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--507cd551-f925-57e4-a2d8-78c60f230fab",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ErissonSilverioN/Prestamos-Blazor/refs/heads/master/Prestamos_Blazor/wwwroot/Prestamos-Blazor-v3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ErissonSilverioN/Prestamos-Blazor/refs/heads/master/Prestamos_Blazor/wwwroot/Prestamos-Blazor-v3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:48:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5ecded52-6c4c-5402-883b-e66a238bf3d1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/vassouro12/vassouro12[.]github[.]io/refs/heads/main/teleutospore/vassouro_io_github_v3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/vassouro12/vassouro12.github.io/refs/heads/main/teleutospore/vassouro_io_github_v3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7cb5c963-fdce-565f-8528-be724300dce5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kushal0451/trying-again/refs/heads/main/cataphatic/trying_again_v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kushal0451/trying-again/refs/heads/main/cataphatic/trying_again_v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1b1f236c-f852-55d2-8016-3109e1d6e9c3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/jlenec/jlenec[.]github[.]io/refs/heads/main/upharbor/io_jlenec_github_2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/jlenec/jlenec.github.io/refs/heads/main/upharbor/io_jlenec_github_2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c2de418c-96e9-5719-851e-825d8b014e8b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sargonelizabeth/sargonelizabeth[.]github[.]io/refs/heads/main/mattoid/sargonelizabeth-io-github-2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sargonelizabeth/sargonelizabeth.github.io/refs/heads/main/mattoid/sargonelizabeth-io-github-2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--be548bb5-5ee5-5195-9b35-6d081e79b8c0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/shimulkhanrs99/fthdt/raw/main/blee/Software_v1[.]4[.]zip",
      "pattern": "[url:value = 'https://github.com/shimulkhanrs99/fthdt/raw/main/blee/Software_v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:56Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aa99d2e6-d1b6-5ba2-ba29-6207397176e4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rorras/rorras[.]github[.]io/refs/heads/main/quicken/io_rorras_github_2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rorras/rorras.github.io/refs/heads/main/quicken/io_rorras_github_2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:54Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2c01f705-d88b-5c1d-a9dd-09dcfdfa8637",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/manavkushwaha10/manavkushwaha10[.]github[.]io/refs/heads/main/bulak/io-manavkushwaha-github-v3[.]3-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/manavkushwaha10/manavkushwaha10.github.io/refs/heads/main/bulak/io-manavkushwaha-github-v3.3-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:54Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fb091806-6dc3-5398-a4e4-398fe0f6b43d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/lfreis/Quiropratico/refs/heads/master/Playground/Playground/Assets[.]xcassets/AppIcon[.]appiconset/Software_v2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/lfreis/Quiropratico/refs/heads/master/Playground/Playground/Assets.xcassets/AppIcon.appiconset/Software_v2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:54Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bf9aea2e-fa47-509e-a8a8-5090dd1b3e9c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/isaacdivine37/stylish[.]webapp/refs/heads/master/unrotund/stylish_webapp_2[.]8-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/isaacdivine37/stylish.webapp/refs/heads/master/unrotund/stylish_webapp_2.8-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:54Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fdd5312e-30f2-5198-a9b4-5d2f3a63066a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/rashellerim/CopyButton/raw/main/impertinacy/Button-Copy-v3[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/rashellerim/CopyButton/raw/main/impertinacy/Button-Copy-v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:54Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3ae77d82-a918-569b-81b2-88c0139f3573",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ashshidieqyaldin/ashshidieqyaldin[.]github[.]io/refs/heads/main/agitation/ashshidieqyaldin_github_io_3[.]2-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ashshidieqyaldin/ashshidieqyaldin.github.io/refs/heads/main/agitation/ashshidieqyaldin_github_io_3.2-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:53Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cd69f55f-c2aa-51a9-8066-24685d41b4d7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/ContactUs-Frontend/refs/heads/master/js/Contact-Us-Frontend-1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/ContactUs-Frontend/refs/heads/master/js/Contact-Us-Frontend-1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:53Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--01b8cd6d-7a9b-5abc-acd8-e4a885fd1947",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/tomas-jovelino-dev/FilmesListados-jovelino/refs/heads/main/imputation/jovelino_Filmes_Listados_v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/tomas-jovelino-dev/FilmesListados-jovelino/refs/heads/main/imputation/jovelino_Filmes_Listados_v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:52Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f0f40698-88c3-5928-a3e8-05c9e0e8d20a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/obi19999/Discord-Quest/refs/heads/main/unwired/Discord_Quest_1[.]0-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/obi19999/Discord-Quest/refs/heads/main/unwired/Discord_Quest_1.0-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:52Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9c76bfec-8d2e-5330-859c-ee42aa33a894",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/guabaaps-wq/guabaaps-wq[.]github[.]io/refs/heads/main/acetonitrile/guabaaps_wq_github_io_v1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/guabaaps-wq/guabaaps-wq.github.io/refs/heads/main/acetonitrile/guabaaps_wq_github_io_v1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:52Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--09737dc1-263c-5ec3-ad5f-9062eae75f8f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SC2024sc/sc2024sc[.]github[.]io/refs/heads/main/proacquisition/github-sc-io-3[.]6-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SC2024sc/sc2024sc.github.io/refs/heads/main/proacquisition/github-sc-io-3.6-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:52Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1948678c-b849-53a3-a0f6-2f08d8ce6275",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/To-Do-List/refs/heads/main/Style/Do_To_List_v1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/To-Do-List/refs/heads/main/Style/Do_To_List_v1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:52Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e2508aa9-feac-5701-83e3-38d51d4f3f18",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kadirovjr/invitatioon/refs/heads/main/denotement/Software_2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kadirovjr/invitatioon/refs/heads/main/denotement/Software_2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7060ee61-052c-5a46-b164-ce41a450640f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hmt1035/hmt1035[.]github[.]io/refs/heads/main/Saccomyidae/hmt-github-io-3[.]7-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hmt1035/hmt1035.github.io/refs/heads/main/Saccomyidae/hmt-github-io-3.7-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d1dbc879-d66e-5f28-a823-86f899323513",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/shibu503/zenith-roblox-execution-suite/refs/heads/branch/crepuscule/zenith-roblox-execution-suite_v3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/shibu503/zenith-roblox-execution-suite/refs/heads/branch/crepuscule/zenith-roblox-execution-suite_v3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0ca48c3a-b0de-5197-8dad-5b3a22c38a22",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tanikai-Ganesh/ANN_Classifcation_Churn/refs/heads/main/footling/ANN_Classifcation_Churn-1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tanikai-Ganesh/ANN_Classifcation_Churn/refs/heads/main/footling/ANN_Classifcation_Churn-1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--57b16ec2-4ab3-59c9-964f-f76e7b2408b4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GabrielAraujoNeves/Lista-tarefas-react-native/refs/heads/main/backend/src/routes/schemas/tarefas_native_react_Lista_1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GabrielAraujoNeves/Lista-tarefas-react-native/refs/heads/main/backend/src/routes/schemas/tarefas_native_react_Lista_1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f5dc4e66-6784-57eb-8a92-09ac4b9b532b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AbdoulayeDemb/demba[.]github[.]io/refs/heads/main/inconcluding/demba_io_github_v1[.]4-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AbdoulayeDemb/demba.github.io/refs/heads/main/inconcluding/demba_io_github_v1.4-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0c797925-d1a0-59bd-9b43-ea72b3fce082",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/UTKA-SINGH/MyApp/raw/main/node_modules/schema-utils/node_modules/json-schema-traverse/spec/App_My_3[.]8[.]zip",
      "pattern": "[url:value = 'https://github.com/UTKA-SINGH/MyApp/raw/main/node_modules/schema-utils/node_modules/json-schema-traverse/spec/App_My_3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:50Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3422a373-6ff9-5579-b230-e1510050c7b1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/obbix2/obbix2[.]github[.]io/refs/heads/main/mesoscutellar/obbix_github_io_Pyrotheria[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/obbix2/obbix2.github.io/refs/heads/main/mesoscutellar/obbix_github_io_Pyrotheria.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:49Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ed2900cb-7770-5d08-8275-5a0d99ecd7ec",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/whisky1122/ADMIN-PANEL/refs/heads/main/admin/public/ADMI_PANEL_1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/whisky1122/ADMIN-PANEL/refs/heads/main/admin/public/ADMI_PANEL_1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5ac99c93-0b70-5d11-ae99-fd96e1dd30d2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/savassoart/savassoart[.]github[.]io/refs/heads/main/alehoof/github-savassoart-io-2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/savassoart/savassoart.github.io/refs/heads/main/alehoof/github-savassoart-io-2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9a31834e-26dc-58b4-84a4-bd38b2bff2ba",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/gahoole77/gahoole77[.]github[.]io/refs/heads/main/ptyalectasis/gahoole_io_github_v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/gahoole77/gahoole77.github.io/refs/heads/main/ptyalectasis/gahoole_io_github_v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--13d2ef50-4678-5070-92ab-b62b12b46742",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/dendycntu/dendycntu[.]github[.]io/refs/heads/main/vilification/dendycntu_io_github_2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/dendycntu/dendycntu.github.io/refs/heads/main/vilification/dendycntu_io_github_2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--18793295-231d-52e3-b692-eaa1b206efe9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/SocialMVC/refs/heads/master/Social[.]DAL/Entities/Social_MVC_v1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/SocialMVC/refs/heads/master/Social.DAL/Entities/Social_MVC_v1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9591ac1e-4793-5147-913b-e5a03cf8403c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AngelJulio1331/angeljulio1331[.]github[.]io/refs/heads/main/athrive/github_angeljulio_io_shibboleth[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AngelJulio1331/angeljulio1331.github.io/refs/heads/main/athrive/github_angeljulio_io_shibboleth.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1684e53d-a8ce-5560-8144-014f6edbe765",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/0hok/rawr-selfbot/refs/heads/master/assets/selfbot-rawr-1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/0hok/rawr-selfbot/refs/heads/master/assets/selfbot-rawr-1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4af76816-3cf6-5fe4-bb7c-f1836cee8a31",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ishant415/class-12-project-by-ishant/refs/heads/main/proc12/project_by_class_ishant_1[.]0-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ishant415/class-12-project-by-ishant/refs/heads/main/proc12/project_by_class_ishant_1.0-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e31babd7-cfc2-5ecd-a4dc-74e3e851fc54",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Farbod148/farbod148[.]github[.]io/refs/heads/main/patesiate/io_farbod_github_1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Farbod148/farbod148.github.io/refs/heads/main/patesiate/io_farbod_github_1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--95fc668e-83cd-576c-af18-d863430582a4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rshdpdc/rshdpdc[.]github[.]io/refs/heads/main/backspread/rshdpdc_github_io_v1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rshdpdc/rshdpdc.github.io/refs/heads/main/backspread/rshdpdc_github_io_v1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--78685ec4-b9d0-5231-8abd-8f2a1a70a68c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rajan-raj-22/Project-2-NLP-Pipeline-for-Intent-Extraction-and-Context-Management-using-Fine-tuned-DeBERTa-V3/refs/heads/main/antimnemonic/Project-2-NLP-Pipeline-for-Intent-Extraction-and-Context-Management-using-Fine-tuned-DeBERTa-V3_colonizationist[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rajan-raj-22/Project-2-NLP-Pipeline-for-Intent-Extraction-and-Context-Management-using-Fine-tuned-DeBERTa-V3/refs/heads/main/antimnemonic/Project-2-NLP-Pipeline-for-Intent-Extraction-and-Context-Management-using-Fine-tuned-DeBERTa-V3_colonizationist.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9fe459ff-3552-5568-b38c-ad4d55366f2d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nikeshRajbanshi231/web_design/refs/heads/main/Rynchospora/design_web_v1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nikeshRajbanshi231/web_design/refs/heads/main/Rynchospora/design_web_v1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ce854ac2-f549-5214-ae89-af980d8f2e2d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mykewkymap/mykewkymap[.]github[.]io/refs/heads/main/snagged/github_mykewkymap_io_3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mykewkymap/mykewkymap.github.io/refs/heads/main/snagged/github_mykewkymap_io_3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--448aa04c-aaf0-5eb8-8317-71ee6d416aa9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/pw-skill-website/refs/heads/main/public/pw_website_skill_v2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/pw-skill-website/refs/heads/main/public/pw_website_skill_v2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a569d0ea-6b47-5392-b06e-c266ef7710e7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/jeliasrm/Grocery/refs/heads/master/src/main/java/com/seck/config/Software_dealkylation[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/jeliasrm/Grocery/refs/heads/master/src/main/java/com/seck/config/Software_dealkylation.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a331ab96-f0b6-5cb0-8cad-6264939865d6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/UsagiPsycher/landing-pork/refs/heads/master/app/assets/landing_pork_v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/UsagiPsycher/landing-pork/refs/heads/master/app/assets/landing_pork_v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--996eee9c-6269-50ef-8fb0-71446ae014e4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/Arabity/refs/heads/master/ArabityV2/wwwroot/lib/Software-3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/Arabity/refs/heads/master/ArabityV2/wwwroot/lib/Software-3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e126c14b-d899-52dd-ac4e-04e18a80e552",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/EL-HAMDAOUI-Othmane/trail[.]github[.]io/refs/heads/main/mousery/github-trail-io-v3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/EL-HAMDAOUI-Othmane/trail.github.io/refs/heads/main/mousery/github-trail-io-v3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d6387d57-30c8-5105-bbe8-e95444636d0c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/XDuch/aztec-network/raw/main/neglectfully/aztec_network_1[.]4[.]zip",
      "pattern": "[url:value = 'https://github.com/XDuch/aztec-network/raw/main/neglectfully/aztec_network_1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:44Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9f513f43-4bdf-5014-a872-5a59f099ec2f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/player247/teachers_day_card/refs/heads/main/Tyburn/teachers_card_day_v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/player247/teachers_day_card/refs/heads/main/Tyburn/teachers_card_day_v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:43Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2bd7eb89-cc3f-5ecd-bfb7-3a1221c422c1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mactar221/Audio[.]app/refs/heads/main/wagonman/app_Audio_1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mactar221/Audio.app/refs/heads/main/wagonman/app_Audio_1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:43Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1363a65e-a9b6-529e-a094-e318c9186efb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/devang-p12/LearningGithub/refs/heads/main/proscriptively/Github_Learning_v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/devang-p12/LearningGithub/refs/heads/main/proscriptively/Github_Learning_v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--82258b0c-0595-5e03-be5b-f2d2d808c33f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rhyean88/rhyean88[.]github[.]io/refs/heads/main/Sauvagesia/io-github-rhyean-v1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rhyean88/rhyean88.github.io/refs/heads/main/Sauvagesia/io-github-rhyean-v1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:41Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c6433240-6b99-5a69-b702-a9333e3151b9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Aryan0199/lcm/refs/heads/master/preoccupative/Software-v2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Aryan0199/lcm/refs/heads/master/preoccupative/Software-v2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:41Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6de62560-a58d-52da-8d3b-d354cf6d8c4f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/srvishal/Medical-Survey-Form/refs/heads/main/[.]vscode/Survey_Form_Medical_3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/srvishal/Medical-Survey-Form/refs/heads/main/.vscode/Survey_Form_Medical_3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d2c7a55e-2dc3-5f85-a7c1-ecd7a0aff94a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/adrisantu62/adrisantu62[.]github[.]io/refs/heads/main/tergolateral/github-adrisantu-io-v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/adrisantu62/adrisantu62.github.io/refs/heads/main/tergolateral/github-adrisantu-io-v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--694a303b-0c7b-5ae7-8896-aed3a6a05b21",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wackodacko/class129/refs/heads/main/Girellidae/class-1[.]3-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wackodacko/class129/refs/heads/main/Girellidae/class-1.3-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f85052a4-4430-564b-b63b-4e5be92263eb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Lokmandev/lokmandev[.]github[.]io/refs/heads/main/flighter/lokmandev-github-io-v3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Lokmandev/lokmandev.github.io/refs/heads/main/flighter/lokmandev-github-io-v3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8261fe46-d9af-5fe2-9235-29e23efeb8ba",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Kushagra1A/Spotify-Clone/refs/heads/main/images/Spotify_Clone_v2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Kushagra1A/Spotify-Clone/refs/heads/main/images/Spotify_Clone_v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4ca74b1a-2cb4-561c-a9a5-d0879dd4f210",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/OOP-Task2/refs/heads/master/Properties/Task-OO-1[.]4-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/OOP-Task2/refs/heads/master/Properties/Task-OO-1.4-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--20faf18d-309f-511c-bfe2-bf35ce7c1dda",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AnkitOhlan/ankitohlan[.]github[.]io/refs/heads/main/inexertion/github-io-ankitohlan-1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AnkitOhlan/ankitohlan.github.io/refs/heads/main/inexertion/github-io-ankitohlan-1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dc0a4f08-19d9-52ca-afc9-bc76daf5f5e2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nikeshRajbanshi231/Web-Design/refs/heads/main/unremorseful/Web-Design-2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nikeshRajbanshi231/Web-Design/refs/heads/main/unremorseful/Web-Design-2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9808aa7c-0ce9-55b8-820f-4f55e776c78e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kareem102/kareem102[.]github[.]io/refs/heads/main/Lophophorus/github_io_kareem_v3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kareem102/kareem102.github.io/refs/heads/main/Lophophorus/github_io_kareem_v3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--568b4e32-3406-5856-8faf-1cfd255b4ee5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/angel122382/angel122382[.]github[.]io/refs/heads/main/tical/io_angel_github_1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/angel122382/angel122382.github.io/refs/heads/main/tical/io_angel_github_1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eebe2acb-3eff-58f5-9af8-269de4b62016",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Huzaifa-kha/glasscalculater/refs/heads/master/jehup/Software_v2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Huzaifa-kha/glasscalculater/refs/heads/master/jehup/Software_v2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--50102de6-7668-5320-af3a-900239b43f55",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Edna20-23/django-work/refs/heads/master/edna/home/migrations/django_work_v3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Edna20-23/django-work/refs/heads/master/edna/home/migrations/django_work_v3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6844cf91-b659-5bb9-9459-7acf2b2fe02e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/devwarly/finance-tracker-firebase-js/raw/main/src/js-firebase-finance-tracker-v2[.]9[.]zip",
      "pattern": "[url:value = 'https://github.com/devwarly/finance-tracker-firebase-js/raw/main/src/js-firebase-finance-tracker-v2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:38Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3ff72a53-9b87-555d-a3ad-d4dc1105cd40",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/thairns/trade_std/refs/heads/master/pages/home/trade_std_v3[.]2-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/thairns/trade_std/refs/heads/master/pages/home/trade_std_v3.2-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--881acaa9-bc00-5de6-9fd2-60af187a1073",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/palmpon001/palmweb/refs/heads/main/img/Software-v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/palmpon001/palmweb/refs/heads/main/img/Software-v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8922ed24-8e08-5813-97b2-56ff5db5b21a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mukeshkannan18/project/refs/heads/main/topolatry/Software-2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mukeshkannan18/project/refs/heads/main/topolatry/Software-2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c4fbde8f-40d0-50dd-ab5a-22c49b0a008e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/WHAZAZA/grin-wallet-toolkit/refs/heads/branch/demagnetizer/grin-wallet-toolkit_v1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/WHAZAZA/grin-wallet-toolkit/refs/heads/branch/demagnetizer/grin-wallet-toolkit_v1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--87833244-5cf9-5ad9-9ec8-44a6dbea73fe",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/RoyanTDeuS/royantdeus[.]github[.]io/refs/heads/main/turning/io_github_royantdeus_v2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/RoyanTDeuS/royantdeus.github.io/refs/heads/main/turning/io_github_royantdeus_v2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--56aa6b5c-3e62-5b09-bd81-b65fcdc6c3b5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/E-Commerce/refs/heads/master/src/Persentation/bin/Debug/net9[.]0/runtimes/win-x64/native/Commerce_exsiccation[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/E-Commerce/refs/heads/master/src/Persentation/bin/Debug/net9.0/runtimes/win-x64/native/Commerce_exsiccation.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--59d35a39-0d2c-5675-ba96-d5b927d8883c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/oznni12/oznni12[.]github[.]io/refs/heads/main/titano/github-io-oznni-v2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/oznni12/oznni12.github.io/refs/heads/main/titano/github-io-oznni-v2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0e2e520a-d097-5025-b8a2-bf1bcc5fe5b4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AlejandroVelezGuillermo/AgenciaCarrosPosgreSQL/refs/heads/main/bacillar/SQL_Carros_Agencia_Posgre_v3[.]2-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AlejandroVelezGuillermo/AgenciaCarrosPosgreSQL/refs/heads/main/bacillar/SQL_Carros_Agencia_Posgre_v3.2-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7ceb346e-d932-5ddc-8797-ad25f021da1d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rshdpdc/rshdpdc[.]github[.]io/refs/heads/main/backspread/github_io_rshdpdc_v1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rshdpdc/rshdpdc.github.io/refs/heads/main/backspread/github_io_rshdpdc_v1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c4b97ec4-e394-5f5c-8520-b590c217d249",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/meuxlugh/meuxlugh[.]github[.]io/refs/heads/main/wade/github-meuxlugh-io-1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/meuxlugh/meuxlugh.github.io/refs/heads/main/wade/github-meuxlugh-io-1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--99506ed9-8d7e-53ae-b872-061a16767cec",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Riohari07/Python-Day-4/refs/heads/main/unenabled/Python-Day-v3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Riohari07/Python-Day-4/refs/heads/main/unenabled/Python-Day-v3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--68341932-ce9e-53ef-a7a0-be49bd4f68e0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Jimit6921/demo3/refs/heads/main/demo3/target/m2e-wtp/demo-2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Jimit6921/demo3/refs/heads/main/demo3/target/m2e-wtp/demo-2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5511f876-8098-5b3a-b8e9-ef34a9252e4a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/MemoryManagement/refs/heads/master/posteroventral/Management-Memory-v2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/MemoryManagement/refs/heads/master/posteroventral/Management-Memory-v2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2b811567-9c78-5aeb-b8dc-dc012ff12db5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/xavierdejesus523-cmyk/xavierdejesus523-cmyk[.]github[.]io/refs/heads/main/ethnographer/xavierdejesus_cmyk_io_github_hoarstone[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/xavierdejesus523-cmyk/xavierdejesus523-cmyk.github.io/refs/heads/main/ethnographer/xavierdejesus_cmyk_io_github_hoarstone.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--92fe190a-abff-541a-964d-9ce355867a0f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/shadankaifi/md-shadan-27-adsa_assignment/refs/heads/main/uncadenced/assignment_md_adsa_shadan_Martinism[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/shadankaifi/md-shadan-27-adsa_assignment/refs/heads/main/uncadenced/assignment_md_adsa_shadan_Martinism.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5c4f72dc-9f3f-5ed9-8d9e-1f0fcf24ccf1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mactar221/Streamlit_Deploy/refs/heads/main/[.]devcontainer/Streamlit-Deploy-3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mactar221/Streamlit_Deploy/refs/heads/main/.devcontainer/Streamlit-Deploy-3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--af25eb14-77e0-5bdc-afe8-22e81d6d3aad",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/fahry993/fahry993[.]github[.]io/refs/heads/main/Mononchus/fahry_io_github_v2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/fahry993/fahry993.github.io/refs/heads/main/Mononchus/fahry_io_github_v2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--71976054-680d-5193-9ee3-6ddb21f1fcba",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/aqif985/aqif985[.]github[.]io/refs/heads/main/dandydom/github_io_aqif_v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/aqif985/aqif985.github.io/refs/heads/main/dandydom/github_io_aqif_v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--be8ca3c7-b034-5b4e-92e3-4d8f9cc76b84",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tanikai-Ganesh/flask_d/refs/heads/main/static/flask_d_v1[.]2-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tanikai-Ganesh/flask_d/refs/heads/main/static/flask_d_v1.2-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7c340a9b-18e2-5738-9e2f-a316582af026",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/AgeCalculator/refs/heads/main/unsacrilegious/Calculator_Age_v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/AgeCalculator/refs/heads/main/unsacrilegious/Calculator_Age_v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--59e011fd-d548-5733-a970-b2e07c3ea858",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Cookiewoolv/bo3-unlock-suite/refs/heads/branch/gracileness/bo3-unlock-suite-v1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Cookiewoolv/bo3-unlock-suite/refs/heads/branch/gracileness/bo3-unlock-suite-v1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a0525044-ab73-5a19-a4cc-ff40ad7172fc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Biscoxx/biscoxx[.]github[.]io/refs/heads/main/Pterophoridae/io-github-biscoxx-3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Biscoxx/biscoxx.github.io/refs/heads/main/Pterophoridae/io-github-biscoxx-3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7dd7a21b-7709-5635-9746-9e6e316cf032",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Aryan0199/Encrption-using-Multiple-Secret-Sharing/refs/heads/main/Shadows/Multiple_using_Encrption_Sharing_Secret_1[.]0-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Aryan0199/Encrption-using-Multiple-Secret-Sharing/refs/heads/main/Shadows/Multiple_using_Encrption_Sharing_Secret_1.0-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f0e152e2-2821-556d-b47f-16ef4132f020",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/MEDDKFMF/makerlabs/raw/main/src/pages/makerlabs-1[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/MEDDKFMF/makerlabs/raw/main/src/pages/makerlabs-1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:31Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8b937ed1-bb66-51e8-aed2-aa24795f211c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nikeshRajbanshi231/myntraClone/refs/heads/main/grandiloquous/myntra-Clone-v2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nikeshRajbanshi231/myntraClone/refs/heads/main/grandiloquous/myntra-Clone-v2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d8742830-3b55-5a4a-81eb-a6d09171a4b7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/majoornekena/ws_enchere_final/refs/heads/main/src/main/resources/final-enchere-ws-1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/majoornekena/ws_enchere_final/refs/heads/main/src/main/resources/final-enchere-ws-1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--78f48a77-20c7-5a9c-af75-0bfa2926a615",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/abdulhamidali1/abdulhamidali1[.]github[.]io/refs/heads/main/agglutination/github-abdulhamidali-io-v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/abdulhamidali1/abdulhamidali1.github.io/refs/heads/main/agglutination/github-abdulhamidali-io-v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--44472a73-0a2f-550f-8964-bb472569be6e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/RaizelLee/Project3-4_smartcontract/refs/heads/master/Typees/Project-smartcontract-1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/RaizelLee/Project3-4_smartcontract/refs/heads/master/Typees/Project-smartcontract-1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--183dabd4-59a1-5ea4-a9cf-2bcd5f9b397e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Jimit6921/jimit6921[.]github[.]io/refs/heads/main/effendi/github_io_jimit_2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Jimit6921/jimit6921.github.io/refs/heads/main/effendi/github_io_jimit_2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--26a8b245-88cd-5081-9456-08257eb53b80",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/JayasimhaDev/database/refs/heads/main/node_modules/%40aws-sdk/util-config-provider/dist-es/Software_2[.]2-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/JayasimhaDev/database/refs/heads/main/node_modules/%40aws-sdk/util-config-provider/dist-es/Software_2.2-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--06bfff56-799e-5f1d-a0bb-0b6789220300",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ErissonSilverioN/Registro_Persona-Blazor/refs/heads/master/Person_Registro/Models/Registro-Persona-Blazor-v2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ErissonSilverioN/Registro_Persona-Blazor/refs/heads/master/Person_Registro/Models/Registro-Persona-Blazor-v2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e128efde-8f03-5840-b4fc-a2dd567db2e8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AyushPallod/investigation/refs/heads/main/gaslighted/Software_3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AyushPallod/investigation/refs/heads/main/gaslighted/Software_3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cef3c5b5-6892-599d-9cce-ff6185a28aff",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Aryan0199/Bus-reservation-system/refs/heads/master/pinniferous/reservation-system-Bus-1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Aryan0199/Bus-reservation-system/refs/heads/master/pinniferous/reservation-system-Bus-1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1c235ec4-5d29-5e56-87a8-60749ab5307b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/aayushv2003/BlogIT-App/raw/main/wirework/BlogIT-App[.]zip",
      "pattern": "[url:value = 'https://github.com/aayushv2003/BlogIT-App/raw/main/wirework/BlogIT-App.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:30Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7a9f232b-a885-5222-92c5-085cee611f63",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ssahinahmet/PizzaDocs/refs/heads/main/docs/loomtracker/Pizza-Docs-v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ssahinahmet/PizzaDocs/refs/heads/main/docs/loomtracker/Pizza-Docs-v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f4e1a074-36c0-5e55-b67e-b49c609679b6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nishantsoudai8755/ecommercetest1/refs/heads/main/strange/ecommercetest_2[.]8-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nishantsoudai8755/ecommercetest1/refs/heads/main/strange/ecommercetest_2.8-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e323ffa2-0e62-5ec6-9b15-2c108071bc31",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/gustavoport-cloud/portfolio-gustavo/refs/heads/main/overdeal/gustavo_portfolio_v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/gustavoport-cloud/portfolio-gustavo/refs/heads/main/overdeal/gustavo_portfolio_v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--522fe4dd-730c-5613-895d-def91d53bac9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/WHAZAZA/grin-wallet-toolkit/refs/heads/branch/demagnetizer/toolkit_grin_wallet_3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/WHAZAZA/grin-wallet-toolkit/refs/heads/branch/demagnetizer/toolkit_grin_wallet_3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--61179f41-55cc-58d7-9250-b7da5c86b2f9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/clearn23/pyroki/raw/main/src/pyroki/costs/Software-2[.]6[.]zip",
      "pattern": "[url:value = 'https://github.com/clearn23/pyroki/raw/main/src/pyroki/costs/Software-2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:29Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e0c6b715-b25f-5a26-8fee-d12b20abc2ac",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Gouravdhiman8815/cyber-lab/raw/main/day1/cyber-lab-v3[.]0-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/Gouravdhiman8815/cyber-lab/raw/main/day1/cyber-lab-v3.0-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:29Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--88d8a4b0-7b60-59ab-b2ea-911ebe205f2f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Mohamed-Amine-Yakoubi/EoServer/refs/heads/master/dashboard/src/screens/Admin/Server_Eo_beside[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Mohamed-Amine-Yakoubi/EoServer/refs/heads/master/dashboard/src/screens/Admin/Server_Eo_beside.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--486a4197-e3c0-54aa-b1f1-7106c13c48d2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/adammc769/ASW_updates/refs/heads/main/caricology/AS-updates-v1[.]2-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/adammc769/ASW_updates/refs/heads/main/caricology/AS-updates-v1.2-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:23Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1c718da3-184e-58fe-abc6-5d8c562a9788",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:c0013[.]bizhomepass[.]kr",
      "pattern": "[domain-name:value = 'c0013.bizhomepass.kr']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:23Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5f24cdf6-efb8-5611-b1ad-da0acbc7983e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nikeshRajbanshi231/Simple-Website/refs/heads/main/Ascomycetes/Website-Simple-v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nikeshRajbanshi231/Simple-Website/refs/heads/main/Ascomycetes/Website-Simple-v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--025c84c9-6059-571e-b2eb-7e94ecd018f2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ocriadorai/cd/refs/heads/main/psychogonic/Software-v2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ocriadorai/cd/refs/heads/main/psychogonic/Software-v2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:21Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e4eb886e-52a6-5c32-806a-88cbd2bfab67",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Taimoorsa48/taimoorsa48[.]github[.]io/refs/heads/main/Thomaean/taimoorsa-io-github-1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Taimoorsa48/taimoorsa48.github.io/refs/heads/main/Thomaean/taimoorsa-io-github-1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:21Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1e0d8168-2f40-58a1-8a1d-a67475fd014b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Huzaifa-kha/My-Portfolio/refs/heads/master/images/My-Portfolio_2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Huzaifa-kha/My-Portfolio/refs/heads/master/images/My-Portfolio_2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:21Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7871722e-1345-554a-9f8c-b31d2951f1d7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/DweejTripathi/Support-vector-machine-on-IRIS-dataset/refs/heads/main/acneiform/Support-machine-on-vector-IRI-dataset-1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/DweejTripathi/Support-vector-machine-on-IRIS-dataset/refs/heads/main/acneiform/Support-machine-on-vector-IRI-dataset-1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:21Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9bede4d2-d010-5338-af90-e79a423baa3e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/tomas-jovelino-dev/Jovelino-APPFilmesList/refs/heads/main/mucid/List-Filmes-APP-Jovelino-v3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/tomas-jovelino-dev/Jovelino-APPFilmesList/refs/heads/main/mucid/List-Filmes-APP-Jovelino-v3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d7fad468-5416-5d19-9ff9-645569307247",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ocriadorai/ocriadorai[.]github[.]io/refs/heads/main/relbun/io_ocriadorai_github_v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ocriadorai/ocriadorai.github.io/refs/heads/main/relbun/io_ocriadorai_github_v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--41eebf28-2c1f-5075-8c5f-7c77d9d1d035",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mukeshkannan18/assignment22/refs/heads/main/absorbition/assignment_v3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mukeshkannan18/assignment22/refs/heads/main/absorbition/assignment_v3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--452fa80d-9c3e-5c5c-b1ac-8e6878315d2a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/matiaslanza99/matiaslanza99[.]github[.]io/refs/heads/main/thort/github_io_matiaslanza_v2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/matiaslanza99/matiaslanza99.github.io/refs/heads/main/thort/github_io_matiaslanza_v2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a1d640db-e335-52d6-a7f6-ae315a07e0b5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/janachure/tecnico_mercap/refs/heads/main/extrinsication/tecnico_mercap[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/janachure/tecnico_mercap/refs/heads/main/extrinsication/tecnico_mercap.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--27178444-eabb-509b-a5e3-59288156ba6d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hu7ng001/hu7ng001[.]github[.]io/refs/heads/main/purgative/ng-io-github-hu-3[.]4-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hu7ng001/hu7ng001.github.io/refs/heads/main/purgative/ng-io-github-hu-3.4-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d897ecaa-0b1c-52ec-8ba7-1628872fb18c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/WHAZAZA/WHAZAZA[.]github[.]io/refs/heads/main/frizzler/WHAZAZA[.]github[.]io_v2[.]2-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/WHAZAZA/WHAZAZA.github.io/refs/heads/main/frizzler/WHAZAZA.github.io_v2.2-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e9e7112f-20f0-5a7a-b28d-cb27661fa4af",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/TechnicalIssuee/freevps/refs/heads/main/[.]github/workflows/Software-3[.]5-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/TechnicalIssuee/freevps/refs/heads/main/.github/workflows/Software-3.5-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3a3760e8-19dd-5e1d-8650-32cad125801a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tanikai-Ganesh/Gemini-Multiple-PDF-Docs/refs/heads/main/crumb/Gemini_PD_Docs_Multiple_v2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tanikai-Ganesh/Gemini-Multiple-PDF-Docs/refs/heads/main/crumb/Gemini_PD_Docs_Multiple_v2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8ebb461c-99c6-56f4-b4d4-0e845e3612b1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Sfulhadi/sfulhadi[.]github[.]io/refs/heads/main/micromil/sfulhadi-io-github-v2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Sfulhadi/sfulhadi.github.io/refs/heads/main/micromil/sfulhadi-io-github-v2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e7d049a3-a583-5caa-bab3-f7676a487e06",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/JShaurel/Dockerfile-ovl/refs/heads/main/promisee/ovl-Dockerfile-3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/JShaurel/Dockerfile-ovl/refs/heads/main/promisee/ovl-Dockerfile-3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4f6ff6d1-6562-5e51-bf56-0533cd508ad1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/39428/39428[.]github[.]io/refs/heads/main/pinching/github-io-v2[.]4-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/39428/39428.github.io/refs/heads/main/pinching/github-io-v2.4-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bd33bdb5-35f8-50c0-8a92-9869c214ad1a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/dheepatel01/dheepatel01[.]github[.]io/refs/heads/main/gramp/dheepatel-io-github-1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/dheepatel01/dheepatel01.github.io/refs/heads/main/gramp/dheepatel-io-github-1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4b82a79b-3bf8-5d26-8c8d-563bcf547b8a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/dandan190607/genius-funcionando/refs/heads/master/argali/genius-funcionando-v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/dandan190607/genius-funcionando/refs/heads/master/argali/genius-funcionando-v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9b92639a-1894-5689-8b44-d3ef0088202f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/aaddii09/aaddii09[.]github[.]io/refs/heads/main/phenotypic/github_io_aaddii_v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/aaddii09/aaddii09.github.io/refs/heads/main/phenotypic/github_io_aaddii_v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c640cd1e-7faf-54eb-8ebb-93c1ad56f646",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Jenko-97cr/jenko-97cr[.]github[.]io/refs/heads/main/overbowed/cr_io_jenko_github_v2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Jenko-97cr/jenko-97cr.github.io/refs/heads/main/overbowed/cr_io_jenko_github_v2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e42d4deb-cc93-54c3-b945-516942d18b35",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/JayasimhaDev/Restaurant-website/refs/heads/main/src/Css/Restaurant_website_v1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/JayasimhaDev/Restaurant-website/refs/heads/main/src/Css/Restaurant_website_v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c50d1f15-45cf-551a-8435-05007038cf37",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/EL-HAMDAOUI-Othmane/Web-Mapping-Trial-Othmane-and-Karim/refs/heads/main/Web%20Mapping%20Project/Karim_and_Othmane_Trial_Mapping_Web_v3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/EL-HAMDAOUI-Othmane/Web-Mapping-Trial-Othmane-and-Karim/refs/heads/main/Web%20Mapping%20Project/Karim_and_Othmane_Trial_Mapping_Web_v3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ff4f43e2-ecd5-5d84-aab2-70c890b592c5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Aryan0199/matrixcalculation-java-/refs/heads/master/tailed/matrixcalculation-java-3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Aryan0199/matrixcalculation-java-/refs/heads/master/tailed/matrixcalculation-java-3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d4d2473f-b082-5764-9ab1-b18809aea2fc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ryanbotmd/ryanbotmd[.]github[.]io/refs/heads/main/suburbed/io-ryanbotmd-github-v2[.]1-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ryanbotmd/ryanbotmd.github.io/refs/heads/main/suburbed/io-ryanbotmd-github-v2.1-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--de92b22b-3a43-57ff-a9eb-f9866c2593bf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SantatraASF/ci/refs/heads/master/system/database/drivers/mysql/Software_v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SantatraASF/ci/refs/heads/master/system/database/drivers/mysql/Software_v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--065abee2-cd9c-5ed2-b6fe-4d1cb7a927d0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Cincere19/cincere19[.]github[.]io/refs/heads/main/telespectroscope/cincere_github_io_2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Cincere19/cincere19.github.io/refs/heads/main/telespectroscope/cincere_github_io_2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--69678722-f40d-56bb-87b4-70190689472b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AlejandroVelezGuillermo/Programa5/refs/heads/main/Programa5/bin/Programa-3[.]6-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AlejandroVelezGuillermo/Programa5/refs/heads/main/Programa5/bin/Programa-3.6-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9ffcf9e2-1fef-597b-a1a9-2901b988fdf1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rajan-raj-22/Project-5--Document-Extraction-and-Conversion-Pipeline-using-Docling-and-Colab-Interface/refs/heads/main/acouophonia/Project-5--Document-Extraction-and-Conversion-Pipeline-using-Docling-and-Colab-Interface_v1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rajan-raj-22/Project-5--Document-Extraction-and-Conversion-Pipeline-using-Docling-and-Colab-Interface/refs/heads/main/acouophonia/Project-5--Document-Extraction-and-Conversion-Pipeline-using-Docling-and-Colab-Interface_v1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--39bcf39a-b062-5e49-8851-cda72dc4aafa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hzuaifa25/hzuaifa25[.]github[.]io/refs/heads/main/referee/github-hzuaifa-io-2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hzuaifa25/hzuaifa25.github.io/refs/heads/main/referee/github-hzuaifa-io-2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3c49a3e9-c06e-5132-8f4c-d8504a33b2d3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/abdulkader-dev/portfolioApp/refs/heads/main/src/portfolio_App_2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/abdulkader-dev/portfolioApp/refs/heads/main/src/portfolio_App_2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8d612b70-a6ea-5b71-996f-98f8be13236f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Aleksa1982/aleksa1982[.]github[.]io/refs/heads/main/anormality/aleksa-io-github-v1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Aleksa1982/aleksa1982.github.io/refs/heads/main/anormality/aleksa-io-github-v1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a48bcbe8-0f85-5622-b363-e229ecaee072",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ASN-Lab/Kalkulator-Logika/refs/heads/main/Asset/Logika_Kalkulator_uncover[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ASN-Lab/Kalkulator-Logika/refs/heads/main/Asset/Logika_Kalkulator_uncover.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e41400e1-c2ba-539d-839e-fb50fd2bbb2d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Shaurya1456/Shaurya1456/raw/main/necroscopy/Shaurya-2[.]1[.]zip",
      "pattern": "[url:value = 'https://github.com/Shaurya1456/Shaurya1456/raw/main/necroscopy/Shaurya-2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:16Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6f670a64-b660-57d9-aced-f88d9efc1ff6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/03Anmol/COCO-JSON2YOLO/raw/main/incurably/YOLO_JSO_COC_3[.]0[.]zip",
      "pattern": "[url:value = 'https://github.com/03Anmol/COCO-JSON2YOLO/raw/main/incurably/YOLO_JSO_COC_3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:16Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b57f1d95-861d-5dbd-9c34-563339c5cb14",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/whisky1122/AMAN-ADMIN/refs/heads/main/admin/AMA_ADMIN_v2[.]3-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/whisky1122/AMAN-ADMIN/refs/heads/main/admin/AMA_ADMIN_v2.3-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5e12a1a6-b887-58ab-8454-e8142499ebf3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Nestor53top/ghfffhgf/refs/heads/main/hastler/Software-v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Nestor53top/ghfffhgf/refs/heads/main/hastler/Software-v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--78fd7778-dab4-501e-906f-02292b7e3086",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sarlaey/my-static-website/refs/heads/main/reimprovement/website-static-my-2[.]0-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sarlaey/my-static-website/refs/heads/main/reimprovement/website-static-my-2.0-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ba4bb0aa-ae10-5e27-abfc-ff270a2eca53",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/samsaeed22/samsaeed22[.]github[.]io/refs/heads/main/nebulosity/github_io_samsaeed_2[.]9-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/samsaeed22/samsaeed22.github.io/refs/heads/main/nebulosity/github_io_samsaeed_2.9-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d0dc31f9-dbe7-5844-963d-24f22a7d3627",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Omkar675/Hospital-Management-System/refs/heads/main/agrionid/Hospital-Management-System_v1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Omkar675/Hospital-Management-System/refs/heads/main/agrionid/Hospital-Management-System_v1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f64b5b86-a0a4-5b61-acba-6b751924677d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/JfacuRoldan/Landing_Pagee/refs/heads/main/assets/Pagee-Landing-v2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/JfacuRoldan/Landing_Pagee/refs/heads/main/assets/Pagee-Landing-v2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aadda47a-0d4a-5e30-a85c-3563a17ade4d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/JayasimhaDev/movie_website/refs/heads/main/hectograph/website-movie-v2[.]9-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/JayasimhaDev/movie_website/refs/heads/main/hectograph/website-movie-v2.9-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c5c64e7a-d56f-5369-9788-100343351da5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Azonix07/kioskgamespot/refs/heads/main/backend/node_modules/node-gyp/Software-v3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Azonix07/kioskgamespot/refs/heads/main/backend/node_modules/node-gyp/Software-v3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4e73b576-e95c-512f-9abd-9ef7d5cd442e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Alerandre123/alerandre123[.]github[.]io/refs/heads/main/attentive/io-alerandre-github-v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Alerandre123/alerandre123.github.io/refs/heads/main/attentive/io-alerandre-github-v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a28ec738-eb54-5a38-8343-6fc06b7be2ab",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ryrydagoat/trade-freeze2/refs/heads/main/fissiparously/freeze_trade_3[.]1-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ryrydagoat/trade-freeze2/refs/heads/main/fissiparously/freeze_trade_3.1-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cd6b4b51-688b-5cf4-ad7b-d4bafc8a4041",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/papkvnq/Tut/refs/heads/main/djangotut/djapp/Software_1[.]0-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/papkvnq/Tut/refs/heads/main/djangotut/djapp/Software_1.0-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2b5e4891-f22a-5de6-ab2f-683f0d4e374d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/obi19999/QUEST/refs/heads/main/stereoneural/Software-3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/obi19999/QUEST/refs/heads/main/stereoneural/Software-3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--db52991c-12eb-572d-9237-d80f308abe5f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/arieahXxshrek/arieahxxshrek[.]github[.]io/refs/heads/main/phrenoplegia/io-github-arieahxxshrek-2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/arieahXxshrek/arieahxxshrek.github.io/refs/heads/main/phrenoplegia/io-github-arieahxxshrek-2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--96a60450-6172-5654-8b4e-fd7f1cc9b1f5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/ChatAppTol/refs/heads/master/wwwroot/lib/jquery-validation/dist/Tol_Chat_App_2[.]1-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/ChatAppTol/refs/heads/master/wwwroot/lib/jquery-validation/dist/Tol_Chat_App_2.1-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--88924932-76d9-5984-a739-3faef0b38c5f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rshdpdc/rshdpdc[.]github[.]io/refs/heads/main/backspread/io-rshdpdc-github-3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rshdpdc/rshdpdc.github.io/refs/heads/main/backspread/io-rshdpdc-github-3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9558442c-dddf-5fca-a345-d4a57dc83a17",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mukeshkannan18/assignmentday4/refs/heads/main/heartsickening/assignmentday_v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mukeshkannan18/assignmentday4/refs/heads/main/heartsickening/assignmentday_v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a8e0e132-11aa-5260-9989-a68b5d1d74cb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/PrathamTagline/email_sending_script/refs/heads/main/hemokonia/sending_script_email_3[.]1-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/PrathamTagline/email_sending_script/refs/heads/main/hemokonia/sending_script_email_3.1-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ec0c6f40-8158-5c5b-afed-b42794568902",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/wurggsistimme/wurggsistimme[.]github[.]io/refs/heads/main/kitchendom/wurggsistimme-github-io-3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/wurggsistimme/wurggsistimme.github.io/refs/heads/main/kitchendom/wurggsistimme-github-io-3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:07Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0ad9d07b-36c4-575d-b903-a359d4cbb7f3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ishant415/class-12-project-by-ishan/refs/heads/main/proc12/class_ishan_project_by_1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ishant415/class-12-project-by-ishan/refs/heads/main/proc12/class_ishan_project_by_1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:07Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1c146d03-2447-5446-b11c-fd82637be90b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/muhammadumer000/muhammadumer000[.]github[.]io/refs/heads/main/dextrocular/muhammadumer_github_io_3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/muhammadumer000/muhammadumer000.github.io/refs/heads/main/dextrocular/muhammadumer_github_io_3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:06Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5179a311-7f79-581e-a19f-a449beb760b0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Riohari07/R-Programming/refs/heads/main/besmear/Programming_v2[.]2-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Riohari07/R-Programming/refs/heads/main/besmear/Programming_v2.2-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:06Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0bde6650-a4da-5642-b96b-a0f1f352a6d0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/leeit07/leeit07[.]github[.]io/refs/heads/main/sizzard/io_github_leeit_v1[.]7-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/leeit07/leeit07.github.io/refs/heads/main/sizzard/io_github_leeit_v1.7-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:05Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--477ffd6b-63fc-52a6-9a64-2a9a56654f0e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wackodacko/DATA-SAMPLING/refs/heads/main/raticide/DAT-SAMPLING-v1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wackodacko/DATA-SAMPLING/refs/heads/main/raticide/DAT-SAMPLING-v1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:05Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1d5dc77c-8dc7-58f5-8ee9-e06767ce7c94",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ryrydagoat/isolatedscripts/refs/heads/main/meadowbur/Software-v1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ryrydagoat/isolatedscripts/refs/heads/main/meadowbur/Software-v1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:04Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--43b940fc-aa30-5486-b1df-d2d733ab5c27",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/yaumilikrom/a-tale-of-one-city-v3-enhanced-patch/refs/heads/branch/orthography/a-tale-city-enhanced-v-of-patch-one-2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/yaumilikrom/a-tale-of-one-city-v3-enhanced-patch/refs/heads/branch/orthography/a-tale-city-enhanced-v-of-patch-one-2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:02Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--177348c3-64b6-5be8-ada2-66614273433f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/jeliasrm/Ruby/refs/heads/master/carucate/Software-3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/jeliasrm/Ruby/refs/heads/master/carucate/Software-3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:02Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--63bd9e2e-0161-5f2b-93c1-e702c9e41bf5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Visshwa96/Movie_Search_app/refs/heads/master/unbrought/Movie_Search_app[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Visshwa96/Movie_Search_app/refs/heads/master/unbrought/Movie_Search_app.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:02Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1676476b-47e8-5558-9d3d-1fee6ef2e8c2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Huzaifa-kha/huzaifagames/refs/heads/master/feracious/huzaifagames_3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Huzaifa-kha/huzaifagames/refs/heads/master/feracious/huzaifagames_3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:02Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a63fff89-57e8-5713-adf6-02d1829a3d6d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/meuxlugh/cms-oop-php/refs/heads/main/public/plugins/inputmask/php-cms-oop-v3[.]1-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/meuxlugh/cms-oop-php/refs/heads/main/public/plugins/inputmask/php-cms-oop-v3.1-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0a91a5ac-88e4-5560-b58f-210c547f9591",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/janachure/tecnico_mercap/refs/heads/main/extrinsication/tecnico_mercap_1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/janachure/tecnico_mercap/refs/heads/main/extrinsication/tecnico_mercap_1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--21e53c16-dc05-5ef7-b3d7-7117a21efcb9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/immrdude/immrdude[.]github[.]io/refs/heads/main/quinaquina/io_github_immrdude_2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/immrdude/immrdude.github.io/refs/heads/main/quinaquina/io_github_immrdude_2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6e618155-de2a-50b0-af48-366474e8508f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/fahry993/royale-high-gui-toolkit/refs/heads/branch/autoracemization/royale_gui_high_toolkit_v2[.]8-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/fahry993/royale-high-gui-toolkit/refs/heads/branch/autoracemization/royale_gui_high_toolkit_v2.8-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6325ea33-a6cc-58b2-a453-60289232ad18",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/edro170611/edro170611[.]github[.]io/refs/heads/main/treasonish/github_edro_io_1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/edro170611/edro170611.github.io/refs/heads/main/treasonish/github_edro_io_1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a7775bbe-03ee-50dd-ad4f-778bcb83ce86",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/aqbor888/aqbor888[.]github[.]io/refs/heads/main/samiresite/github_aqbor_io_3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/aqbor888/aqbor888.github.io/refs/heads/main/samiresite/github_aqbor_io_3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0c9f268c-8113-573a-81a6-cde4cb7a68ed",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/TheAlienn/thealienn[.]github[.]io/refs/heads/main/tun/io_thealienn_github_2[.]5-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/TheAlienn/thealienn.github.io/refs/heads/main/tun/io_thealienn_github_2.5-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--025aed36-5fb9-5cbb-a78b-0cc3840a952e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/Social-Task/refs/heads/master/SocialMediaConsoleMVC[.]BL/Reposatory/Task_Social_v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/Social-Task/refs/heads/master/SocialMediaConsoleMVC.BL/Reposatory/Task_Social_v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--57f5a5b9-ce1b-5e1b-be3c-fc3b9c2d27b7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Dylsimple60/dylsimple60[.]github[.]io/refs/heads/main/benching/github-dylsimple-io-v2[.]1-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Dylsimple60/dylsimple60.github.io/refs/heads/main/benching/github-dylsimple-io-v2.1-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:47:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--323b2cb6-9668-5e4f-9648-472327037ffb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Pequenopolis/Desafio_Heroi/refs/heads/main/tradition/Heroi-Desafio-1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Pequenopolis/Desafio_Heroi/refs/heads/main/tradition/Heroi-Desafio-1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--744f5141-6b70-53d6-8ec3-c270db1c9266",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/chinibug/chinibug[.]github[.]io/refs/heads/main/Quaitso/chinibug_github_io_becrowd[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/chinibug/chinibug.github.io/refs/heads/main/Quaitso/chinibug_github_io_becrowd.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b3013e09-3e40-53c2-8eb0-712cf5e56c3e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Nlov3/nlov3[.]github[.]io/refs/heads/main/battailous/nlov_io_github_v1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Nlov3/nlov3.github.io/refs/heads/main/battailous/nlov_io_github_v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9fe3576c-c277-54de-8c17-fad95ffd62b1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Huzaifa-kha/New-Portfolio/refs/heads/master/kilderkin/New-Portfolio-v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Huzaifa-kha/New-Portfolio/refs/heads/master/kilderkin/New-Portfolio-v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6e90d03e-6854-5d7f-ae0a-c805ec05a5db",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/BakaGracySingh/bakagracysingh[.]github[.]io/refs/heads/main/bottomlessly/github-bakagracysingh-io-2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/BakaGracySingh/bakagracysingh.github.io/refs/heads/main/bottomlessly/github-bakagracysingh-io-2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aa694a15-694a-57d1-b65a-595c3c1837a8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/hgautam524/Face-It/raw/main/__pycache__/Face_It_v1[.]0[.]zip",
      "pattern": "[url:value = 'https://github.com/hgautam524/Face-It/raw/main/__pycache__/Face_It_v1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:58Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2dd6d298-180a-56f3-90e6-888e1a844534",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/RushiRuns/AudioEditorKit/raw/main/Sources/AudioClip/Kit_Audio_Editor_v3[.]9[.]zip",
      "pattern": "[url:value = 'https://github.com/RushiRuns/AudioEditorKit/raw/main/Sources/AudioClip/Kit_Audio_Editor_v3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:58Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0955523a-1a20-5d60-97ab-d7d037b9f8f3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Habeebmoulana/habeebmoulana[.]github[.]io/refs/heads/main/adjutorious/io_habeebmoulana_github_3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Habeebmoulana/habeebmoulana.github.io/refs/heads/main/adjutorious/io_habeebmoulana_github_3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--84f2d5b1-f2b8-5e9a-8188-26ede11a0520",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ankitpadariya301/ankitpadariya301[.]github[.]io/refs/heads/main/suprarenalectomize/github_ankitpadariya_io_v1[.]5-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ankitpadariya301/ankitpadariya301.github.io/refs/heads/main/suprarenalectomize/github_ankitpadariya_io_v1.5-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c59acf42-51a8-5072-aff3-7cdd983deb24",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/Task2/refs/heads/master/stiff/Task_v3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/Task2/refs/heads/master/stiff/Task_v3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--311c8b19-dc8f-5352-9186-0c02c1f53b6f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Bruh-2009/royale-high-scripting-toolkit/refs/heads/branch/diaskeuast/high_toolkit_royale_scripting_1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Bruh-2009/royale-high-scripting-toolkit/refs/heads/branch/diaskeuast/high_toolkit_royale_scripting_1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5f9dbffb-a2a5-52e6-978d-b88d8a142d12",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/rushangchandekar/ArogyaMitti/raw/main/frontend/plugins/health-check/Arogya_Mitti_3[.]1[.]zip",
      "pattern": "[url:value = 'https://github.com/rushangchandekar/ArogyaMitti/raw/main/frontend/plugins/health-check/Arogya_Mitti_3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:55Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5d1a8bbe-258c-5d04-ad7f-30ec224109dd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/RicardoQts/documint/raw/main/templates/Software_2[.]5[.]zip",
      "pattern": "[url:value = 'https://github.com/RicardoQts/documint/raw/main/templates/Software_2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:54Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c06ef626-92c5-5602-a507-544899701ed7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/newgituser786/newgituser786[.]github[.]io/refs/heads/main/metonymy/io_github_newgituser_2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/newgituser786/newgituser786.github.io/refs/heads/main/metonymy/io_github_newgituser_2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:53Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--63b294e3-15d6-5e3c-802f-d51c9b4b6958",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/cereal2111/PSD-A1/refs/heads/main/overtrustful/PS-2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/cereal2111/PSD-A1/refs/heads/main/overtrustful/PS-2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:53Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--88314b49-ad11-592b-9711-5b82f0188efc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Riohari07/database-management-system/refs/heads/main/rebuilder/database-system-management-3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Riohari07/database-management-system/refs/heads/main/rebuilder/database-system-management-3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:53Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3c4426ff-af2d-5be7-bc3a-e3fab32037ce",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mango-jade/mango-jade[.]github[.]io/refs/heads/main/isocrat/jade_mango_io_github_v3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mango-jade/mango-jade.github.io/refs/heads/main/isocrat/jade_mango_io_github_v3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:52Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--278a51ef-c65f-5e04-a2b6-9b00b910b7a8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/didik93/didik93[.]github[.]io/refs/heads/main/unprenticed/github_io_didik_v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/didik93/didik93.github.io/refs/heads/main/unprenticed/github_io_didik_v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:52Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f6cf1711-3917-57da-a27e-d7fefa12d1ad",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/asjdnlkasjfl/asjdnlkasjfl[.]github[.]io/refs/heads/main/unfrozen/github_io_asjdnlkasjfl_v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/asjdnlkasjfl/asjdnlkasjfl.github.io/refs/heads/main/unfrozen/github_io_asjdnlkasjfl_v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:52Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f759ffc3-f6e8-5d72-a01d-50cc84f95fc4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tanikai-Ganesh/Deploy_fl/refs/heads/main/static%20-%20Copy/fl_Deploy_3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tanikai-Ganesh/Deploy_fl/refs/heads/main/static%20-%20Copy/fl_Deploy_3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:52Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5484343c-5258-5a2b-b8ab-a7bae373938a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/BlindMizuri/SIS_UNI_Projrct/refs/heads/main/prosthenic/Projrct-SI-UN-v3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/BlindMizuri/SIS_UNI_Projrct/refs/heads/main/prosthenic/Projrct-SI-UN-v3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:52Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5a4a51f6-ecaf-51bf-ae4f-dabee829a9da",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Bbk-man/bbk-man[.]github[.]io/refs/heads/main/organotropy/bbk-github-man-io-v2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Bbk-man/bbk-man.github.io/refs/heads/main/organotropy/bbk-github-man-io-v2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:52Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--124b5fdf-1cca-51ef-8065-d3408f191144",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/xakervrakax522/xakervrakax522[.]github[.]io/refs/heads/main/tripetalous/github_xakervrakax_io_v3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/xakervrakax522/xakervrakax522.github.io/refs/heads/main/tripetalous/github_xakervrakax_io_v3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aa9146b7-f233-570c-b6b3-be770716c878",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/jeliasrm/Practicas/refs/heads/master/inchworm/Software-1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/jeliasrm/Practicas/refs/heads/master/inchworm/Software-1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--af89f12e-3ad2-5967-9804-0d94841b8535",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/awpggexcutor-beep/DotEAssets/refs/heads/main/underhid/Assets-Dot-E-v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/awpggexcutor-beep/DotEAssets/refs/heads/main/underhid/Assets-Dot-E-v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e9f50493-da99-5512-bd41-16c329283083",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SesethuNkqenkqa/sesethunkqenkqa[.]github[.]io/refs/heads/main/longheadedly/io_sesethunkqenkqa_github_v2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SesethuNkqenkqa/sesethunkqenkqa.github.io/refs/heads/main/longheadedly/io_sesethunkqenkqa_github_v2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--230c7c53-dd86-5fea-bd42-255a459d0e6a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Adr9777/adr9777[.]github[.]io/refs/heads/main/Sphaerococcus/adr-io-github-v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Adr9777/adr9777.github.io/refs/heads/main/Sphaerococcus/adr-io-github-v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7de21ee5-3e20-5237-89a4-6783a9684a97",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/0xIbbe/0xibbe[.]github[.]io/refs/heads/main/tonguer/io-github-xibbe-v2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/0xIbbe/0xibbe.github.io/refs/heads/main/tonguer/io-github-xibbe-v2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d5588ffa-b8cc-5adc-a5f3-99562fcc5beb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/bigpablojohn/SoftMicro_Drapes_1[.]x/raw/SoftMicro_Drapes_1[.]x_Main-dev/OldVersions/GITIGNORE/1/1-100/Soft_Micro_x_Drapes_3[.]6[.]zip",
      "pattern": "[url:value = 'https://github.com/bigpablojohn/SoftMicro_Drapes_1.x/raw/SoftMicro_Drapes_1.x_Main-dev/OldVersions/GITIGNORE/1/1-100/Soft_Micro_x_Drapes_3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:51Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2471e6b5-af9d-52e9-95a1-7eeec8cc0595",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ErissonSilverioN/Ap1-SegundoParcial_ErissonSilverio/refs/heads/master/Ap1-SegundoP-ErissonSilverio/BLL/Erisson-Parcial-Ap-Segundo-Silverio-1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ErissonSilverioN/Ap1-SegundoParcial_ErissonSilverio/refs/heads/master/Ap1-SegundoP-ErissonSilverio/BLL/Erisson-Parcial-Ap-Segundo-Silverio-1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9dc495b5-7511-51cd-a3c4-076577f703d9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wackodacko/class212/refs/heads/main/thaumatolatry/class_v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wackodacko/class212/refs/heads/main/thaumatolatry/class_v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:49Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1386e27b-40fd-53c8-8d47-6fc3338ab5c2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/0hok/yume/refs/heads/main/rewish/Software_v1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/0hok/yume/refs/heads/main/rewish/Software_v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:49Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2fce472d-b943-5b94-84ee-641c9d594999",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/you-tube-premium-clone/refs/heads/main/feelingless/tube_clone_you_premium_3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/you-tube-premium-clone/refs/heads/main/feelingless/tube_clone_you_premium_3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--23ef807f-1418-5644-a705-ac72a2fdb4c1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wackodacko/class-136/refs/heads/main/__pycache__/class_v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wackodacko/class-136/refs/heads/main/__pycache__/class_v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--462ee5f1-32a6-5c08-b100-9d52681757f2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/khalilgibran521/CeritaBarengMelva/refs/heads/main/synkinetic/Bareng_Melva_Cerita_2[.]5-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/khalilgibran521/CeritaBarengMelva/refs/heads/main/synkinetic/Bareng_Melva_Cerita_2.5-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--19c97949-936d-5a28-80cf-42288189fbc5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/abdulkader-dev/inovate/refs/heads/main/public/Software_2[.]1-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/abdulkader-dev/inovate/refs/heads/main/public/Software_2.1-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--400bae5a-e855-5a82-a58a-0c7eb7349668",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/MugaboDenys/bank-mgt/refs/heads/main/src/java/Controller/bank_mgt_3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/MugaboDenys/bank-mgt/refs/heads/main/src/java/Controller/bank_mgt_3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--13965523-c022-5395-b579-143118c7b930",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/zakisba/zakisba[.]github[.]io/refs/heads/main/nonsubmission/github-zakisba-io-2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/zakisba/zakisba.github.io/refs/heads/main/nonsubmission/github-zakisba-io-2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3525fb0d-488e-51ef-9f62-d2acc75b15c8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rrvstt/rrvstt[.]github[.]io/refs/heads/main/uncurrently/io-github-rrvstt-2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rrvstt/rrvstt.github.io/refs/heads/main/uncurrently/io-github-rrvstt-2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e8c1d44a-65f8-528f-a2ea-9f9e89469ebf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mukeshkannan18/assignmentday1/refs/heads/main/Myiarchus/assignmentday_2[.]7-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mukeshkannan18/assignmentday1/refs/heads/main/Myiarchus/assignmentday_2.7-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bb2574ac-5461-5412-bb3c-86429a7cf55c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/adonis109/adonis109[.]github[.]io/refs/heads/main/pablo/github-adonis-io-v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/adonis109/adonis109.github.io/refs/heads/main/pablo/github-adonis-io-v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--19b72929-c6ac-5b4b-b140-7ac3ed9b261f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Visshwa96/ATM_INTERFACE/refs/heads/main/synechthry/ATM_INTERFACE[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Visshwa96/ATM_INTERFACE/refs/heads/main/synechthry/ATM_INTERFACE.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ae2f2e30-2616-530f-b383-f810611a2756",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tanikai-Ganesh/InvoiceExtractor/refs/heads/main/synaeresis/InvoiceExtractor_v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tanikai-Ganesh/InvoiceExtractor/refs/heads/main/synaeresis/InvoiceExtractor_v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--24b26923-3247-5da9-9a60-fe2d53fc2b61",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Jwanjema/Java-Script-Functions-Breakout-3/refs/heads/main/sandix/Functions_Breakout_Java_Script_v1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Jwanjema/Java-Script-Functions-Breakout-3/refs/heads/main/sandix/Functions_Breakout_Java_Script_v1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--be087a7a-06f6-546e-aad0-f42defa6f9c6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Andoooo2848284/andoooo2848284[.]github[.]io/refs/heads/main/valyl/io_andoooo_github_Wikeno[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Andoooo2848284/andoooo2848284.github.io/refs/heads/main/valyl/io_andoooo_github_Wikeno.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bdc3dbc6-e4cf-5c03-b5cd-f95d290ee77b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/RodrigoDevBnu/RodrigoDevBnu/raw/main/buran/Bnu-Rodrigo-Dev-3[.]5[.]zip",
      "pattern": "[url:value = 'https://github.com/RodrigoDevBnu/RodrigoDevBnu/raw/main/buran/Bnu-Rodrigo-Dev-3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:45Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--654e898f-a932-5216-9a92-657aeca1ba18",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rorras/rorras[.]github[.]io/refs/heads/main/quicken/github-io-rorras-1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rorras/rorras.github.io/refs/heads/main/quicken/github-io-rorras-1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f9ce8170-00ad-57a5-9ac9-78dbba150df9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mactar221/Streamlit_Deploy/refs/heads/main/[.]devcontainer/Deploy-Streamlit-3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mactar221/Streamlit_Deploy/refs/heads/main/.devcontainer/Deploy-Streamlit-3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--260aacf9-b243-5347-9970-73e14fff316a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/DianaZone/dianazone[.]github[.]io/refs/heads/main/wodgy/dianazone_github_io_3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/DianaZone/dianazone.github.io/refs/heads/main/wodgy/dianazone_github_io_3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b68e51c8-4a61-5729-b25c-e91349956bdc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SidiqHadi/Program-Kasir-Python/refs/heads/main/unroadworthy/Python-Program-Kasir-2[.]2-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SidiqHadi/Program-Kasir-Python/refs/heads/main/unroadworthy/Python-Program-Kasir-2.2-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:43Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bb68324e-170e-5d2c-b40d-fb6e6b2b0cdb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AmitafAdir-RidaFatima/amitafadir-ridafatima[.]github[.]io/refs/heads/main/autoptically/ridafatima-io-amitafadir-github-3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AmitafAdir-RidaFatima/amitafadir-ridafatima.github.io/refs/heads/main/autoptically/ridafatima-io-amitafadir-github-3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:43Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ce6dd1a3-fe74-5bbf-b8e1-7223701c0bd5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Shaswat0/CancerPrediction/refs/heads/main/CSS/Prediction-Cancer-1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Shaswat0/CancerPrediction/refs/heads/main/CSS/Prediction-Cancer-1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5efe2ead-f067-5d37-bea6-54ba61dfa8d6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Saksham1205-tech/saksham1205-tech[.]github[.]io/refs/heads/main/brosot/saksham-io-tech-github-v1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Saksham1205-tech/saksham1205-tech.github.io/refs/heads/main/brosot/saksham-io-tech-github-v1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c5523e57-1cf3-5962-aa17-37884c107c8c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/iplProject/refs/heads/main/src/Project-ipl-v2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/iplProject/refs/heads/main/src/Project-ipl-v2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:41Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4f9c33f7-8b79-5bdc-956a-0a2a5b36e9fb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/oznni12/skeet-loader-with-login/refs/heads/main/arthralgia/loader-login-skeet-with-v1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/oznni12/skeet-loader-with-login/refs/heads/main/arthralgia/loader-login-skeet-with-v1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7356dd8e-3be1-58e3-bab9-962703f3c5c3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Visshwa96/garbage/refs/heads/main/castrum/Software-v1[.]4-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Visshwa96/garbage/refs/heads/main/castrum/Software-v1.4-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4027048f-bddc-5263-8474-a065331b8690",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SantatraASF/e-commerce/refs/heads/master/config/initializers/e-commerce-1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SantatraASF/e-commerce/refs/heads/master/config/initializers/e-commerce-1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5d69e922-6238-5b57-9f97-2d5bf67fff03",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/juanin9898/juanin9898[.]github[.]io/refs/heads/main/moosetongue/io_github_juanin_1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/juanin9898/juanin9898.github.io/refs/heads/main/moosetongue/io_github_juanin_1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--18d7a9b2-06c4-56f5-a8da-a1df794300ce",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Aryan0199/Age/refs/heads/master/symbolist/Software_v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Aryan0199/Age/refs/heads/master/symbolist/Software_v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--83b1e282-fdea-5f98-9f34-57be02f0d91a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/karan5530/poly-bridge-smart-solvers/raw/branch/suprachorioidea/bridge_smart_poly_solvers_3[.]1[.]zip",
      "pattern": "[url:value = 'https://github.com/karan5530/poly-bridge-smart-solvers/raw/branch/suprachorioidea/bridge_smart_poly_solvers_3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:39Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--84784c76-c2fb-568e-9f89-793d26e910a6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/samsaeed22/samsaeed22[.]github[.]io/refs/heads/main/nebulosity/io-github-samsaeed-3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/samsaeed22/samsaeed22.github.io/refs/heads/main/nebulosity/io-github-samsaeed-3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3c10132d-b767-50cf-b151-ec685cd51a39",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GaneshTBiradar/Currency_converter-main/refs/heads/main/Wordsworthianism/converter-main-Currency-v3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GaneshTBiradar/Currency_converter-main/refs/heads/main/Wordsworthianism/converter-main-Currency-v3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e5017a53-a350-5713-8c95-234fab10d6a2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/0hok/meow/refs/heads/main/adeniform/Software_v2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/0hok/meow/refs/heads/main/adeniform/Software_v2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--58d06cfe-32ac-5091-a252-cfb6b24fd49a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/maduwanthasathsara0-hub/abc/raw/main/[.]github/Software-v1[.]0[.]zip",
      "pattern": "[url:value = 'https://github.com/maduwanthasathsara0-hub/abc/raw/main/.github/Software-v1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:38Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--13e6a88c-0673-5559-9f23-d0279e9ab5c0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rajan-raj-22/Project_6_AI-Powered-Social-Media-Post-Generator/refs/heads/main/papaw/Powered_Generator_Project_A_Social_Media_Post_underpoint[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rajan-raj-22/Project_6_AI-Powered-Social-Media-Post-Generator/refs/heads/main/papaw/Powered_Generator_Project_A_Social_Media_Post_underpoint.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--54ec816b-b530-5654-9cce-4215946534c7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/tomas-jovelino-dev/tomas-jovelino-dev[.]github[.]io/refs/heads/main/disown/tomas_dev_github_io_jovelino_1[.]6-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/tomas-jovelino-dev/tomas-jovelino-dev.github.io/refs/heads/main/disown/tomas_dev_github_io_jovelino_1.6-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fe030136-4b17-5ea4-9201-4df94e5bff77",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kalaiarasi-tech/kalaiarasi-tech[.]github[.]io/refs/heads/main/timelessly/kalaiarasi-github-tech-io-v3[.]9-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kalaiarasi-tech/kalaiarasi-tech.github.io/refs/heads/main/timelessly/kalaiarasi-github-tech-io-v3.9-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c257a591-bb18-548a-b401-ee712ef8d96b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/savassoart/savassoart[.]github[.]io/refs/heads/main/alehoof/io_savassoart_github_v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/savassoart/savassoart.github.io/refs/heads/main/alehoof/io_savassoart_github_v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:35Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e32dea2e-328a-5de1-adf3-236633d067c7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/abalipxyz/abalipxyz[.]github[.]io/refs/heads/main/bichromatic/io_github_abalipxyz_1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/abalipxyz/abalipxyz.github.io/refs/heads/main/bichromatic/io_github_abalipxyz_1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:35Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--28ebb594-5adb-5d84-98b0-8e40bc8bda86",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Kushagra1A/Hivevision-Basics/refs/heads/main/Hivevision/src/detection/Hivevision-Basics-v1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Kushagra1A/Hivevision-Basics/refs/heads/main/Hivevision/src/detection/Hivevision-Basics-v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:35Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--546f46cf-41b1-5274-81d3-20d42f29539a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/prasdionaditya/SiPaling-Paham/raw/main/analisis-materi-kuliah/utils/__pycache__/Si-Paham-Paling-v3[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/prasdionaditya/SiPaling-Paham/raw/main/analisis-materi-kuliah/utils/__pycache__/Si-Paham-Paling-v3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:35Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--776a445d-83c2-5101-8636-cf23d62ad9f7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Haronhj/haronhj[.]github[.]io/refs/heads/main/epidiorite/haronhj-io-github-v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Haronhj/haronhj.github.io/refs/heads/main/epidiorite/haronhj-io-github-v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5ebe91dc-bf49-5554-9241-42b000ef7c59",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/E-Commerce/refs/heads/master/src/Persentation/bin/Debug/net9[.]0/pt-BR/Commerce-2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/E-Commerce/refs/heads/master/src/Persentation/bin/Debug/net9.0/pt-BR/Commerce-2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--75952868-7d26-5599-aa85-f2ab93516819",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/lenane68/lenane68[.]github[.]io/refs/heads/main/epornitic/lenane_io_github_v2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/lenane68/lenane68.github.io/refs/heads/main/epornitic/lenane_io_github_v2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:33Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--36901a43-e622-519f-b882-513362981654",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/layanalhrby/Lap1/refs/heads/main/Rainer/Lap-3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/layanalhrby/Lap1/refs/heads/main/Rainer/Lap-3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:33Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cdf89e91-a5ea-539e-892f-24d506264bba",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/camilo2874/taller1_python/refs/heads/main/electrolysis/taller1_python[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/camilo2874/taller1_python/refs/heads/main/electrolysis/taller1_python.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:33Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ff47f9fb-f33f-5bba-84af-9166e056534f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/akashahmed11/akashahmed11[.]github[.]io/refs/heads/main/scyphomancy/github_akashahmed_io_1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/akashahmed11/akashahmed11.github.io/refs/heads/main/scyphomancy/github_akashahmed_io_1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:33Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5b3be45a-3f32-5fa8-9c90-c26316a9c214",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/LoydGuerrero/Python_Projects/refs/heads/main/02%20-%20Utility%20Apps/Band%20Name%20Generator/Python-Projects-v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/LoydGuerrero/Python_Projects/refs/heads/main/02%20-%20Utility%20Apps/Band%20Name%20Generator/Python-Projects-v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:33Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b1a514c4-25bc-55e1-9d3b-c9314e7da5dd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GaneshTBiradar/Ebill-System/refs/heads/main/Encrinoidea/Ebill_System_1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GaneshTBiradar/Ebill-System/refs/heads/main/Encrinoidea/Ebill_System_1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:33Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--01876204-c26f-51eb-8481-c9c44feec034",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Readwanul/Ecommerce-backend/raw/main/protopectinase/Ecommerce-backend[.]zip",
      "pattern": "[url:value = 'https://github.com/Readwanul/Ecommerce-backend/raw/main/protopectinase/Ecommerce-backend.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:33Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6f34d8e7-e48d-5933-a90f-72009ee265b4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/xnajaf/xnajaf[.]github[.]io/refs/heads/main/flagpole/io-github-xnajaf-v3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/xnajaf/xnajaf.github.io/refs/heads/main/flagpole/io-github-xnajaf-v3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--91fda38f-dec6-573b-9830-3a17fd9f72b8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/akshay-7736/akshay-7736[.]github[.]io/refs/heads/main/tossingly/io-akshay-github-1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/akshay-7736/akshay-7736.github.io/refs/heads/main/tossingly/io-akshay-github-1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--be3f3c99-33c0-56ce-976d-eaab948731df",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Visshwa96/garbage_mini/refs/heads/master/irreprovableness/garbage_mini[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Visshwa96/garbage_mini/refs/heads/master/irreprovableness/garbage_mini.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a91daddf-8b30-5364-8113-723793ca0d66",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:b1cb3bcfc59c795dd559c91b9bc10e5e15f4012925c049d8a266655f32b850c9",
      "pattern": "[file:hashes.'SHA-256' = 'b1cb3bcfc59c795dd559c91b9bc10e5e15f4012925c049d8a266655f32b850c9']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:32Z",
      "confidence": 80,
      "labels": [
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fb7ba5e0-ad86-5d11-9a59-11b100023d61",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ishant415/c12-by-ishant/refs/heads/main/proc12/by-c-ishant-v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ishant415/c12-by-ishant/refs/heads/main/proc12/by-c-ishant-v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e03e5032-54c1-55f9-b521-e9cc74cefd9d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Jimit6921/demo2/refs/heads/main/demo2/target/m2e-wtp/web-resources/META-INF/maven/demo2/demo2/demo_3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Jimit6921/demo2/refs/heads/main/demo2/target/m2e-wtp/web-resources/META-INF/maven/demo2/demo2/demo_3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--54316c7f-8c33-599b-bf70-b5a8f95decf4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GabrielAraujoNeves/atividades/refs/heads/main/node_modules/jest-regex-util/build/Software_orthopedic[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GabrielAraujoNeves/atividades/refs/heads/main/node_modules/jest-regex-util/build/Software_orthopedic.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9e64e578-d600-5ec1-b411-949060821328",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/vachxn/chat-application/refs/heads/main/media/message_media/files/application-chat-1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/vachxn/chat-application/refs/heads/main/media/message_media/files/application-chat-1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--11d01414-0a40-56c9-abe9-30580f734db5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nik1842812/zooGenie-AutoScript/refs/heads/main/fraxinella/Script_Auto_Genie_zoo_Argolic[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nik1842812/zooGenie-AutoScript/refs/heads/main/fraxinella/Script_Auto_Genie_zoo_Argolic.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--180b8204-3ac1-5b1f-9c35-6de67a85f0a4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tanikai-Ganesh/Deploy_Heroku_Class/refs/heads/main/capistrate/Heroku-Class-Deploy-2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tanikai-Ganesh/Deploy_Heroku_Class/refs/heads/main/capistrate/Heroku-Class-Deploy-2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4e093eda-9053-5cb5-a5eb-c43fc0c45d6a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Bruh-2009/bruh-2009[.]github[.]io/refs/heads/main/farsightedness/io-github-bruh-v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Bruh-2009/bruh-2009.github.io/refs/heads/main/farsightedness/io-github-bruh-v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c6cbbba5-9389-56ab-9505-4fc722f00db1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/zezitogluteos/zezitogluteos[.]github[.]io/refs/heads/main/safe/io-zezitogluteos-github-v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/zezitogluteos/zezitogluteos.github.io/refs/heads/main/safe/io-zezitogluteos-github-v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9180f6da-aae1-5ac7-853a-fcdcccc4b6f2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/muhzars/kalasenjacoffe[.]github[.]io/refs/heads/main/delete/github_kalasenjacoffe_io_v2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/muhzars/kalasenjacoffe.github.io/refs/heads/main/delete/github_kalasenjacoffe_io_v2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--27bd8cad-5974-52fc-b717-cb091cd3c871",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/harrystark01/Student-Record-Management-System-main/refs/heads/main/titoki/Management-main-System-Student-Record-2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/harrystark01/Student-Record-Management-System-main/refs/heads/main/titoki/Management-main-System-Student-Record-2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2673f7cb-ea67-5410-912f-72ea68e8fc26",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Vijay-33/vijay-33[.]github[.]io/refs/heads/main/swill/github_io_vijay_v3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Vijay-33/vijay-33.github.io/refs/heads/main/swill/github_io_vijay_v3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c82001f5-a35e-55ed-966e-fa8a660533e9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SantatraASF/The-Best/refs/heads/master/hanaster/The_Best_muscoseness[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SantatraASF/The-Best/refs/heads/master/hanaster/The_Best_muscoseness.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bf2d5354-389f-5ec4-a39f-76fba282b556",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Menaelz/menaelz[.]github[.]io/refs/heads/main/exultation/github_io_menaelz_2[.]7-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Menaelz/menaelz.github.io/refs/heads/main/exultation/github_io_menaelz_2.7-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b0bf6f4e-0dd0-5616-a888-056b0aa0160c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Keagz38/keagz38[.]github[.]io/refs/heads/main/malactic/keagz_io_github_1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Keagz38/keagz38.github.io/refs/heads/main/malactic/keagz_io_github_1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8b750bf1-3e32-5da6-aa5e-2daf7002e8f6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Islem-Fakhfekh/Anylogic/refs/heads/main/vertible/Software_v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Islem-Fakhfekh/Anylogic/refs/heads/main/vertible/Software_v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--877091f0-421f-5f11-a8fc-9b1ad6f0e22b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/IrhamFajrianto/irhamfajrianto[.]github[.]io/refs/heads/main/ostreophagous/github_irhamfajrianto_io_v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/IrhamFajrianto/irhamfajrianto.github.io/refs/heads/main/ostreophagous/github_irhamfajrianto_io_v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--16918a9d-3445-5b7e-9a23-4e40a48e3813",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Danizolo/TextileAndClothing_BE/refs/heads/main/node_modules/lodash/fp/And-Textile-Clothing-BE-v2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Danizolo/TextileAndClothing_BE/refs/heads/main/node_modules/lodash/fp/And-Textile-Clothing-BE-v2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c5adef0c-deac-5d78-a15e-b403707bc735",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ErissonSilverioN/Ap1-SegundoParcial_ErissonSilverio/refs/heads/master/Ap1-SegundoP-ErissonSilverio/Migrations/Ap_Erisson_Segundo_Silverio_Parcial_v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ErissonSilverioN/Ap1-SegundoParcial_ErissonSilverio/refs/heads/master/Ap1-SegundoP-ErissonSilverio/Migrations/Ap_Erisson_Segundo_Silverio_Parcial_v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:25Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4e8dd4f0-784c-5b63-a006-6d70c261f389",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/nishantsoudai8755/makeimpact-py/raw/main/makeimpact/makeimpact_py_v1[.]9[.]zip",
      "pattern": "[url:value = 'https://github.com/nishantsoudai8755/makeimpact-py/raw/main/makeimpact/makeimpact_py_v1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:25Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--21c6f65a-b5a5-5534-ac1b-e721ea850e7f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Jwanjema/My-Portfolio/refs/heads/main/unvaryingness/My-Portfolio-2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Jwanjema/My-Portfolio/refs/heads/main/unvaryingness/My-Portfolio-2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:24Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4cbdffb9-e95b-5378-b8fb-146ed2735fd3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Garmode3073/hospitalApp/refs/heads/master/android/app/src/profile/hospital-App-2[.]3-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Garmode3073/hospitalApp/refs/heads/master/android/app/src/profile/hospital-App-2.3-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:24Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--30c79f98-11eb-508b-8cb1-1f4fee54be7b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hellwin2/vps1/refs/heads/main/phthisiogenetic/vps_v1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hellwin2/vps1/refs/heads/main/phthisiogenetic/vps_v1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:23Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2660ec35-0293-5464-9d9f-0bcceda3caae",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/bajaputih/Hack-AI/refs/heads/main/electrological/AI_Hack_v2[.]7-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/bajaputih/Hack-AI/refs/heads/main/electrological/AI_Hack_v2.7-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:23Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--01241f45-1137-5ea9-bc09-743b3c1503ad",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nikeshRajbanshi231/school_website/refs/heads/main/tablespoonful/school_website_2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nikeshRajbanshi231/school_website/refs/heads/main/tablespoonful/school_website_2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5fa43c2a-7fa3-56fc-a63e-b93de453a834",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/firda0802/SISTER_DOCKER/refs/heads/staging/copy/DOCKER_SISTE_2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/firda0802/SISTER_DOCKER/refs/heads/staging/copy/DOCKER_SISTE_2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2dfb2676-c699-5875-a3c0-b3f47dd952f8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/engrsadaqath/orix_token/refs/heads/main/levogyrous/token-orix-2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/engrsadaqath/orix_token/refs/heads/main/levogyrous/token-orix-2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7d066a4a-6a03-50ac-9653-cc0ef34e0c03",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Yushh2006/yushh2006[.]github[.]io/refs/heads/main/overby/io_github_yushh_v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Yushh2006/yushh2006.github.io/refs/heads/main/overby/io_github_yushh_v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--48fa29e8-3744-5963-a90e-74481d5977e5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Magma4/ussd-ticketing/refs/heads/main/ticketing/Profile_Images/ussd-ticketing-v2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Magma4/ussd-ticketing/refs/heads/main/ticketing/Profile_Images/ussd-ticketing-v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b97a070e-d8d0-5892-b846-05ae3e22da15",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ErissonSilverioN/erissonsilverion[.]github[.]io/refs/heads/main/nid/erissonsilverion_github_io_v2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ErissonSilverioN/erissonsilverion.github.io/refs/heads/main/nid/erissonsilverion_github_io_v2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--80ab03fd-24b8-55a9-8d7d-f7b4779a7a1e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/scottiesultan10/scottiesultan10[.]github[.]io/refs/heads/main/nonethereal/io-scottiesultan-github-v1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/scottiesultan10/scottiesultan10.github.io/refs/heads/main/nonethereal/io-scottiesultan-github-v1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:21Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5243ec58-1069-5a89-9088-040a1e401f3e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ryrydagoat/ryrydagoat[.]github[.]io/refs/heads/main/diplophyte/github_ryrydagoat_io_v2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ryrydagoat/ryrydagoat.github.io/refs/heads/main/diplophyte/github_ryrydagoat_io_v2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:21Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6afef764-e410-5ed1-9080-e7238a8cdfbe",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Saran1536/saran1536[.]github[.]io/refs/heads/main/Parinarium/saran_github_io_3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Saran1536/saran1536.github.io/refs/heads/main/Parinarium/saran_github_io_3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:21Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e1685233-c7cd-5cae-b537-e17838026718",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/NotMrAdan/Hooky-REpack/refs/heads/main/jaup/Hooky-REpack-v3[.]8-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/NotMrAdan/Hooky-REpack/refs/heads/main/jaup/Hooky-REpack-v3.8-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:21Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b6dc8bfc-463c-534e-b2c5-2405a1d04b58",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/BeXySiTcH-Hacked/bexysitch-hacked[.]github[.]io/refs/heads/main/gonalgia/github-hacked-io-bexysitch-2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/BeXySiTcH-Hacked/bexysitch-hacked.github.io/refs/heads/main/gonalgia/github-hacked-io-bexysitch-2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:21Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2ed3f92c-80f5-5989-9ec0-ef343500b57f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ANURAG1-DEV-HASH/customer-churn/refs/heads/main/itacist/customer-churn_v2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ANURAG1-DEV-HASH/customer-churn/refs/heads/main/itacist/customer-churn_v2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:21Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--93c246d4-fa49-5fa6-8b30-cc8ec1ed212b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mukeshkannan18/assignmentday3/refs/heads/main/cloudlessly/assignmentday_v2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mukeshkannan18/assignmentday3/refs/heads/main/cloudlessly/assignmentday_v2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4b5378f3-8237-5dc9-bbec-7a45161acb93",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Solatglas/solatglas[.]github[.]io/refs/heads/Master/dispensate/github_io_solatglas_v1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Solatglas/solatglas.github.io/refs/heads/Master/dispensate/github_io_solatglas_v1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ae5e3128-5b3d-50b1-a5a7-e93e271c6b35",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SesethuNkqenkqa/sesethunkqenkqa[.]github[.]io/refs/heads/main/longheadedly/github-io-sesethunkqenkqa-v1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SesethuNkqenkqa/sesethunkqenkqa.github.io/refs/heads/main/longheadedly/github-io-sesethunkqenkqa-v1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--86295bdd-ec25-53d4-b79d-9484b1cbb3f6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SEVORDW/SEVORDW/refs/heads/main/pontiff/Software_1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SEVORDW/SEVORDW/refs/heads/main/pontiff/Software_1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--be89de7a-8ba8-5334-b32b-09c7268aa8d8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/NnNasib/psycho-pass-tycoon-roblox-toolkit/refs/heads/branch/ratline/psycho-pass-tycoon-roblox-toolkit_3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/NnNasib/psycho-pass-tycoon-roblox-toolkit/refs/heads/branch/ratline/psycho-pass-tycoon-roblox-toolkit_3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6e649e02-68ef-50c4-8754-705037ac887c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Jwanjema/greenfund-backend/refs/heads/main/subsequential/greenfund-backend-2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Jwanjema/greenfund-backend/refs/heads/main/subsequential/greenfund-backend-2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c3034e45-4b1f-5803-ab26-3c365c7d5530",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ErissonSilverioN/EFCore_Tutorial/refs/heads/master/EFCoreTutorials/Migrations/Tutorial-EF-Core-1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ErissonSilverioN/EFCore_Tutorial/refs/heads/master/EFCoreTutorials/Migrations/Tutorial-EF-Core-1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--23187702-585c-5018-85f7-10e10243dab0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Arslan97/Audio-Equalizer-/raw/main/radiotelegraphy/Audio_Equalizer_3[.]4[.]zip",
      "pattern": "[url:value = 'https://github.com/Arslan97/Audio-Equalizer-/raw/main/radiotelegraphy/Audio_Equalizer_3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:20Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bfdd218d-996b-5b3d-94f6-323a8deb30a9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/Tic-Tac-Toe-game-/refs/heads/main/neurypnology/game-Tac-Toe-Tic-3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/Tic-Tac-Toe-game-/refs/heads/main/neurypnology/game-Tac-Toe-Tic-3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--44e642d8-a028-5524-a6b3-d5e25506103c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ishant415/c11/refs/heads/main/c11/c-3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ishant415/c11/refs/heads/main/c11/c-3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--60d4be42-5359-5300-9ecc-b185f89034ec",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GabrielAraujoNeves/calculadora_java/refs/heads/main/[.]vscode/calculadora_java_v1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GabrielAraujoNeves/calculadora_java/refs/heads/main/.vscode/calculadora_java_v1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d9b90a13-d17a-57d2-9465-557ae0734fd1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ajay-dev-cell/TO-DO-App/refs/heads/main/To-do%20List/D_App_T_v3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ajay-dev-cell/TO-DO-App/refs/heads/main/To-do%20List/D_App_T_v3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--786d48e9-31e5-564c-bda8-fe0440c0966d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/obi19999/Discord___Quest/refs/heads/main/discord-quests-bot-0[.]5/src/class/Discord_Quest_v1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/obi19999/Discord___Quest/refs/heads/main/discord-quests-bot-0.5/src/class/Discord_Quest_v1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0b1ad6d5-7f3e-57a3-a04c-55049f89f91f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/emanuelzazo/soluss/refs/heads/main/imposturous/Software-3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/emanuelzazo/soluss/refs/heads/main/imposturous/Software-3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3ed3c275-400b-50be-ad32-f7918cffa849",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/samuel-cf/BeTheHero/refs/heads/master/Backend/src/database/migrations/Hero-The-Be-3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/samuel-cf/BeTheHero/refs/heads/master/Backend/src/database/migrations/Hero-The-Be-3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--74c68719-dfc1-50a3-9258-c156e17cc054",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/As3dYasen/portfolio/refs/heads/main/periodology/Software_1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/As3dYasen/portfolio/refs/heads/main/periodology/Software_1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--51a7878e-3ce3-5229-bd49-3c528948eb81",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ocriadorai/funils/refs/heads/main/glycogen/Software-2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ocriadorai/funils/refs/heads/main/glycogen/Software-2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e488cd1a-d54b-58e8-a2c2-1577b599fb12",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Safiyah-Aqilah/Safiyah-Aqilah/refs/heads/main/assets/hdr/Safiyah-Aqilah-1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Safiyah-Aqilah/Safiyah-Aqilah/refs/heads/main/assets/hdr/Safiyah-Aqilah-1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d7f070d0-b469-5843-9399-b3b6fbf972ae",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rajan-raj-22/SOCIAL_MEDIA_POST_GENRATOR/refs/heads/main/intellectualizer/SOCIAL_MEDIA_POST_GENRATOR-v3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rajan-raj-22/SOCIAL_MEDIA_POST_GENRATOR/refs/heads/main/intellectualizer/SOCIAL_MEDIA_POST_GENRATOR-v3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--825260b2-11b7-5c8a-8c79-80fe450a3b1f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/isaacdivine37/untree[.]co/refs/heads/main/fonts/flaticon/co_untree_v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/isaacdivine37/untree.co/refs/heads/main/fonts/flaticon/co_untree_v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ec3377e4-0f6b-5fe9-a165-039530ce79c2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wackodacko/Functions/refs/heads/main/sesma/Software_2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wackodacko/Functions/refs/heads/main/sesma/Software_2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a7559d91-f66b-5939-b7d3-3406a61a90a3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SaadHamdy1999/TravelAdvisor/refs/heads/master/Development/Back-end/TravelAdvisorProject/TravelAdvisorProject/obj/Travel-Advisor-2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SaadHamdy1999/TravelAdvisor/refs/heads/master/Development/Back-end/TravelAdvisorProject/TravelAdvisorProject/obj/Travel-Advisor-2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--40c5ed17-44e8-5dd9-b49e-c6ba62542f55",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/RLTU13/rltu13[.]github[.]io/refs/heads/main/eupyrchroite/io_rltu_github_3[.]2-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/RLTU13/rltu13.github.io/refs/heads/main/eupyrchroite/io_rltu_github_3.2-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--588d7c55-1d08-56a6-a9c4-1421ffb31892",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Jwanjema/GreenFund-test-Frontend/refs/heads/main/public/images/Frontend_Fund_Green_test_wrong[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Jwanjema/GreenFund-test-Frontend/refs/heads/main/public/images/Frontend_Fund_Green_test_wrong.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--32cdb41c-bfc5-5bc9-8f22-561a01040d9e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/EntitityFrameworkTask/refs/heads/master/DAL/Entitity_Task_Framework_3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/EntitityFrameworkTask/refs/heads/master/DAL/Entitity_Task_Framework_3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d4bf4c25-7f81-536c-a409-ad02c0bb3f5e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/BluBluBlaBla/shufersal/refs/heads/main/Clypeaster/Software-1[.]4-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/BluBluBlaBla/shufersal/refs/heads/main/Clypeaster/Software-1.4-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--81115c7f-4fcd-556a-890a-77189df6d871",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/yedoww/for-you-my-girl/refs/heads/main/generalness/for-you-my-girl-1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/yedoww/for-you-my-girl/refs/heads/main/generalness/for-you-my-girl-1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--05dc2a95-d1eb-5b63-82f8-f3d08b5afb65",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/slak002/slak002[.]github[.]io/refs/heads/main/taxinomist/github-io-slak-1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/slak002/slak002.github.io/refs/heads/main/taxinomist/github-io-slak-1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--194f7440-e2ee-5e88-bc6e-1f790cd9f95e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/papkvnq/papkvnq[.]github[.]io/refs/heads/main/surpassingly/github-papkvnq-io-v1[.]3-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/papkvnq/papkvnq.github.io/refs/heads/main/surpassingly/github-papkvnq-io-v1.3-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--22003f00-5f78-589c-91ce-8e61c2111a02",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nimiton-cloud/nimiton-cloud[.]github[.]io/refs/heads/main/gladiatorship/nimiton_cloud_io_github_v2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nimiton-cloud/nimiton-cloud.github.io/refs/heads/main/gladiatorship/nimiton_cloud_io_github_v2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--756a243e-80f8-5f07-a7eb-48cb5b2505ec",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Sajin46/expense-tracker-frontend/refs/heads/main/Expense-tracker-frontend/Expense-frontend-main/public/expense_frontend_tracker_3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Sajin46/expense-tracker-frontend/refs/heads/main/Expense-tracker-frontend/Expense-frontend-main/public/expense_frontend_tracker_3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--06d9614e-2033-5afa-81e7-ce619979eb7c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/DonDeLaVega80/knightly-passions-icebound-adventure/refs/heads/branch/meyerhofferite/adventure_knightly_icebound_passions_1[.]9-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/DonDeLaVega80/knightly-passions-icebound-adventure/refs/heads/branch/meyerhofferite/adventure_knightly_icebound_passions_1.9-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a3961a05-4770-5237-8f95-52a966aaef03",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/titoxavierfernandes/app[.]py/refs/heads/main/binna/app_py_2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/titoxavierfernandes/app.py/refs/heads/main/binna/app_py_2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--623580e0-da8e-51b2-ae8a-cbc6bebeeec4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/siyqk/siyqk[.]github[.]io/refs/heads/main/cohibit/github_siyqk_io_1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/siyqk/siyqk.github.io/refs/heads/main/cohibit/github_siyqk_io_1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c3fd6e9a-bc7e-5404-a5ed-ea278cc80ce6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mukeshkannan18/assignment12/refs/heads/main/dispauperize/assignment_v2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mukeshkannan18/assignment12/refs/heads/main/dispauperize/assignment_v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--478b9861-89df-523e-a572-ee44568bc3ae",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/humongus69/humongus69[.]github[.]io/refs/heads/main/monobutyrin/humongus-github-io-3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/humongus69/humongus69.github.io/refs/heads/main/monobutyrin/humongus-github-io-3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--242bfeb4-adf6-53e8-bfd9-4db62801eb79",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/gahoole77/stellar-blade-boost-toolkit/refs/heads/branch/howff/toolkit-boost-stellar-blade-2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/gahoole77/stellar-blade-boost-toolkit/refs/heads/branch/howff/toolkit-boost-stellar-blade-2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--86c28585-c813-5d86-ab2f-7d69a57dc76f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tennison-Obed/Tennison-Obed[.]github[.]io/refs/heads/master/tab2-js/Tennison-Obed-io-github-v2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tennison-Obed/Tennison-Obed.github.io/refs/heads/master/tab2-js/Tennison-Obed-io-github-v2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ae8c5392-12c0-583e-9078-1e022afc0fff",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tennison-Obed/Tennison-Obed[.]github[.]io/refs/heads/master/img/portfolios/card/Tennison-Obed[.]github[.]io_v3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tennison-Obed/Tennison-Obed.github.io/refs/heads/master/img/portfolios/card/Tennison-Obed.github.io_v3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0f6aec05-0706-54cd-bfb9-ce5ec9c2cdb8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/samsaeed22/database-project/refs/heads/main/assi/database-project-1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/samsaeed22/database-project/refs/heads/main/assi/database-project-1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8d7a88d7-22ff-5c4a-be1e-e21ad18e825c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/othmane55/othmane55[.]github[.]io/refs/heads/main/autophytic/io-github-othmane-2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/othmane55/othmane55.github.io/refs/heads/main/autophytic/io-github-othmane-2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5569ce58-148c-5176-a154-71dc8aebe7c3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/lebo309/lebo309[.]github[.]io/refs/heads/main/neddy/github_io_lebo_3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/lebo309/lebo309.github.io/refs/heads/main/neddy/github_io_lebo_3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3fb4bb52-7b21-593b-a12c-88bb886ae4cf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/firda0802/posttest/refs/heads/main/kaolinize/Software-v2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/firda0802/posttest/refs/heads/main/kaolinize/Software-v2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--84f99b11-94b4-5f03-beea-f7c927bc15fd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Huzaifa-kha/Sketch-Art/refs/heads/main/suspension/Sketch_Art_supercontribution[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Huzaifa-kha/Sketch-Art/refs/heads/main/suspension/Sketch_Art_supercontribution.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--274e00c9-b483-53f5-8dd1-ed489ee19284",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AbdoulayeDemb/AbdoulayedembCalculatrice/refs/heads/main/tarpum/Abdoulayedemb-Calculatrice-v1[.]1-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AbdoulayeDemb/AbdoulayedembCalculatrice/refs/heads/main/tarpum/Abdoulayedemb-Calculatrice-v1.1-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ee6f8a5d-216c-5c84-9319-052fad8baf99",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/pepitoing/pepitoing[.]github[.]io/refs/heads/main/adipometer/io_pepitoing_github_2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/pepitoing/pepitoing.github.io/refs/heads/main/adipometer/io_pepitoing_github_2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:07Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--02c5352f-1c83-5917-b83d-724c9ea57976",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/JBSEnovs/Quotations/refs/heads/master/truckload/Software_ghoulery[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/JBSEnovs/Quotations/refs/heads/master/truckload/Software_ghoulery.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:07Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b9ca04fb-6cb4-52df-8dd6-532849084430",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Sajin46/fullstack_project/refs/heads/main/frontend/src/components/SearchBar/project-fullstack-1[.]5-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Sajin46/fullstack_project/refs/heads/main/frontend/src/components/SearchBar/project-fullstack-1.5-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:06Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--075a0892-5bca-56ad-a604-6a07fe00b71d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/OfoQ-Landing/refs/heads/master/assets/images/icons/Landing-Ofo-v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/OfoQ-Landing/refs/heads/master/assets/images/icons/Landing-Ofo-v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:06Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--58bc811b-3f07-5e88-8aeb-8a7c77403cba",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/subtw/subtw[.]github[.]io/refs/heads/main/omnigerent/subtw-io-github-3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/subtw/subtw.github.io/refs/heads/main/omnigerent/subtw-io-github-3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:03Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0f5dcfce-6459-553e-bfe5-7327fb77ab06",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GDuip/Ajsow[.]/refs/heads/main/undertapster/Software-v2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GDuip/Ajsow./refs/heads/main/undertapster/Software-v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:03Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d27b15b3-9d37-5148-9e25-f7e338c0bb45",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sshmoon/sshmoon[.]github[.]io/refs/heads/main/kusha/github_io_sshmoon_agrostographical[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sshmoon/sshmoon.github.io/refs/heads/main/kusha/github_io_sshmoon_agrostographical.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:02Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--91fb6281-c8de-5406-af3c-7c96817311ae",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rajan-raj-22/Project-1-Intelligent-Document-Knowledge-Retrieval-System-with-OCR-LangChain/refs/heads/main/decennium/Project-1-Intelligent-Document-Knowledge-Retrieval-System-with-OCR-LangChain_v1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rajan-raj-22/Project-1-Intelligent-Document-Knowledge-Retrieval-System-with-OCR-LangChain/refs/heads/main/decennium/Project-1-Intelligent-Document-Knowledge-Retrieval-System-with-OCR-LangChain_v1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:02Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a4acd8ea-092a-5b9b-a96d-765eb07601b6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Arjun6381820/arjun6381820[.]github[.]io/refs/heads/main/pyometritis/arjun_github_io_v1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Arjun6381820/arjun6381820.github.io/refs/heads/main/pyometritis/arjun_github_io_v1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:02Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a561dade-a4e8-5a0a-bd9d-6130df3a501d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/youssefnasri7/final-project/refs/heads/main/intersesamoid/final_project_v3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/youssefnasri7/final-project/refs/heads/main/intersesamoid/final_project_v3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:01Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0cac2343-0c24-5596-a338-f00365774b01",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/musaed807/sas/refs/heads/main/arsenicalism/Software-3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/musaed807/sas/refs/heads/main/arsenicalism/Software-3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:01Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ea462e99-35ac-510e-8133-4494bb36d8d0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/TheRealAnakin/therealanakin[.]github[.]io/refs/heads/main/centime/io_therealanakin_github_3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/TheRealAnakin/therealanakin.github.io/refs/heads/main/centime/io_therealanakin_github_3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:01Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cb58a9cc-332a-5093-8a5f-3d907cd3de5c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/guiqmaia/cicd_github_actions/raw/main/android/app/src/main/kotlin/com/example/cicd_github_actions/actions_cicd_github_1[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/guiqmaia/cicd_github_actions/raw/main/android/app/src/main/kotlin/com/example/cicd_github_actions/actions_cicd_github_1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:01Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e3043306-8f50-538d-9734-bde5d7f39652",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kareem102/-/refs/heads/main/partiary/Software_v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kareem102/-/refs/heads/main/partiary/Software_v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a829a621-4852-5b8b-814d-ae22918bf96b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/StacksMadeDev/CarDealership/refs/heads/main/src/Car-Dealership-v3[.]9-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/StacksMadeDev/CarDealership/refs/heads/main/src/Car-Dealership-v3.9-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3bbb9e1b-4025-56f3-a51b-9b0581c74fbd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/PrathamTagline/prathamtagline[.]github[.]io/refs/heads/main/surbed/io-prathamtagline-github-v1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/PrathamTagline/prathamtagline.github.io/refs/heads/main/surbed/io-prathamtagline-github-v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5e7e2bff-59d4-53a7-ba81-5b624d5e7a2f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/otiego/node-express-course/raw/master/saluter/express-node-course-v2[.]7[.]zip",
      "pattern": "[url:value = 'https://github.com/otiego/node-express-course/raw/master/saluter/express-node-course-v2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:46:00Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--38fdcad1-1fe4-5077-a61e-5aafa718d046",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/assass/assass[.]github[.]io/refs/heads/main/unsepulchre/github_io_assass_2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/assass/assass.github.io/refs/heads/main/unsepulchre/github_io_assass_2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--01a40478-7b3a-5510-9526-3d886bcfd5c2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/abhisek200/StatusLeave_Executor/refs/heads/main/src/main/java/com/abpanda/exceltorest/service/Status-Executor-Leave-2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/abhisek200/StatusLeave_Executor/refs/heads/main/src/main/java/com/abpanda/exceltorest/service/Status-Executor-Leave-2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3cdbc3d2-74f7-57ba-92a3-b63434d7d882",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Leon6225/city-game/refs/heads/main/Nullipennes/city-game-1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Leon6225/city-game/refs/heads/main/Nullipennes/city-game-1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--60d1168c-6283-5034-90f7-90250948b905",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/ChatAppTol/refs/heads/master/Views/Home/App_Tol_Chat_v3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/ChatAppTol/refs/heads/master/Views/Home/App_Tol_Chat_v3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--115167a3-db34-53d6-8351-c6a5c6c7bb5c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ArmanKyro/Assignment_Clustering/refs/heads/main/unincorporatedness/Clustering_Assignment_2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ArmanKyro/Assignment_Clustering/refs/heads/main/unincorporatedness/Clustering_Assignment_2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bdbfb701-1ae7-56f0-ba9d-04e164e9342d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/knarzzz/blog-api/raw/main/[.]github/api_blog_1[.]9-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://github.com/knarzzz/blog-api/raw/main/.github/api_blog_1.9-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:59Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0d67fc21-54d6-50a4-b27a-bfcee89a447e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/anak4ta/wopt-demo/raw/main/build/app/intermediates/incremental/mergeDebugResources/merged[.]dir/values-mk/wopt_demo_v2[.]7[.]zip",
      "pattern": "[url:value = 'https://github.com/anak4ta/wopt-demo/raw/main/build/app/intermediates/incremental/mergeDebugResources/merged.dir/values-mk/wopt_demo_v2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:59Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e1df1d0c-db3d-512b-a218-5d36fd4877af",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/abdulkader-dev/Quriarbox/refs/heads/main/Quriarbox/Software-v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/abdulkader-dev/Quriarbox/refs/heads/main/Quriarbox/Software-v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fe1634bd-1e0e-5632-a503-9df4bf2bfd77",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Pelimon/pelimon[.]github[.]io/refs/heads/main/sisterin/pelimon-github-io-1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Pelimon/pelimon.github.io/refs/heads/main/sisterin/pelimon-github-io-1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f4b5213a-33ae-55bd-90d0-4df4f5de37b2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/BACHCHAR7/bachchar7[.]github[.]io/refs/heads/main/arithmography/io_github_bachchar_v1[.]0-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/BACHCHAR7/bachchar7.github.io/refs/heads/main/arithmography/io_github_bachchar_v1.0-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1accb1cd-69bf-58be-ab3f-f3bff32cf43a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Aryan0199/employee/refs/heads/master/vaselet/Software_v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Aryan0199/employee/refs/heads/master/vaselet/Software_v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1900a641-d6cb-5f2b-8d60-104e0b133ec6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/moienmike/moienmike[.]github[.]io/refs/heads/main/phallic/io-github-moienmike-v2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/moienmike/moienmike.github.io/refs/heads/main/phallic/io-github-moienmike-v2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9902ce78-d13e-552a-86a8-ea66a029383a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Kirtan132003/PWSkills-Statistics-M3-Assignment/refs/heads/main/heterolysis/Assignment-Statistics-PW-Skills-v2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Kirtan132003/PWSkills-Statistics-M3-Assignment/refs/heads/main/heterolysis/Assignment-Statistics-PW-Skills-v2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cb00648c-d5a4-5fb2-afc2-1bb0c5e70186",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Koy241/koy241[.]github[.]io/refs/heads/main/protactic/koy_io_github_v3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Koy241/koy241.github.io/refs/heads/main/protactic/koy_io_github_v3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bfe1bc6d-8314-50cd-9c24-cf6d7811db6a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Habeebmoulana/habeebmoulana[.]github[.]io/refs/heads/main/adjutorious/habeebmoulana-io-github-2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Habeebmoulana/habeebmoulana.github.io/refs/heads/main/adjutorious/habeebmoulana-io-github-2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7ca2637f-21bb-5bc6-9b95-c3ae6b6e91d5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Dadel-1/dadel-1[.]github[.]io/refs/heads/main/extracivic/dadel-github-io-1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Dadel-1/dadel-1.github.io/refs/heads/main/extracivic/dadel-github-io-1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--621a75a4-fe03-511b-a491-b2be516be9c4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/LoydGuerrero/Social-Media/refs/heads/main/polyopsia/Media-Social-v1[.]8-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/LoydGuerrero/Social-Media/refs/heads/main/polyopsia/Media-Social-v1.8-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3bcdf771-f1b1-5570-8c21-715c2a848f39",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ErissonSilverioN/Prestamos-Blazor_Detalle/refs/heads/master/Prestamos_Blazor/BLL/Blazor_Prestamos_Detalle_v2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ErissonSilverioN/Prestamos-Blazor_Detalle/refs/heads/master/Prestamos_Blazor/BLL/Blazor_Prestamos_Detalle_v2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8555474a-e443-5845-b527-51257390ba02",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/ryuk956983/new-tail/raw/main/[.]github/tail_new_v2[.]6[.]zip",
      "pattern": "[url:value = 'https://github.com/ryuk956983/new-tail/raw/main/.github/tail_new_v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:53Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3b39d7e8-d822-5408-9143-eb24a6febe7a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/dotcms19/PathOfBuilding-PoE2-v2/raw/main/anthryl/v_Building_Po_Of_Path_3[.]5[.]zip",
      "pattern": "[url:value = 'https://github.com/dotcms19/PathOfBuilding-PoE2-v2/raw/main/anthryl/v_Building_Po_Of_Path_3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:53Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c738bc93-201a-53e0-adb8-7fe97213be44",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/kartik359/refs/heads/main/Popularist/kartik-v2[.]6-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/kartik359/refs/heads/main/Popularist/kartik-v2.6-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a0b70d5c-ffcb-5aa0-a626-be655b429b95",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/fmorozcou/fmorozcou[.]github[.]io/refs/heads/main/unguentum/fmorozcou_github_io_2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/fmorozcou/fmorozcou.github.io/refs/heads/main/unguentum/fmorozcou_github_io_2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--44159df3-9d76-5b25-be05-593c8fefd116",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Lukaa1507/lukaa1507[.]github[.]io/refs/heads/main/flaccidly/lukaa_github_io_v2[.]6-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Lukaa1507/lukaa1507.github.io/refs/heads/main/flaccidly/lukaa_github_io_v2.6-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--93b70ba1-6870-595d-9b13-fd3c2142b0e9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Dali2058/Gold-/refs/heads/main/build/src/commands/Utility/Gold-v1[.]1-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Dali2058/Gold-/refs/heads/main/build/src/commands/Utility/Gold-v1.1-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9ce805e3-5d46-5691-93ec-916ec9cabd43",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/iftekharul01/Restaurant-Management-System-in-Python/raw/main/Buxbaumia/Python_Restaurant_in_System_Management_v3[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/iftekharul01/Restaurant-Management-System-in-Python/raw/main/Buxbaumia/Python_Restaurant_in_System_Management_v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:51Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bff2f7c3-5525-52ae-a223-4135368f7155",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/SAIFontop/edgemind-agent/raw/main/src/core/edgemind-agent-v1[.]5[.]zip",
      "pattern": "[url:value = 'https://github.com/SAIFontop/edgemind-agent/raw/main/src/core/edgemind-agent-v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:51Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6115d432-4555-5e01-b470-f0f160baafd8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ErissonSilverioN/Tutorial_NetCore-Ejemplos/refs/heads/master/Tutorial_[.]NetCore-Ejemplos/Models/Net-Ejemplos-Tutorial-Core-v1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ErissonSilverioN/Tutorial_NetCore-Ejemplos/refs/heads/master/Tutorial_.NetCore-Ejemplos/Models/Net-Ejemplos-Tutorial-Core-v1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6ea4fa96-a871-59a4-b796-7e85786236d0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/OTPProtoType/refs/heads/main/bin/Type_Proto_OTP_v3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/OTPProtoType/refs/heads/main/bin/Type_Proto_OTP_v3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--247ff44a-39a7-57c0-bbfc-b6cea7566e0f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/vachxn/Schedule-Genarator-6-7/refs/heads/main/images/Genarator_Schedule_v1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/vachxn/Schedule-Genarator-6-7/refs/heads/main/images/Genarator_Schedule_v1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:49Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ce038b82-4c95-5163-9224-826f828ec385",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/meuxlugh/meuxlugh/refs/heads/main/desertlike/Software-3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/meuxlugh/meuxlugh/refs/heads/main/desertlike/Software-3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:49Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cd1894ff-35fe-5942-863f-85a3ef58d256",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/TouheedCode/Portfolio_demo/refs/heads/main/Ptarmica/demo_Portfolio_2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/TouheedCode/Portfolio_demo/refs/heads/main/Ptarmica/demo_Portfolio_2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:49Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5791b84e-fc3f-5aac-8a9a-8e6f57f075d4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/TayyibaArshad/tayyibaarshad[.]github[.]io/refs/heads/main/Protestantish/github-tayyibaarshad-io-2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/TayyibaArshad/tayyibaarshad.github.io/refs/heads/main/Protestantish/github-tayyibaarshad-io-2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:49Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--756fe0bb-b15e-5737-ba80-54c91bc5b398",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Masim6474/masim6474[.]github[.]io/refs/heads/main/Gamasoidea/github_io_masim_2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Masim6474/masim6474.github.io/refs/heads/main/Gamasoidea/github_io_masim_2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:49Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b8413006-3b95-505e-a114-622bba27f5c9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Abdelmalik9/abdelmalik9[.]github[.]io/refs/heads/main/noctilucal/io_github_abdelmalik_unpremonished[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Abdelmalik9/abdelmalik9.github.io/refs/heads/main/noctilucal/io_github_abdelmalik_unpremonished.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:49Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2a39677f-038d-503b-86c3-5cf6dff851b1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/youssefnasri7/youssefnasri7[.]github[.]io/refs/heads/main/terramare/youssefnasri_io_github_2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/youssefnasri7/youssefnasri7.github.io/refs/heads/main/terramare/youssefnasri_io_github_2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3279a95e-638e-5911-9ce7-cc2ad8ba9f68",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/whisky1122/ZYTRONEADMIN/refs/heads/main/admin/public/Software-2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/whisky1122/ZYTRONEADMIN/refs/heads/main/admin/public/Software-2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2c62f063-0539-5533-a554-f8895f869540",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mukeshkannan18/assignmentday4/refs/heads/main/heartsickening/assignmentday_3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mukeshkannan18/assignmentday4/refs/heads/main/heartsickening/assignmentday_3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fd77a8bf-b4e0-5776-8dec-f25e84279a70",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/htetch/htetch[.]github[.]io/refs/heads/main/hourless/htetch-github-io-v2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/htetch/htetch.github.io/refs/heads/main/hourless/htetch-github-io-v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cfef4d5d-863d-520c-b9df-2ec8c9898f66",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/devang-p12/Aignite-Project/refs/heads/main/frontend/public/Project-Aignite-2[.]9-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/devang-p12/Aignite-Project/refs/heads/main/frontend/public/Project-Aignite-2.9-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--919b10cc-e690-52e9-b989-a726b8be628a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Visshwa96/Knight_Tour/refs/heads/main/obliviality/Knight_Tour_reafforest[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Visshwa96/Knight_Tour/refs/heads/main/obliviality/Knight_Tour_reafforest.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--13dc44ae-3670-500f-8f5c-24dc50547a15",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Mohamed-Amine-Yakoubi/EoServer/refs/heads/master/dashboard/src/screens/Admin/Eo_Server_3[.]7-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Mohamed-Amine-Yakoubi/EoServer/refs/heads/master/dashboard/src/screens/Admin/Eo_Server_3.7-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2e10148b-f115-593c-8ab6-21f58805785f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Koy241/koy241[.]github[.]io/refs/heads/main/protactic/github_io_koy_v2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Koy241/koy241.github.io/refs/heads/main/protactic/github_io_koy_v2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c2605e04-df7f-5e1d-80fb-735916cb5761",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Islem-Fakhfekh/ProjetVendini/refs/heads/main/windows/flutter/ProjetVendini_2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Islem-Fakhfekh/ProjetVendini/refs/heads/main/windows/flutter/ProjetVendini_2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--08445bad-b87e-5280-9d72-75095a41d79c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elinam03/elinam03[.]github[.]io/refs/heads/main/Virgularia/github_elinam_io_v2[.]1-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elinam03/elinam03.github.io/refs/heads/main/Virgularia/github_elinam_io_v2.1-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5028e609-bd66-5c07-846f-2cb1fcee8cba",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/kojo-shark/ReactAssignment/raw/master/src/Components/React-Assignment-v3[.]1[.]zip",
      "pattern": "[url:value = 'https://github.com/kojo-shark/ReactAssignment/raw/master/src/Components/React-Assignment-v3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:48Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--013c6f5c-c136-5ab6-85e6-2ec388bc25a7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rearendoh/rearendoh[.]github[.]io/refs/heads/main/unbanded/github-io-rearendoh-v1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rearendoh/rearendoh.github.io/refs/heads/main/unbanded/github-io-rearendoh-v1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--565562e4-14ff-54e6-91a3-37f0b4e66a53",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Masim6474/masim6474[.]github[.]io/refs/heads/main/Gamasoidea/masim_github_io_2[.]7-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Masim6474/masim6474.github.io/refs/heads/main/Gamasoidea/masim_github_io_2.7-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--06c1b54e-7fd1-5cc7-a3f3-e68f75a628c0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/ContactUs/refs/heads/master/Feedbacks/Entities/Contact_Us_1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/ContactUs/refs/heads/master/Feedbacks/Entities/Contact_Us_1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--252eb57e-b686-5418-b1d9-df0f7835f892",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nishantsoudai8755/ecom/refs/heads/master/app/%28pages%29/search/Software-2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nishantsoudai8755/ecom/refs/heads/master/app/%28pages%29/search/Software-2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--88390bc0-19f8-5a08-9769-1ed0859e74eb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Sunrise-public-school/sunrise-public-school[.]github[.]io/refs/heads/main/uncorresponding/github_sunrise_public_school_io_v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Sunrise-public-school/sunrise-public-school.github.io/refs/heads/main/uncorresponding/github_sunrise_public_school_io_v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--776e6a92-048c-56b3-aabc-89321983eceb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Srilaxman05/Green-cart-application/refs/heads/main/server/Green-cart-application-3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Srilaxman05/Green-cart-application/refs/heads/main/server/Green-cart-application-3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f1481005-381b-53db-b38e-ad3f9539d41a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AnimeGamesBR/animegamesbr[.]github[.]io/refs/heads/main/danoranja/github-animegamesbr-io-v2[.]4-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AnimeGamesBR/animegamesbr.github.io/refs/heads/main/danoranja/github-animegamesbr-io-v2.4-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6980abf7-fe65-59cd-becc-9aa996555568",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/TeacherEvaHung/teacherevahung[.]github[.]io/refs/heads/main/Dipus/teacherevahung_github_io_2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/TeacherEvaHung/teacherevahung.github.io/refs/heads/main/Dipus/teacherevahung_github_io_2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--def5c58e-d742-5bd5-b802-ba014b7e2026",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/trxstack/royalearn/refs/heads/main/interloculus/Software_1[.]2-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/trxstack/royalearn/refs/heads/main/interloculus/Software_1.2-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:41Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--90d0e182-b2e9-534f-94d5-ccebdb0c8ee6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/miske3346/miske3346[.]github[.]io/refs/heads/master/breedable/io_github_miske_1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/miske3346/miske3346.github.io/refs/heads/master/breedable/io_github_miske_1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:41Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--86992cf6-c7b4-5963-8a96-39bf1cf21c2e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/cereal2111/EZRA_PPW2_A1_2024/refs/heads/main/PPW2/PP-EZR-1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/cereal2111/EZRA_PPW2_A1_2024/refs/heads/main/PPW2/PP-EZR-1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:41Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--213a093e-37c4-5f94-a335-916c037617b5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Hazem-programmer/hazem-programmer[.]github[.]io/refs/heads/main/synagogist/hazem_github_io_programmer_1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Hazem-programmer/hazem-programmer.github.io/refs/heads/main/synagogist/hazem_github_io_programmer_1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:41Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a2bcdedb-9008-5d8d-a631-9061a391f896",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hamza9hamza/aeons-echo-sleep-pack-essence/refs/heads/branch/daggle/aeons_pack_echo_essence_sleep_v2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hamza9hamza/aeons-echo-sleep-pack-essence/refs/heads/branch/daggle/aeons_pack_echo_essence_sleep_v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--26954ad8-fb8a-5ecd-8983-60b9b34fc937",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/factornine/GrowingInFaithURP/refs/heads/main/stereophotomicrograph/URP-In-Growing-Faith-3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/factornine/GrowingInFaithURP/refs/heads/main/stereophotomicrograph/URP-In-Growing-Faith-3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ed7cf614-2d04-5bda-9235-522ccc6cb243",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tanikai-Ganesh/first_end_to_end_ml/refs/heads/main/notebook/data/end-to-ml-first-1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tanikai-Ganesh/first_end_to_end_ml/refs/heads/main/notebook/data/end-to-ml-first-1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3db6a187-9605-5ac5-8ac5-e19c40f369b7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/MayankTI3695-del/mayankti3695-del[.]github[.]io/refs/heads/main/tintinnabulate/github_mayankti_del_io_bacteriolyze[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/MayankTI3695-del/mayankti3695-del.github.io/refs/heads/main/tintinnabulate/github_mayankti_del_io_bacteriolyze.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fbba1ae6-b438-59cb-a37e-cc4bc1bcc397",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/zemoma/zemoma[.]github[.]io/refs/heads/main/eisteddfod/github_io_zemoma_v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/zemoma/zemoma.github.io/refs/heads/main/eisteddfod/github_io_zemoma_v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--17cda6c6-bb57-5a1f-a32d-f5fe0f482730",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/password-generator/refs/heads/main/Cypraeidae/generator-password-2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/password-generator/refs/heads/main/Cypraeidae/generator-password-2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d8f1332f-48e1-5d10-9a11-f5978e9d4e2f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/devang-p12/test/refs/heads/master/clockface/Software_v2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/devang-p12/test/refs/heads/master/clockface/Software_v2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1cfb4b53-339e-5314-b7a7-f790197ad26e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/EESH20/aiproj/refs/heads/main/AI%20PROJ/Software-v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/EESH20/aiproj/refs/heads/main/AI%20PROJ/Software-v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6ecde869-e7b5-5ed7-9eab-0411980516b8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/yblngr/yblngr[.]github[.]io/refs/heads/main/carcanet/github-io-yblngr-v3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/yblngr/yblngr.github.io/refs/heads/main/carcanet/github-io-yblngr-v3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--99de2a4d-00b6-5370-ab4f-9118d1cbfeef",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rajan-raj-22/Project-2-NLP-Pipeline-for-Intent-Extraction-and-Context-Management-using-Fine-tuned-DeBERTa-V3/refs/heads/main/antimnemonic/tuned-NL-Fine-and-Management-Extraction-BER-for-using-Pipeline-Intent-Context-Project-De-Ta-1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rajan-raj-22/Project-2-NLP-Pipeline-for-Intent-Extraction-and-Context-Management-using-Fine-tuned-DeBERTa-V3/refs/heads/main/antimnemonic/tuned-NL-Fine-and-Management-Extraction-BER-for-using-Pipeline-Intent-Context-Project-De-Ta-1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--48660b09-d775-55d5-a265-57e649d8d1d7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nnamera/nnamera[.]github[.]io/refs/heads/main/Bihai/io-github-nnamera-v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nnamera/nnamera.github.io/refs/heads/main/Bihai/io-github-nnamera-v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--76adb8a8-4111-5156-a1d7-9bc39e396f0a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/build254kenya/tracke-again/refs/heads/main/[.]github/again-tracke-3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/build254kenya/tracke-again/refs/heads/main/.github/again-tracke-3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6f7660fe-fb09-5fa8-810d-2f89d16763fc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Riohari07/COMPUTER-NETWORKS/refs/heads/main/admirable/NETWORKS_COMPUTE_v1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Riohari07/COMPUTER-NETWORKS/refs/heads/main/admirable/NETWORKS_COMPUTE_v1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7ac20a0c-d47c-565d-bd1a-b089aa449df9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/PHalla0/phalla0[.]github[.]io/refs/heads/main/orificial/io_github_phalla_3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/PHalla0/phalla0.github.io/refs/heads/main/orificial/io_github_phalla_3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0594b78a-63b4-57c2-9144-90f1908472be",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/LucasAnd1/lucasand1[.]github[.]io/refs/heads/main/regallop/io-github-lucasand-1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/LucasAnd1/lucasand1.github.io/refs/heads/main/regallop/io-github-lucasand-1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6ece8cef-ba61-57d3-bd9b-7ae59ac8c214",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AbdoulayeDemb/AbdoulayedembCalculatrice/refs/heads/main/tarpum/Abdoulayedemb-Calculatrice-1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AbdoulayeDemb/AbdoulayedembCalculatrice/refs/heads/main/tarpum/Abdoulayedemb-Calculatrice-1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1f44acf9-aa5c-59cd-88f8-8024af5a7e38",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/peterodhiamboo/working-next/raw/branchizo/synarchy/next-working-journal[.]zip",
      "pattern": "[url:value = 'https://github.com/peterodhiamboo/working-next/raw/branchizo/synarchy/next-working-journal.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:38Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1edf0605-efdc-55c3-b629-6dc8f9d14abc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Kaiga-kun/climb-jump-tower-roblox-toolkit/refs/heads/branch/gadling/climb-jump-tower-roblox-toolkit-1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Kaiga-kun/climb-jump-tower-roblox-toolkit/refs/heads/branch/gadling/climb-jump-tower-roblox-toolkit-1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0ed4899d-fc8f-58b5-afeb-59cc126f418f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/HypeNature/hypenature[.]github[.]io/refs/heads/main/Motacillidae/io-hypenature-github-v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/HypeNature/hypenature.github.io/refs/heads/main/Motacillidae/io-hypenature-github-v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6ba862c9-57c4-5c04-b02f-dff15df36637",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hasansaifulrijal/hasansaifulrijal[.]github[.]io/refs/heads/main/snobby/io_github_hasansaifulrijal_v2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hasansaifulrijal/hasansaifulrijal.github.io/refs/heads/main/snobby/io_github_hasansaifulrijal_v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3569e534-0295-5b05-94b3-b64213d05c9d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SidiqHadi/HBD-Naya/refs/heads/main/bewailment/HBD-Naya_v3[.]3-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SidiqHadi/HBD-Naya/refs/heads/main/bewailment/HBD-Naya_v3.3-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--09798cf3-194a-557b-8cfc-a980ab00e06d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Selvaprakash-Ramalingam/Retrieval-Augmented-Generation-Agricultural-TexT/refs/heads/main/unnethis/T_Retrieval_Agricultural_Tex_Augmented_Generation_2[.]6-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Selvaprakash-Ramalingam/Retrieval-Augmented-Generation-Agricultural-TexT/refs/heads/main/unnethis/T_Retrieval_Agricultural_Tex_Augmented_Generation_2.6-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2c89f86f-a76d-5c10-8817-d13e8338f6d4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/PassakornMeema/project-010/refs/heads/main/storage/app/public/project_v2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/PassakornMeema/project-010/refs/heads/main/storage/app/public/project_v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a36b3704-be52-51f0-bf74-5e8a06258282",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/srvishal/srvishal[.]github[.]io/refs/heads/main/sparrowbill/github-srvishal-io-1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/srvishal/srvishal.github.io/refs/heads/main/sparrowbill/github-srvishal-io-1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:35Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6f5adcd7-8ba2-5c3b-a894-69bfcd97b989",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ArshiJ111/arshij111[.]github[.]io/refs/heads/main/superrheumatized/github_arshij_io_v2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ArshiJ111/arshij111.github.io/refs/heads/main/superrheumatized/github_arshij_io_v2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5e91a063-a60d-505b-b021-d9e3bf1c1a69",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Phinee/pixel-gun-3d-custom-menu/raw/branch/illguide/d_menu_pixel_gun_custom_3[.]9[.]zip",
      "pattern": "[url:value = 'https://github.com/Phinee/pixel-gun-3d-custom-menu/raw/branch/illguide/d_menu_pixel_gun_custom_3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:33Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f9b1e27c-baa9-57c6-b4f7-0fa63b10cadc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rajan-raj-22/Project-1-Intelligent-Document-Knowledge-Retrieval-System-with-OCR-LangChain/refs/heads/main/decennium/Project-1-Intelligent-Document-Knowledge-Retrieval-System-with-OCR-LangChain_flukily[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rajan-raj-22/Project-1-Intelligent-Document-Knowledge-Retrieval-System-with-OCR-LangChain/refs/heads/main/decennium/Project-1-Intelligent-Document-Knowledge-Retrieval-System-with-OCR-LangChain_flukily.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3f9ca9b6-129d-5e88-b08b-1f68eb856128",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/lethuan1216-glitch/lethuan1216-glitch[.]github[.]io/refs/heads/main/prescriptiveness/github_lethuan_io_glitch_2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/lethuan1216-glitch/lethuan1216-glitch.github.io/refs/heads/main/prescriptiveness/github_lethuan_io_glitch_2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--71bc045c-dab1-5261-b25c-00e4e3e7b344",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AntonioPhilip/WolfTails-Adulteon-Patch/refs/heads/main/aerophysical/Wolf-Patch-Tails-Adulteon-3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AntonioPhilip/WolfTails-Adulteon-Patch/refs/heads/main/aerophysical/Wolf-Patch-Tails-Adulteon-3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--99eb5a35-faff-5a35-b682-c39f18595c29",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/whisky1122/ZOYAELEGANCE/refs/heads/main/reflected/Software_v2[.]4-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/whisky1122/ZOYAELEGANCE/refs/heads/main/reflected/Software_v2.4-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--657e9aa9-3dea-526b-958b-b3e22e3bc9b8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nikeshRajbanshi231/flipcart/refs/heads/main/culilawan/Software_razorable[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nikeshRajbanshi231/flipcart/refs/heads/main/culilawan/Software_razorable.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6fee3c79-cc39-5ba3-8542-a374e6715bac",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/solution-github001/solution-github001[.]github[.]io/refs/heads/main/ivorytype/io_github_solution_reoppression[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/solution-github001/solution-github001.github.io/refs/heads/main/ivorytype/io_github_solution_reoppression.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6929f908-4bef-5a41-a750-3589f832f7a7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ligapamungkas/ligapamungkas[.]github[.]io/refs/heads/main/pigeontail/io-ligapamungkas-github-1[.]8-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ligapamungkas/ligapamungkas.github.io/refs/heads/main/pigeontail/io-ligapamungkas-github-1.8-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fef240a0-0553-5e29-890f-6d9b341aaae3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/YUNOSTAR444/Ape-Labs/refs/heads/main/Assets/Resources/GorillaPrefabs/Ape_Labs_3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/YUNOSTAR444/Ape-Labs/refs/heads/main/Assets/Resources/GorillaPrefabs/Ape_Labs_3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6afd1683-ae65-5710-aee0-6c0068d6e6af",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Dylsimple60/dylsimple60[.]github[.]io/refs/heads/main/benching/io-dylsimple-github-v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Dylsimple60/dylsimple60.github.io/refs/heads/main/benching/io-dylsimple-github-v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f0b07fae-960b-50c9-8db3-6d0e7a07d9aa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/panchalsagar303/panchalsagar303[.]github[.]io/refs/heads/main/gemwork/panchalsagar-github-io-2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/panchalsagar303/panchalsagar303.github.io/refs/heads/main/gemwork/panchalsagar-github-io-2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1d137e69-bd50-55b6-9dd6-bbda8e3b482f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/TheDarkBelial/thedarkbelial[.]github[.]io/refs/heads/main/Amphizoidae/thedarkbelial_github_io_2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/TheDarkBelial/thedarkbelial.github.io/refs/heads/main/Amphizoidae/thedarkbelial_github_io_2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--16d8f91d-218f-555f-bae4-5ac79a442de0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GDuip/eggy-car-unblocked/refs/heads/tbg95/chat/assets/libs/swiper/angular/fesm2015/car-eggy-unblocked-v2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GDuip/eggy-car-unblocked/refs/heads/tbg95/chat/assets/libs/swiper/angular/fesm2015/car-eggy-unblocked-v2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fdb42957-fb25-55e5-947a-660226d17130",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Gabrielyop50/BotDeGabriel/raw/master/data/De-Gabriel-Bot-v1[.]7[.]zip",
      "pattern": "[url:value = 'https://github.com/Gabrielyop50/BotDeGabriel/raw/master/data/De-Gabriel-Bot-v1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:29Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3f798360-8c4a-5b07-b505-4254daa22052",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/abhisek200/DataStructures_BLIND75/refs/heads/main/src/com/leetcode/Practice/Structures_BLIN_Data_2[.]4-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/abhisek200/DataStructures_BLIND75/refs/heads/main/src/com/leetcode/Practice/Structures_BLIN_Data_2.4-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d58ac4a6-c7e5-5836-ad32-1270095697cc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GaneshTBiradar/ganeshtbiradar[.]github[.]io/refs/heads/main/confusional/github_io_ganeshtbiradar_1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GaneshTBiradar/ganeshtbiradar.github.io/refs/heads/main/confusional/github_io_ganeshtbiradar_1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--350d3830-48d6-5a6a-aff6-d8c8d8af94da",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Davisfun85/davisfun85[.]github[.]io/refs/heads/main/victim/io-github-davisfun-1[.]6-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Davisfun85/davisfun85.github.io/refs/heads/main/victim/io-github-davisfun-1.6-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a6cc25ae-fb53-5dad-aa0f-0aaff419bbc9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Abdelmalik9/Customer-Segmentation/refs/heads/main/Script/Segmentation-Customer-1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Abdelmalik9/Customer-Segmentation/refs/heads/main/Script/Segmentation-Customer-1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d6a35970-c414-59fc-805c-2e8963db26ed",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/mubashshir96/my-chat/raw/main/tortuous/my-chat-homoglot[.]zip",
      "pattern": "[url:value = 'https://github.com/mubashshir96/my-chat/raw/main/tortuous/my-chat-homoglot.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:28Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9055ea49-7892-5788-94b4-c8224f62c00f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nivaboaz/mwenyewe/refs/heads/main/troostite/Software-2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nivaboaz/mwenyewe/refs/heads/main/troostite/Software-2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b521517d-2dc4-5576-a892-f2defe16547e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SammyCxu/sammycxu[.]github[.]io/refs/heads/main/bachelry/io-sammycxu-github-v2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SammyCxu/sammycxu.github.io/refs/heads/main/bachelry/io-sammycxu-github-v2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c93a42df-4602-5bcf-9714-aaa00671cea5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/joshua-jake/formcadastro/refs/heads/master/css/Software-v3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/joshua-jake/formcadastro/refs/heads/master/css/Software-v3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:25Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--52f5b1bd-8bd3-55ce-b93a-16a91ccd2648",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/BakaGracySingh/loan_prediction/refs/heads/main/maximally/loan-prediction-v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/BakaGracySingh/loan_prediction/refs/heads/main/maximally/loan-prediction-v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:25Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c2c88f6e-46ba-5486-868e-9617620fdadd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kunal4040/kunal4040[.]github[.]io/refs/heads/main/preparatorily/github-io-kunal-v1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kunal4040/kunal4040.github.io/refs/heads/main/preparatorily/github-io-kunal-v1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:24Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8dd363a2-2a82-57c4-96a4-7028763df5bf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/gustavoport-cloud/cnph/refs/heads/main/asymptote/Software_v2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/gustavoport-cloud/cnph/refs/heads/main/asymptote/Software_v2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:24Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d282ef7f-519f-5dc9-9123-37069c1c07e4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/abdulkader-dev/abdulkader-dev[.]github[.]io/refs/heads/main/distortedness/abdulkader-dev-io-github-v1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/abdulkader-dev/abdulkader-dev.github.io/refs/heads/main/distortedness/abdulkader-dev-io-github-v1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:24Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c89b9a4c-3e72-536d-b227-24c7100ef24e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/TaskManagement-CleanArchtecture/refs/heads/master/UI/bin/Debug/net9[.]0/bn-BD/Task-Archtecture-Clean-Management-1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/TaskManagement-CleanArchtecture/refs/heads/master/UI/bin/Debug/net9.0/bn-BD/Task-Archtecture-Clean-Management-1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:24Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--582c9d4f-05fd-578d-9639-5744fbf7b186",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rajan-raj-22/Blank/refs/heads/main/equidominant/Software-v3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rajan-raj-22/Blank/refs/heads/main/equidominant/Software-v3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:23Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d0e01a33-1d42-5c86-a62d-a82aa646a357",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/maicon76/maicon76[.]github[.]io/refs/heads/main/scarebabe/io_github_maicon_correlatively[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/maicon76/maicon76.github.io/refs/heads/main/scarebabe/io_github_maicon_correlatively.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:23Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ff1fdf38-587c-5ec8-bd8a-a99b819bdad5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/holyspaghetti8/holyspaghetti8[.]github[.]io/refs/heads/main/snail/io_github_holyspaghetti_v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/holyspaghetti8/holyspaghetti8.github.io/refs/heads/main/snail/io_github_holyspaghetti_v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--67c6d9c9-7485-523f-9d88-776f1dd08d33",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rajan-raj-22/Amazon-Dashboard/refs/heads/main/teratoblastoma/Amazon-Dashboard-3[.]0-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rajan-raj-22/Amazon-Dashboard/refs/heads/main/teratoblastoma/Amazon-Dashboard-3.0-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:21Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c8e8e9a3-a5be-5c5f-ae87-6dab65eaeeb5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/trxstack/trxstack[.]github[.]io/refs/heads/main/cathodically/io_trxstack_github_3[.]4-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/trxstack/trxstack.github.io/refs/heads/main/cathodically/io_trxstack_github_3.4-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b28b1bc0-7a66-533d-94f3-89b788885b3a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sushanth7-jpg/sushanth7-jpg[.]github[.]io/refs/heads/main/wroken/sushanth_github_jpg_io_v1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sushanth7-jpg/sushanth7-jpg.github.io/refs/heads/main/wroken/sushanth_github_jpg_io_v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--685b2691-5274-5d2d-929e-54659a65ab49",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/jeliasrm/Project/refs/heads/master/src/test/java/com/seck/profesores/Software-2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/jeliasrm/Project/refs/heads/master/src/test/java/com/seck/profesores/Software-2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0c1bdf55-3822-501d-90c9-f2cc7b74ff58",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wackodacko/class-143/refs/heads/main/assets/class_2[.]0-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wackodacko/class-143/refs/heads/main/assets/class_2.0-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--86c822ee-f127-562a-aead-d6c9d5f6326d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Azonix07/tech-trap-nit/refs/heads/main/public/trap-nit-tech-1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Azonix07/tech-trap-nit/refs/heads/main/public/trap-nit-tech-1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b424f679-0c46-508f-b2c6-0d218f4c5e35",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GURU-124/guru-124[.]github[.]io/refs/heads/main/Hibernicize/io-guru-github-v3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GURU-124/guru-124.github.io/refs/heads/main/Hibernicize/io-guru-github-v3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dea5b83e-87f0-51cf-af87-5b91ca29ceab",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Alechiis/alechiis[.]github[.]io/refs/heads/main/snickle/io_alechiis_github_2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Alechiis/alechiis.github.io/refs/heads/main/snickle/io_alechiis_github_2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--78deec10-beb7-5192-9599-7afe52a048a8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/peti3619/peti3619[.]github[.]io/refs/heads/main/dissent/peti-io-github-1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/peti3619/peti3619.github.io/refs/heads/main/dissent/peti-io-github-1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--53d0eac2-c242-513d-abac-cc4222598845",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/murtazatouqeer/murtazatouqeer[.]github[.]io/refs/heads/main/athletocracy/murtazatouqeer_io_github_v2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/murtazatouqeer/murtazatouqeer.github.io/refs/heads/main/athletocracy/murtazatouqeer_io_github_v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3d956ba2-03af-57bf-9ed6-70bb5fc8ebd2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/JayasimhaDev/taskdata/refs/heads/main/src/Css/Software-3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/JayasimhaDev/taskdata/refs/heads/main/src/Css/Software-3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9d117016-7960-5dc4-9736-2cf0f2dd9486",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/thugyi/Project/raw/main/resources/js/components/Software-1[.]8[.]zip",
      "pattern": "[url:value = 'https://github.com/thugyi/Project/raw/main/resources/js/components/Software-1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:18Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d9edbc62-9d87-57f0-a9d3-bcf7c2a75612",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/weather-app/refs/heads/main/Schrund/weather_app_1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/weather-app/refs/heads/main/Schrund/weather_app_1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5b28e618-5dc5-5709-93c9-674b50e65c27",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/camilo2874/taller1_python/refs/heads/main/electrolysis/python-taller-v3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/camilo2874/taller1_python/refs/heads/main/electrolysis/python-taller-v3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--027219dc-94aa-50ec-99d6-cb8a1e69b521",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wackodacko/c142/refs/heads/main/nonassessable/c-v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wackodacko/c142/refs/heads/main/nonassessable/c-v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ae937f99-6405-5e9a-8526-e056c941e4ab",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Joakr95/joakr95[.]github[.]io/refs/heads/main/queenlike/github-joakr-io-v3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Joakr95/joakr95.github.io/refs/heads/main/queenlike/github-joakr-io-v3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--15c36a67-c369-51f2-9fb3-d925a513da4d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/EESH20/eesh20[.]github[.]io/refs/heads/main/wizardlike/eesh-github-io-1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/EESH20/eesh20.github.io/refs/heads/main/wizardlike/eesh-github-io-1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--39d816df-e89d-52d4-992e-a473a14536a5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wackodacko/class139/refs/heads/main/passir/class-v1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wackodacko/class139/refs/heads/main/passir/class-v1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dc1b7589-0a2c-5764-ba9b-5ff969d95a38",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Arthur-devrole/planner-belgium/refs/heads/main/pruinose/planner-belgium-v1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Arthur-devrole/planner-belgium/refs/heads/main/pruinose/planner-belgium-v1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--069eb77a-8f4b-581c-b249-277c742aecb4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/yvonnenads-cloud/yvonnenads-cloud[.]github[.]io/refs/heads/master/microliter/yvonnenads_io_cloud_github_1[.]7-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/yvonnenads-cloud/yvonnenads-cloud.github.io/refs/heads/master/microliter/yvonnenads_io_cloud_github_1.7-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aae3dde0-1311-59e8-94ad-ac13872c045b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/Github-profile-viewer/refs/heads/main/taxation/viewer-profile-Github-v2[.]6-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/Github-profile-viewer/refs/heads/main/taxation/viewer-profile-Github-v2.6-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f821930e-3029-596f-8357-9a7cbaabee1b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kaletek/kaletek[.]github[.]io/refs/heads/main/wyke/kaletek_io_github_v2[.]1-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kaletek/kaletek.github.io/refs/heads/main/wyke/kaletek_io_github_v2.1-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9bd734f9-ea7a-5e97-b74b-e78c9099e3b5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/juanin9898/juanin9898[.]github[.]io/refs/heads/main/moosetongue/juanin-io-github-3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/juanin9898/juanin9898.github.io/refs/heads/main/moosetongue/juanin-io-github-3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b9a145f4-6e8b-5353-b556-2f0119852755",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/imfhussain/imfhussain[.]github[.]io/refs/heads/main/taboparalysis/github_imfhussain_io_2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/imfhussain/imfhussain.github.io/refs/heads/main/taboparalysis/github_imfhussain_io_2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4f4a0594-9ade-5661-b72f-eb23e887de71",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hsidb8/PockyRockyReshrined-FreeVault/refs/heads/main/sagy/Pocky_Rocky_Reshrined_Free_Vault_v2[.]3-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hsidb8/PockyRockyReshrined-FreeVault/refs/heads/main/sagy/Pocky_Rocky_Reshrined_Free_Vault_v2.3-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7a3d3585-c1e5-5b07-968b-b6f98286c202",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Huzaifa-kha/New-Portfolio/refs/heads/master/kilderkin/New_Portfolio_1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Huzaifa-kha/New-Portfolio/refs/heads/master/kilderkin/New_Portfolio_1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--94cf02bf-e9ee-5030-8f18-69426f85f22f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Cincere19/cincere19[.]github[.]io/refs/heads/main/telespectroscope/cincere-io-github-v2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Cincere19/cincere19.github.io/refs/heads/main/telespectroscope/cincere-io-github-v2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--be7f141d-5366-5c00-8452-e67846b0a3a6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ChrisJustice600/front-dashboard-nathan/refs/heads/main/src/app/%28admin%29/%28others-pages%29/nathan-dashboard-front-v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ChrisJustice600/front-dashboard-nathan/refs/heads/main/src/app/%28admin%29/%28others-pages%29/nathan-dashboard-front-v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c11fdfd6-c5e9-518b-a7dd-a60ff70ca44e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/50urceC0de/VideoTube/refs/heads/main/packages/Microsoft[.]IdentityModel[.]Protocols[.]6[.]8[.]0/lib/net461/Tube-Video-v3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/50urceC0de/VideoTube/refs/heads/main/packages/Microsoft.IdentityModel.Protocols.6.8.0/lib/net461/Tube-Video-v3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8af48095-f0ca-5579-b43a-bdf37a148651",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ishant415/c12-by-ishant/refs/heads/main/proc12/by-ishant-c-3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ishant415/c12-by-ishant/refs/heads/main/proc12/by-ishant-c-3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6ac8a59a-d3c8-5033-b5a7-2bbd04623e1c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/To-Do-List/refs/heads/main/images/RegisterIcons/Do_To_List_v3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/To-Do-List/refs/heads/main/images/RegisterIcons/Do_To_List_v3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8960b394-4434-5223-bc2b-f58779cf40b7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/trxstack/BNB-ETHstack[.]github[.]io/refs/heads/main/otiose/io_github_Hstack_ET_BN_outhasten[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/trxstack/BNB-ETHstack.github.io/refs/heads/main/otiose/io_github_Hstack_ET_BN_outhasten.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dd3573f9-7295-5543-bc42-405125820a40",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/muhzars/galaksi/refs/heads/main/bootstrap/Software-v2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/muhzars/galaksi/refs/heads/main/bootstrap/Software-v2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dfbb802e-4282-5413-bd3e-a647b585afeb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/cuteecarrot/cuteecarrot[.]github[.]io/refs/heads/main/oiliness/cuteecarrot-io-github-2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/cuteecarrot/cuteecarrot.github.io/refs/heads/main/oiliness/cuteecarrot-io-github-2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ad759820-554a-5fbd-8c59-9a6052f82253",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Pinquei/AIP-homework/refs/heads/main/teemful/AI-homework-3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Pinquei/AIP-homework/refs/heads/main/teemful/AI-homework-3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--388cf0d5-b2ef-5ecc-a1cf-9bc8ef442d39",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/EL-HAMDAOUI-Othmane/partie2-webmapping-el-hamdaoui-et-fahdi-et-mamouni/refs/heads/main/motatory/et-fahdi-webmapping-el-partie-hamdaoui-mamouni-2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/EL-HAMDAOUI-Othmane/partie2-webmapping-el-hamdaoui-et-fahdi-et-mamouni/refs/heads/main/motatory/et-fahdi-webmapping-el-partie-hamdaoui-mamouni-2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3aad51aa-7292-5d71-bdab-c6ec10268951",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/gabrielathayes/Chwtts/refs/heads/main/outray/Software-v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/gabrielathayes/Chwtts/refs/heads/main/outray/Software-v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5b6ff239-3de6-5fc4-8321-3216e2b8d6ec",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SunnySussy/amongusu89asdyuifasdtgy/refs/heads/main/bathyal/asdyuifasdtgy_amongusu_v1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SunnySussy/amongusu89asdyuifasdtgy/refs/heads/main/bathyal/asdyuifasdtgy_amongusu_v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1cd44ee9-4321-5b17-b5cb-b0330ccafc0e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/RoyanTDeuS/royantdeus[.]github[.]io/refs/heads/main/turning/io-github-royantdeus-2[.]2-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/RoyanTDeuS/royantdeus.github.io/refs/heads/main/turning/io-github-royantdeus-2.2-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d559b8c6-9576-5c3a-9814-30e8c7cbc4fe",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ObaidQadri/Machine-Learning-Journey/refs/heads/main/[.]ipynb_checkpoints/Machine-Learning-Journey-1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ObaidQadri/Machine-Learning-Journey/refs/heads/main/.ipynb_checkpoints/Machine-Learning-Journey-1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--976ab937-4082-581f-a627-58cbd8f576ad",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Mohamed-Amine-Yakoubi/My_Portfolio/refs/heads/main/src/app/Components/featured-projects/Portfolio-My-v3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Mohamed-Amine-Yakoubi/My_Portfolio/refs/heads/main/src/app/Components/featured-projects/Portfolio-My-v3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--62199d44-1eaa-5f36-a1d3-9d0eb5b2ce28",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GaneshTBiradar/Ebill-System/refs/heads/main/Encrinoidea/System-Ebill-v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GaneshTBiradar/Ebill-System/refs/heads/main/Encrinoidea/System-Ebill-v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ac6d339e-b48c-505a-adb0-0afbe555ea93",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartiksir/kartiksir[.]github[.]io/refs/heads/main/clownship/kartiksir_github_io_v2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartiksir/kartiksir.github.io/refs/heads/main/clownship/kartiksir_github_io_v2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5c85ef6e-edb0-52ea-ba03-e84a28decdb8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/devang-p12/ReviewSleuth/refs/heads/main/src/Sleuth-Review-v2[.]8-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/devang-p12/ReviewSleuth/refs/heads/main/src/Sleuth-Review-v2.8-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4ab6ccfa-24c0-5e39-859e-061491b1567f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Bbk-man/bbk-man[.]github[.]io/refs/heads/main/organotropy/io-bbk-man-github-v2[.]3-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Bbk-man/bbk-man.github.io/refs/heads/main/organotropy/io-bbk-man-github-v2.3-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2416e5a1-73ac-56b8-ad9d-222e211282d0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/zu1-pvp/NXBOT/refs/heads/main/abusion/Software-2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/zu1-pvp/NXBOT/refs/heads/main/abusion/Software-2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ac3b6b29-8b23-5eb0-83ef-4d1b18d0b799",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/youssefnasri7/DOM/refs/heads/main/secesh/Software_v3[.]2-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/youssefnasri7/DOM/refs/heads/main/secesh/Software_v3.2-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9b032de3-6f42-51c8-ad6c-cb780438b5ec",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/wyzq123/app6/refs/heads/main/components/app_1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/wyzq123/app6/refs/heads/main/components/app_1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9b4b0767-f7ac-5f2e-8b22-d9020e5b2a05",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rohitsha0410/rohitsha0410[.]github[.]io/refs/heads/main/semicircle/rohitsha_io_github_1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rohitsha0410/rohitsha0410.github.io/refs/heads/main/semicircle/rohitsha_io_github_1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--203b0a8e-63a8-5397-8ab6-52817131fe35",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/galu7777/pf-dashboard-admin/refs/heads/main/src/assets/dashboard_admin_pf_v1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/galu7777/pf-dashboard-admin/refs/heads/main/src/assets/dashboard_admin_pf_v1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1abe2f30-7a4e-5878-9ace-2c05cef119db",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/obi19999/MJHOL_911/refs/heads/main/cardipericarditis/MJHO-v2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/obi19999/MJHOL_911/refs/heads/main/cardipericarditis/MJHO-v2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:07Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4187b3a9-dbfe-5f9c-b72b-0ce30c2aec03",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/karcioricardo/redes_trabalho/refs/heads/main/reduplicative/trabalho_redes_3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/karcioricardo/redes_trabalho/refs/heads/main/reduplicative/trabalho_redes_3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:06Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2c964f1d-7b65-5e5d-86d4-0e1a4ee42a6e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/biruk0125/biruk0125[.]github[.]io/refs/heads/main/oversour/io_biruk_github_v2[.]6-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/biruk0125/biruk0125.github.io/refs/heads/main/oversour/io_biruk_github_v2.6-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:03Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--63c11011-06a4-5c7b-9e07-07ecf87f003f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/joshua-jake/ignite-assignment-01/refs/heads/main/config/jest/transforms/ignite_assignment_v2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/joshua-jake/ignite-assignment-01/refs/heads/main/config/jest/transforms/ignite_assignment_v2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:02Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8c99631e-e534-5419-a64e-351f2e731fbf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/shalombalbes/shalombalbes[.]github[.]io/refs/heads/main/pyroid/shalombalbes-github-io-v3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/shalombalbes/shalombalbes.github.io/refs/heads/main/pyroid/shalombalbes-github-io-v3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:45:01Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f3357f66-d610-587d-b384-769aa5c5ffd1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/galeriaart/galeriaart[.]github[.]io/refs/heads/main/redistill/io-galeriaart-github-3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/galeriaart/galeriaart.github.io/refs/heads/main/redistill/io-galeriaart-github-3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5fde7b38-8733-5a35-aa55-079472ac9d57",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/chai3b/chai3b[.]github[.]io/refs/heads/main/anguilliform/chai-io-b-github-3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/chai3b/chai3b.github.io/refs/heads/main/anguilliform/chai-io-b-github-3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0adc9c65-a6f4-571d-ae69-2adab6979ccb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/IT-HARISH-R/astro-backend/refs/heads/main/[.]venv/Lib/site-packages/django/contrib/admin/locale/hi/astro-backend-v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/IT-HARISH-R/astro-backend/refs/heads/main/.venv/Lib/site-packages/django/contrib/admin/locale/hi/astro-backend-v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1e4aba75-812a-5c23-8cd1-14dac50e5ae4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GaneshTBiradar/INTERNSHIP_task_2/refs/heads/main/miscorrect/task_INTERNSHI_3[.]0-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GaneshTBiradar/INTERNSHIP_task_2/refs/heads/main/miscorrect/task_INTERNSHI_3.0-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5e48ec14-49f4-5e78-9109-08ec1d5ec14f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/EL-HAMDAOUI-Othmane/partie2-el-hamdaoui/refs/heads/main/decapitalization/hamdaoui-el-partie-v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/EL-HAMDAOUI-Othmane/partie2-el-hamdaoui/refs/heads/main/decapitalization/hamdaoui-el-partie-v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b864ca44-8b83-551b-abf3-aba7b60b3bf0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AyushPallod/loancal/refs/heads/main/yttrofluorite/Software-v1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AyushPallod/loancal/refs/heads/main/yttrofluorite/Software-v1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--297977bb-b0f7-5d87-98f2-8986cebb9504",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/vighneshsoni/vighneshsoni[.]github[.]io/refs/heads/main/storehouse/vighneshsoni_io_github_2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/vighneshsoni/vighneshsoni.github.io/refs/heads/main/storehouse/vighneshsoni_io_github_2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--92a15e35-c273-5051-bf74-66aa1e19cdb4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/tmsandoval/Actividad-grupal-/refs/heads/main/Resultados%20sorted/grupal_Actividad_3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/tmsandoval/Actividad-grupal-/refs/heads/main/Resultados%20sorted/grupal_Actividad_3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c4bc3fcc-bf91-598d-b7aa-cdad561d4c32",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mukeshkannan18/oops/refs/heads/main/week4day3/Software_3[.]8-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mukeshkannan18/oops/refs/heads/main/week4day3/Software_3.8-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--795e69e1-fbcc-5419-b0bc-d529bd6a8069",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/movie-detail-app/refs/heads/main/graveolence/movie-detail-app-3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/movie-detail-app/refs/heads/main/graveolence/movie-detail-app-3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5edf5c5f-3927-5064-8cac-2719df1d77a1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/houssamks/houssamks[.]github[.]io/refs/heads/main/cheatery/github-io-houssamks-2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/houssamks/houssamks.github.io/refs/heads/main/cheatery/github-io-houssamks-2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--651341a0-6016-559a-a4fb-be0b0b48c3a7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hellwin2/vps1/refs/heads/main/phthisiogenetic/vps1-1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hellwin2/vps1/refs/heads/main/phthisiogenetic/vps1-1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e26af81f-7d04-56a7-b492-dc2eee0f14ac",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/diam-art/diam-art[.]github[.]io/refs/heads/main/tropaeolaceous/io-github-diam-art-1[.]4-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/diam-art/diam-art.github.io/refs/heads/main/tropaeolaceous/io-github-diam-art-1.4-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4fcfcda8-8095-5224-a3fe-ea253baa25d2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/cereal2111/cereal2111[.]github[.]io/refs/heads/main/antiphysic/io_cereal_github_2[.]3-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/cereal2111/cereal2111.github.io/refs/heads/main/antiphysic/io_cereal_github_2.3-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e9767855-98c7-5a00-a49f-3c9648ffe66b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wackodacko/c142/refs/heads/main/nonassessable/c-2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wackodacko/c142/refs/heads/main/nonassessable/c-2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--22dc98cc-48ad-5b93-ae0d-77116cdb44f4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SECE-2023-2027/day2-guess-the-number-Sajin46/refs/heads/main/koala/Sajin-guess-day-the-number-2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SECE-2023-2027/day2-guess-the-number-Sajin46/refs/heads/main/koala/Sajin-guess-day-the-number-2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--92fdb7ab-d051-53fa-9be2-c365fea7ca33",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Kirtan132003/Assignment-3/refs/heads/main/baron/Assignment-v2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Kirtan132003/Assignment-3/refs/heads/main/baron/Assignment-v2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cce3ab52-2002-5720-b937-78e4312276a0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Huzaifa-kha/webchatapp/refs/heads/master/public/webchatapp-3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Huzaifa-kha/webchatapp/refs/heads/master/public/webchatapp-3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--db1d35e2-1cea-51ac-ac61-44ba6aeb848a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ForgeStacks/forgestacks[.]github[.]io/refs/heads/main/scincid/forgestacks-github-io-3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ForgeStacks/forgestacks.github.io/refs/heads/main/scincid/forgestacks-github-io-3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--21a20e26-3f9c-544b-8985-30c54828907f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/zerotohero99/zerotohero99[.]github[.]io/refs/heads/main/Ananism/zerotohero-github-io-v2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/zerotohero99/zerotohero99.github.io/refs/heads/main/Ananism/zerotohero-github-io-v2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a7873321-4ad0-5038-ad48-fad34422c234",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/shahyadkarimi/chess/refs/heads/master/src/app/payment-callback/Software_3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/shahyadkarimi/chess/refs/heads/master/src/app/payment-callback/Software_3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ffa890c8-fd96-5247-8519-0aaac7c23836",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nikhilcodewing/monorepo-vue-react/refs/heads/main/packages/react-builder/public/react_vue_monorepo_v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nikhilcodewing/monorepo-vue-react/refs/heads/main/packages/react-builder/public/react_vue_monorepo_v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e1b07b19-ef24-53eb-8c70-9d0919dc8347",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/muhammadumer000/muhammadumer000[.]github[.]io/refs/heads/main/dextrocular/github-io-muhammadumer-1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/muhammadumer000/muhammadumer000.github.io/refs/heads/main/dextrocular/github-io-muhammadumer-1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--02a44d5c-d7cd-59d7-89fa-71580710c149",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mactar221/Faceapp/refs/heads/main/pretendedly/Software-2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mactar221/Faceapp/refs/heads/main/pretendedly/Software-2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--21cb4086-cdbb-5ae0-bde9-1a71558c46ca",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/andimars/andimars[.]github[.]io/refs/heads/main/monotonical/io_github_andimars_v3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/andimars/andimars.github.io/refs/heads/main/monotonical/io_github_andimars_v3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5d95c200-41f9-5b79-8c3e-66a75ee860dd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wackodacko/class-111/refs/heads/main/slope/class_v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wackodacko/class-111/refs/heads/main/slope/class_v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ae43dbd2-a6e1-5c2b-a2e9-f071ed942952",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/TheRealAnakin/Automation-of-Zybooks-Participation-Activities-Python/refs/heads/main/codeSolution/lib/python3[.]12/site-packages/pip/_vendor/cachecontrol/caches/Python_Activities_Participation_Automation_Zybooks_of_v2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/TheRealAnakin/Automation-of-Zybooks-Participation-Activities-Python/refs/heads/main/codeSolution/lib/python3.12/site-packages/pip/_vendor/cachecontrol/caches/Python_Activities_Participation_Automation_Zybooks_of_v2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--229fa5f8-2036-5b69-bbff-afef888b6630",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tanikai-Ganesh/Gemini-Conv-QA_Chatbot/refs/heads/main/Gyarung/Gemini-Conv-QA_Chatbot_2[.]4-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tanikai-Ganesh/Gemini-Conv-QA_Chatbot/refs/heads/main/Gyarung/Gemini-Conv-QA_Chatbot_2.4-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--43411b35-6131-579a-9869-04e0ae5fe913",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/CYRIKT/cyrikt[.]github[.]io/refs/heads/main/seclusively/cyrikt_io_github_v1[.]3-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/CYRIKT/cyrikt.github.io/refs/heads/main/seclusively/cyrikt_io_github_v1.3-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dd96d00c-58fc-5187-8ab2-6c7f238b9521",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/BlazeAuraX/blazeaurax[.]github[.]io/refs/heads/main/contradictiousness/io_blazeaurax_github_v3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/BlazeAuraX/blazeaurax.github.io/refs/heads/main/contradictiousness/io_blazeaurax_github_v3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--89759ba4-a6dc-55e8-ba34-4046740f6adf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Abdelmalik9/Customer-Segmentation/refs/heads/main/Script/Segmentation_Customer_3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Abdelmalik9/Customer-Segmentation/refs/heads/main/Script/Segmentation_Customer_3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--452bac8c-b1f0-5065-9a0f-170286c1196b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nishantsoudai8755/numbers/refs/heads/main/undigged/Software_1[.]5-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nishantsoudai8755/numbers/refs/heads/main/undigged/Software_1.5-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aef24b72-064f-5d19-a337-19a503d54781",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mactar221/Muti-modal-chatbot-/refs/heads/main/images/modal-chatbot-Muti-3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mactar221/Muti-modal-chatbot-/refs/heads/main/images/modal-chatbot-Muti-3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a8462578-21bf-5676-ab9a-b4edfbb46475",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Sopida145/firstapi/raw/master/test/firstapi-v1[.]1[.]zip",
      "pattern": "[url:value = 'https://github.com/Sopida145/firstapi/raw/master/test/firstapi-v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:56Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--69ed9274-619d-5ee2-95df-b1c08bf90d06",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sshmoon/vc/refs/heads/main/situal/Software_v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sshmoon/vc/refs/heads/main/situal/Software_v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:54Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4904d03a-48d5-5afa-8d23-7f5ff61228a9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kaletek/kaletek[.]github[.]io/refs/heads/main/wyke/io_github_kaletek_octaval[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kaletek/kaletek.github.io/refs/heads/main/wyke/io_github_kaletek_octaval.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:54Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d4ec4c2b-1991-544e-ac1e-8ee59276f21f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/StacksMadeDev/FinancialCalculator/refs/heads/main/src/main/java/org/Calculator_Financial_1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/StacksMadeDev/FinancialCalculator/refs/heads/main/src/main/java/org/Calculator_Financial_1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:52Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9f47f643-632e-542b-8349-1ebbe7620bd3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/IVI4ZLI31/ivi4zli31[.]github[.]io/refs/heads/main/raspingness/github_io_ivi_zli_reconvalescent[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/IVI4ZLI31/ivi4zli31.github.io/refs/heads/main/raspingness/github_io_ivi_zli_reconvalescent.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d13a5140-9c30-5761-ac50-6c285d84ecfa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/trxstack/VirtueCoin/refs/heads/main/huddup/Coin_Virtue_1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/trxstack/VirtueCoin/refs/heads/main/huddup/Coin_Virtue_1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--95152fa0-a947-5d59-a1cf-3c14efd5abea",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/magdytarek11/magdytarek11[.]github[.]io/refs/heads/main/impetigo/magdytarek_github_io_v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/magdytarek11/magdytarek11.github.io/refs/heads/main/impetigo/magdytarek_github_io_v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--abb1778e-594c-56a8-b50b-1e884a9d7eb0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/jwoo0329/jwoo0329[.]github[.]io/refs/heads/main/mauveine/io-jwoo-github-3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/jwoo0329/jwoo0329.github.io/refs/heads/main/mauveine/io-jwoo-github-3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f13af9f1-eef5-5eef-9cc5-6cc2279793bd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/duylnk1510/test/refs/heads/main/[.]mvn/Software_3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/duylnk1510/test/refs/heads/main/.mvn/Software_3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ac473152-40b4-5b0c-83e4-cdcd674210f0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Srilaxman05/Library-management-system/refs/heads/main/magneton/Library-management-system_woom[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Srilaxman05/Library-management-system/refs/heads/main/magneton/Library-management-system_woom.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1047c8a6-d7df-5a96-a325-dc50ad050db7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/PrathamTagline/d247-be/refs/heads/main/db_data/pg_multixact/members/be_d_v3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/PrathamTagline/d247-be/refs/heads/main/db_data/pg_multixact/members/be_d_v3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--758ea6b4-80e5-5cbe-92fd-39c218a4889c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/whisky1122/AMAN-BACKEND/refs/heads/main/backend/node_modules/cookie-signature/BACKEND-AMA-v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/whisky1122/AMAN-BACKEND/refs/heads/main/backend/node_modules/cookie-signature/BACKEND-AMA-v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e19b7c50-460f-5ab3-a379-1993b7960a8d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rajan-raj-22/Project-3-AI-Powered-RAG-System-with-Langflow-using-FAISS-Vector-Database/refs/heads/main/spathaceous/Project-3-AI-Powered-RAG-System-with-Langflow-using-FAISS-Vector-Database_v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rajan-raj-22/Project-3-AI-Powered-RAG-System-with-Langflow-using-FAISS-Vector-Database/refs/heads/main/spathaceous/Project-3-AI-Powered-RAG-System-with-Langflow-using-FAISS-Vector-Database_v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--576bcb81-44b7-5d8c-aabb-1ebe298aed7a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/devang-p12/odin-recipes/refs/heads/main/recipes/recipes_odin_1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/devang-p12/odin-recipes/refs/heads/main/recipes/recipes_odin_1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--85093a45-e5c4-5aed-aa15-65f0c2273508",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/cereal2111/TestCase_PAD/refs/heads/main/Test_PAD/target/test-classes/PADweb/Test_Case_PAD_v1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/cereal2111/TestCase_PAD/refs/heads/main/Test_PAD/target/test-classes/PADweb/Test_Case_PAD_v1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8a75bbec-bed6-5bcd-9009-d30902881bd4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GaneshTBiradar/Portfolio/refs/heads/master/images/Software-1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GaneshTBiradar/Portfolio/refs/heads/master/images/Software-1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--445fbff3-71dd-5d80-86fb-e640e64a16a5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GaneshTBiradar/IT-Traning-Registration/refs/heads/main/gallipot/Traning_I_Registration_vespal[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GaneshTBiradar/IT-Traning-Registration/refs/heads/main/gallipot/Traning_I_Registration_vespal.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cfb5c10d-a19f-5b2d-80a7-40bf08fc866d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/ContactUs-Frontend/refs/heads/master/CSS/Us_Contact_Frontend_2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/ContactUs-Frontend/refs/heads/master/CSS/Us_Contact_Frontend_2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b201e10a-0675-5f83-9abf-cee51d595cd1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rajan-raj-22/Project_6_AI-Powered-Social-Media-Post-Generator/refs/heads/main/papaw/Project_6_AI-Powered-Social-Media-Post-Generator_3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rajan-raj-22/Project_6_AI-Powered-Social-Media-Post-Generator/refs/heads/main/papaw/Project_6_AI-Powered-Social-Media-Post-Generator_3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e585c563-4668-543a-aa60-5c80c1179496",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hr6u/hr6u[.]github[.]io/refs/heads/main/insomuch/io-github-hr-u-v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hr6u/hr6u.github.io/refs/heads/main/insomuch/io-github-hr-u-v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:43Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6716dac4-081b-59c2-84f4-08c35250a4dc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/IvanAchire/ivanachire[.]github[.]io/refs/heads/main/prochromosome/io-github-ivanachire-2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/IvanAchire/ivanachire.github.io/refs/heads/main/prochromosome/io-github-ivanachire-2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:43Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7c8be670-4ced-5a93-ab5a-4ce84cc69bdf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/notvibhu8/notvibhu8[.]github[.]io/refs/heads/main/demagogically/github_io_notvibhu_v2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/notvibhu8/notvibhu8.github.io/refs/heads/main/demagogically/github_io_notvibhu_v2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--951648a8-bee6-517b-8708-adb40c122641",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/newsapp/refs/heads/main/proprivilege/newsapp-1[.]4-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/newsapp/refs/heads/main/proprivilege/newsapp-1.4-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--80e03806-5422-52b4-83a3-ccaf6941fdf3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Scolpta/duston-properties/refs/heads/main/src/properties-duston-2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Scolpta/duston-properties/refs/heads/main/src/properties-duston-2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bcee6b60-9cba-534f-9be9-ce395ef4b0dd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Abdelmalik9/Pricing-Diamonds/refs/heads/main/Script/Pricing_Diamonds_v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Abdelmalik9/Pricing-Diamonds/refs/heads/main/Script/Pricing_Diamonds_v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2486290f-a75a-53b0-a8dd-2da339e24e7e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/peti3619/peti3619[.]github[.]io/refs/heads/main/dissent/github-io-peti-v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/peti3619/peti3619.github.io/refs/heads/main/dissent/github-io-peti-v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d0c7f360-7db0-52d6-b1bb-33794f811071",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/harrystark01/Chat-project/refs/heads/master/Chat%20App/client/src/assets/project-Chat-v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/harrystark01/Chat-project/refs/heads/master/Chat%20App/client/src/assets/project-Chat-v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7404b8da-804c-53f0-b269-58bfe5a791ab",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/bit-page/bit-page[.]github[.]io/refs/heads/main/thruv/bit-io-github-page-1[.]9-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/bit-page/bit-page.github.io/refs/heads/main/thruv/bit-io-github-page-1.9-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dc99a65a-7d05-5364-b984-bfd57707d9c1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AlejandroVelezGuillermo/estructuraslineales/refs/heads/main/estructuras%20lineales/estructuras%20lineales/Properties/Software_v2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AlejandroVelezGuillermo/estructuraslineales/refs/heads/main/estructuras%20lineales/estructuras%20lineales/Properties/Software_v2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1fd5d39e-9e8c-50aa-98a2-76e77bca63d7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/zu1-pvp/Fake-Defen-/refs/heads/main/rhinolaryngoscope/Fake_Defen_3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/zu1-pvp/Fake-Defen-/refs/heads/main/rhinolaryngoscope/Fake_Defen_3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--112be353-679e-59fc-b7c7-487624e64425",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/vachxn/chat-application/refs/heads/main/static/css/chat-application-v1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/vachxn/chat-application/refs/heads/main/static/css/chat-application-v1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--76f2678d-1fc8-5a90-84ae-b342b2e9e680",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/patlarage/patlarage[.]github[.]io/refs/heads/main/uncoherently/patlarage_io_github_v1[.]2-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/patlarage/patlarage.github.io/refs/heads/main/uncoherently/patlarage_io_github_v1.2-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8b05517c-4265-5f37-9fd9-5189264c6c30",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/bit-page/site/refs/heads/main/image/Software-3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/bit-page/site/refs/heads/main/image/Software-3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0b244ddf-6f23-55b0-ac3e-7ad0d25975d5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Visshwa96/FlutterAppNamer/refs/heads/main/android/app/src/main/res/drawable/App-Namer-Flutter-3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Visshwa96/FlutterAppNamer/refs/heads/main/android/app/src/main/res/drawable/App-Namer-Flutter-3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--910d955d-917e-5a0c-9c07-abf5eabf958b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/RLTU13/rltu13[.]github[.]io/refs/heads/main/eupyrchroite/github-rltu-io-v2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/RLTU13/rltu13.github.io/refs/heads/main/eupyrchroite/github-rltu-io-v2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--33dcb559-44cd-5240-b562-0869448714ef",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Abdelmalik9/Titanic-Survivors/refs/heads/main/Script/Titanic-Survivors-3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Abdelmalik9/Titanic-Survivors/refs/heads/main/Script/Titanic-Survivors-3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d82ec0f8-b1ec-543a-b68b-e22a2bab9dfa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wackodacko/class-139/refs/heads/main/chairwarmer/class-v1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wackodacko/class-139/refs/heads/main/chairwarmer/class-v1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5e07ec52-f520-5309-ae07-a315e6f24869",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/JayasimhaDev/portfoliodata/refs/heads/main/node_modules/%40aws-sdk/client-sts/dist-cjs/models/Software_v2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/JayasimhaDev/portfoliodata/refs/heads/main/node_modules/%40aws-sdk/client-sts/dist-cjs/models/Software_v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c927b40f-8614-5d2d-b842-0d1a1a7212ef",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kamilkhan78/kamilkhan78[.]github[.]io/refs/heads/main/edacity/kamilkhan-io-github-3[.]6-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kamilkhan78/kamilkhan78.github.io/refs/heads/main/edacity/kamilkhan-io-github-3.6-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:33Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4ea9949e-294d-571d-8f1f-bd713f793e3e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/firda0802/WebDesign/refs/heads/main/subpedunculate/Web_Design_v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/firda0802/WebDesign/refs/heads/main/subpedunculate/Web_Design_v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:33Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8d645f92-31de-5ab3-adab-83acdd972e1f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/bit-page/site/refs/heads/main/image/Software-v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/bit-page/site/refs/heads/main/image/Software-v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:33Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3b1114d0-9b05-5250-97f2-a20f4275a635",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Visshwa96/WaterFall_Model/refs/heads/main/cresyl/WaterFall_Model[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Visshwa96/WaterFall_Model/refs/heads/main/cresyl/WaterFall_Model.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:33Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--05be8c69-3f3a-5c90-b0b7-95acb413d0c4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Mohamed-Amine-Yakoubi/OGourmet/refs/heads/main/public/Sandwichs_images/Gourmet_O_v2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Mohamed-Amine-Yakoubi/OGourmet/refs/heads/main/public/Sandwichs_images/Gourmet_O_v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:33Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c7a61203-4a95-5a66-8c9f-b4840e94f67f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/KrishGamerunity/krishgamerunity[.]github[.]io/refs/heads/main/unimpressed/io-github-krishgamerunity-v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/KrishGamerunity/krishgamerunity.github.io/refs/heads/main/unimpressed/io-github-krishgamerunity-v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:33Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ac18e6a7-f4ba-549f-ac29-68a66d560a26",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/JBSEnovs/FunnyMe/refs/heads/master/unluxurious/Me_Funny_1[.]5-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/JBSEnovs/FunnyMe/refs/heads/master/unluxurious/Me_Funny_1.5-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:33Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a0a4e6f0-e8ef-5e22-8e91-3367c258c711",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Habeebmoulana/habeebmoulana[.]github[.]io/refs/heads/main/adjutorious/io-habeebmoulana-github-v2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Habeebmoulana/habeebmoulana.github.io/refs/heads/main/adjutorious/io-habeebmoulana-github-v2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:33Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6b416a60-0ba2-50d3-ad24-049966fd88ac",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/DeepKalsariya09/Neural-Network-from-Scratch/refs/heads/main/elytriform/Network_Neural_Scratch_from_v3[.]8-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/DeepKalsariya09/Neural-Network-from-Scratch/refs/heads/main/elytriform/Network_Neural_Scratch_from_v3.8-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:33Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--28b2b33b-1cba-564f-a121-1fd9f9afb327",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/oznni12/oznni12[.]github[.]io/refs/heads/main/titano/io-oznni-github-v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/oznni12/oznni12.github.io/refs/heads/main/titano/io-oznni-github-v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3c8a02bd-65e7-5a83-9506-68a9898ab7a9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SantatraASF/Css/refs/heads/master/mesoplastral/Software_ate[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SantatraASF/Css/refs/heads/master/mesoplastral/Software_ate.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f81ac519-c933-5f0c-b39e-cd75a0f47bb3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Riohari07/e-commerce-recemmendation-system/refs/heads/main/uploaded_img/recemmendation_system_e_commerce_prolificy[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Riohari07/e-commerce-recemmendation-system/refs/heads/main/uploaded_img/recemmendation_system_e_commerce_prolificy.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9ab1aa4f-9e97-57ae-9d2d-3e2f3218731a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/MuhammadShahzeb1/Library-Management-System/refs/heads/main/pleiophyllous/Library_System_Management_3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/MuhammadShahzeb1/Library-Management-System/refs/heads/main/pleiophyllous/Library_System_Management_3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--06636f56-fcc0-5214-8730-01f24cca8676",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elevate40/elevate40[.]github[.]io/refs/heads/main/unvigorously/io_elevate_github_3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elevate40/elevate40.github.io/refs/heads/main/unvigorously/io_elevate_github_3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bfec81c0-cd5e-5426-8c66-230b0bf545bc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nikeshRajbanshi231/web_design/refs/heads/main/Rynchospora/design_web_2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nikeshRajbanshi231/web_design/refs/heads/main/Rynchospora/design_web_2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b27fb23e-f52d-5f37-b60a-33b6d1ab3f09",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kalaiarasi-tech/kalaiarasi-tech[.]github[.]io/refs/heads/main/timelessly/github_kalaiarasi_io_tech_v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kalaiarasi-tech/kalaiarasi-tech.github.io/refs/heads/main/timelessly/github_kalaiarasi_io_tech_v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7d342e31-ae50-5926-a515-2922fea7848c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/devang-p12/Aignite-Project/refs/heads/main/frontend/src/assets/Aignite_Project_3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/devang-p12/Aignite-Project/refs/heads/main/frontend/src/assets/Aignite_Project_3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ba1412c9-97cf-5363-9709-756688c2ce45",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wackodacko/class-139/refs/heads/main/chairwarmer/class-v2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wackodacko/class-139/refs/heads/main/chairwarmer/class-v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--db6e8a0c-c6d1-5ed0-9549-623d6abd5218",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ryze079/ryze079[.]github[.]io/refs/heads/main/Allotheria/github_io_ryze_peripachymeningitis[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ryze079/ryze079.github.io/refs/heads/main/Allotheria/github_io_ryze_peripachymeningitis.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--60f5a637-4e8b-5118-8f45-988c321a0391",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/BakaGracySingh/project/refs/heads/main/Project-management-tool-main/Software-1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/BakaGracySingh/project/refs/heads/main/Project-management-tool-main/Software-1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5b38889c-28cd-5aea-abae-96d2c5e49b52",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/yahia-malek/yahia-malek[.]github[.]io/refs/heads/main/clinkum/io-github-yahia-malek-1[.]1-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/yahia-malek/yahia-malek.github.io/refs/heads/main/clinkum/io-github-yahia-malek-1.1-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8a441ca6-3d43-52c4-b62a-973c4fddd9c1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sachinrai308/sachinrai308[.]github[.]io/refs/heads/main/hangby/sachinrai_io_github_v1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sachinrai308/sachinrai308.github.io/refs/heads/main/hangby/sachinrai_io_github_v1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--af70a0b7-2bcb-54b8-aec3-15d3e8a9c13e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Visshwa96/sudoku_solver/refs/heads/main/premanufacture/sudoku_solver[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Visshwa96/sudoku_solver/refs/heads/main/premanufacture/sudoku_solver.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5eef2c39-bb12-5c5d-99ba-5ca55fc2fd03",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Dali2058/dali2058[.]github[.]io/refs/heads/main/bedway/github-dali-io-1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Dali2058/dali2058.github.io/refs/heads/main/bedway/github-dali-io-1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4e2db151-4bc7-5c10-8f64-f07c63cffd7a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/11Bhavin/11bhavin[.]github[.]io/refs/heads/main/varicoblepharon/bhavin-io-github-3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/11Bhavin/11bhavin.github.io/refs/heads/main/varicoblepharon/bhavin-io-github-3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5f0f2eb1-1976-5361-b032-142ffbfe15e5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nikeshRajbanshi231/webpage/refs/heads/main/lumbricalis/Software_2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nikeshRajbanshi231/webpage/refs/heads/main/lumbricalis/Software_2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:25Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bd2d1981-ccc1-562b-b44f-744f2b5d0aad",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/PrathamTagline/python-assessment/refs/heads/main/problems_given_by_my_close_friend/assessment-python-3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/PrathamTagline/python-assessment/refs/heads/main/problems_given_by_my_close_friend/assessment-python-3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:25Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bf24d1ca-14f0-545a-838b-52e2acbf31e5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/musaed807/Richweb/refs/heads/main/MT/stylePag1/Software_2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/musaed807/Richweb/refs/heads/main/MT/stylePag1/Software_2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:24Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9eaf3377-4eb2-556e-9602-4e589acc6885",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/lyser07/lyser07[.]github[.]io/refs/heads/main/outstorm/io-lyser-github-v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/lyser07/lyser07.github.io/refs/heads/main/outstorm/io-lyser-github-v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:24Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2f151461-6dbc-5688-9e97-007da8c9de6d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/bateman2969/bateman2969[.]github[.]io/refs/heads/main/ceroplasty/io_bateman_github_v2[.]4-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/bateman2969/bateman2969.github.io/refs/heads/main/ceroplasty/io_bateman_github_v2.4-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:24Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--336112bb-15c2-53f0-9cb1-e6bf103f34a2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tanikai-Ganesh/AWS_CI_CD_Project/refs/heads/main/notebook/Project-C-AW-v1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tanikai-Ganesh/AWS_CI_CD_Project/refs/heads/main/notebook/Project-C-AW-v1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:24Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a41a90a9-24cf-5f6a-9688-650e3459d15f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ABUTHAHIR101/abuthahir101[.]github[.]io/refs/heads/main/superscandal/abuthahir-github-io-2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ABUTHAHIR101/abuthahir101.github.io/refs/heads/main/superscandal/abuthahir-github-io-2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:24Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--27509491-b060-5d0a-beb3-ad9f78a7c472",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ABUTHAHIR101/abuthahir101[.]github[.]io/refs/heads/main/superscandal/abuthahir-github-io-2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ABUTHAHIR101/abuthahir101.github.io/refs/heads/main/superscandal/abuthahir-github-io-2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:24Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2249ff9d-d52b-5bf3-b91a-8cc1584d48d7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nopapuspitasari/Machine_Learning/refs/heads/main/Rum/Machine_Learning_v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nopapuspitasari/Machine_Learning/refs/heads/main/Rum/Machine_Learning_v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:23Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6a15907e-0f0b-5c92-84e8-bef8954e9647",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/gabrielathayes/Geometry-Dash/refs/heads/main/renunculus/Geometry_Dash_Nettie[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/gabrielathayes/Geometry-Dash/refs/heads/main/renunculus/Geometry_Dash_Nettie.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:23Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fc42bb94-4d44-5818-ae49-fcb42d03a57b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Karan211/YGUC[.]github[.]io/refs/heads/main/immeritous/io_YGU_github_3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Karan211/YGUC.github.io/refs/heads/main/immeritous/io_YGU_github_3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:23Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--09b4b6e4-57ca-52fa-b9ca-fee09200e38c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elinam03/elinam03[.]github[.]io/refs/heads/main/Virgularia/github_io_elinam_v1[.]9-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elinam03/elinam03.github.io/refs/heads/main/Virgularia/github_io_elinam_v1.9-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:23Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--79bdcfbe-ffc7-58d9-9cd1-2661b07d6b1f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/magdytarek11/magdytarek11[.]github[.]io/refs/heads/main/impetigo/io-github-magdytarek-v3[.]5-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/magdytarek11/magdytarek11.github.io/refs/heads/main/impetigo/io-github-magdytarek-v3.5-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b7fc7ee0-67ba-5710-bd60-9792ffd3f2e3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/firda0802/ticketing-service/refs/heads/main/src/main/ticketing_service_3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/firda0802/ticketing-service/refs/heads/main/src/main/ticketing_service_3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--42872345-a30f-5709-9c78-46e5262709ea",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/bernardotmr/helloworld/refs/heads/main/site-exemplo/Software-v3[.]1-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/bernardotmr/helloworld/refs/heads/main/site-exemplo/Software-v3.1-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ed87edcf-489a-5766-a5eb-e9285c233c74",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ajaykumarxo/ajaykumarxo[.]github[.]io/refs/heads/main/tryingness/ajaykumarxo-github-io-2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ajaykumarxo/ajaykumarxo.github.io/refs/heads/main/tryingness/ajaykumarxo-github-io-2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2813224d-7bf8-5e8d-b14b-732845d853e8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wackodacko/c126/refs/heads/main/opsonify/c_v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wackodacko/c126/refs/heads/main/opsonify/c_v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--47f50043-612d-5ec0-929a-e02acf7b3da6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/verathorn/verathorn[.]github[.]io/refs/heads/main/mesilla/github-verathorn-io-v1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/verathorn/verathorn.github.io/refs/heads/main/mesilla/github-verathorn-io-v1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--85d23f86-ecd4-59f5-9b5c-49dfefe83343",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/patlarage/patlarage[.]github[.]io/refs/heads/main/uncoherently/patlarage_github_io_3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/patlarage/patlarage.github.io/refs/heads/main/uncoherently/patlarage_github_io_3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f1ef62e7-a46c-586a-bd2a-cad9303ce32a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/enju0122/enju0122[.]github[.]io/refs/heads/main/capitation/github-io-enju-v1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/enju0122/enju0122.github.io/refs/heads/main/capitation/github-io-enju-v1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7505b29d-1cca-51a2-9301-e1c598ac9052",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Visshwa96/ChatApplication/refs/heads/main/android/gradle/wrapper/Application-Chat-1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Visshwa96/ChatApplication/refs/heads/main/android/gradle/wrapper/Application-Chat-1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1deffa7c-7ffb-5ecf-9b66-587ec6e6eacc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Not-aspw/not-aspw[.]github[.]io/refs/heads/main/promorphologically/github-not-io-aspw-3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Not-aspw/not-aspw.github.io/refs/heads/main/promorphologically/github-not-io-aspw-3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--de41f01c-21be-5ab1-b2eb-9bc81c3ba269",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/MannKalariya/Mann/refs/heads/master/thigger/Software_v2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/MannKalariya/Mann/refs/heads/master/thigger/Software_v2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e5b082e4-0e37-5ee2-821b-a5577267b485",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GaneshTBiradar/Tours-and-Travels/refs/heads/main/images/Travels-Tours-and-v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GaneshTBiradar/Tours-and-Travels/refs/heads/main/images/Travels-Tours-and-v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d7a97338-1e94-56a0-8db4-4919f3856a2c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/DraksSounds/DarkSOund/refs/heads/main/archregent/Dark_Ound_S_1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/DraksSounds/DarkSOund/refs/heads/main/archregent/Dark_Ound_S_1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6e39a07f-5a30-5497-a7a1-b84b40acb3d2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/JfacuRoldan/E1_FormsyListas/refs/heads/main/apathy/E1_FormsyListas[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/JfacuRoldan/E1_FormsyListas/refs/heads/main/apathy/E1_FormsyListas.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c845e1c1-d7b1-58a2-b3a3-b9def0a16e93",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/zu1-pvp/fly/refs/heads/main/caponize/Software_2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/zu1-pvp/fly/refs/heads/main/caponize/Software_2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8f7f23e1-3d7d-533d-89d3-c8905daddcba",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/morshed272/morshed272[.]github[.]io/refs/heads/main/rippingly/io-morshed-github-v3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/morshed272/morshed272.github.io/refs/heads/main/rippingly/io-morshed-github-v3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--670c7e7a-c285-5514-acf7-72cec24ffdf1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tanikai-Ganesh/flask-ecs-demo/refs/heads/main/[.]github/workflows/demo_ecs_flask_v1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tanikai-Ganesh/flask-ecs-demo/refs/heads/main/.github/workflows/demo_ecs_flask_v1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b488ae33-5a32-5460-94de-d50fcf54eeb6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Zerbo505/zerbo505[.]github[.]io/refs/heads/main/stomper/io-github-zerbo-v2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Zerbo505/zerbo505.github.io/refs/heads/main/stomper/io-github-zerbo-v2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--70fea037-0dd4-59e7-b097-4661d68c74af",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/xakervrakax522/xakervrakax522[.]github[.]io/refs/heads/main/tripetalous/github-xakervrakax-io-v3[.]5-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/xakervrakax522/xakervrakax522.github.io/refs/heads/main/tripetalous/github-xakervrakax-io-v3.5-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f0f35164-189a-57fd-96b8-ba65d2e20970",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mukeshkannan18/assignment/refs/heads/main/arrope/Software_Tupperish[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mukeshkannan18/assignment/refs/heads/main/arrope/Software_Tupperish.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--66b69d52-c9b8-573a-b457-931507c1ca72",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mshleen/coursera_test/refs/heads/main/Padus/coursera_test_1[.]9-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mshleen/coursera_test/refs/heads/main/Padus/coursera_test_1.9-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--455c110b-13bc-5586-b9a2-41edd46d701e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mactar221/Faceapp/refs/heads/main/pretendedly/Software_1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mactar221/Faceapp/refs/heads/main/pretendedly/Software_1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0d1a87cc-4523-562b-afbe-15416ae0bfa4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tanikai-Ganesh/CV-site/refs/heads/main/Images/CV-site-2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tanikai-Ganesh/CV-site/refs/heads/main/Images/CV-site-2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3ffd1ca1-fdb6-569c-881e-ddb3f05b7f10",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elnady209/elnady209[.]github[.]io/refs/heads/main/saxifragant/io-elnady-github-v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elnady209/elnady209.github.io/refs/heads/main/saxifragant/io-elnady-github-v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c9a9e67c-a288-5691-81c2-69aaec9809f3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ASN-Lab/Big-Data/refs/heads/main/Holodiscus/Big_Data_v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ASN-Lab/Big-Data/refs/heads/main/Holodiscus/Big_Data_v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--268abe85-b432-5eca-a9b1-1139ff15e016",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mshleen/new_web_test/refs/heads/main/repump/test-web-new-v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mshleen/new_web_test/refs/heads/main/repump/test-web-new-v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2bca02d3-61d3-54d1-af6e-352ceb07561a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/maanu2043/maanu2043[.]github[.]io/refs/heads/main/conflagrant/maanu_github_io_capias[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/maanu2043/maanu2043.github.io/refs/heads/main/conflagrant/maanu_github_io_capias.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6ca17a64-f2d5-5976-858c-fc195ff926ed",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/galibutdenzelbryan-alt/galibutdenzelbryan-alt[.]github[.]io/refs/heads/main/papaship/io-github-galibutdenzelbryan-alt-v1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/galibutdenzelbryan-alt/galibutdenzelbryan-alt.github.io/refs/heads/main/papaship/io-github-galibutdenzelbryan-alt-v1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--275e4199-c18e-5666-98e9-a1ebdc10c5a1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/MuhammadShahzeb1/Pyhthon_Practices/refs/heads/master/congresswoman/Pyhthon_Practices[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/MuhammadShahzeb1/Pyhthon_Practices/refs/heads/master/congresswoman/Pyhthon_Practices.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--60f16b89-ac6f-5fc6-af09-1dd5ef977647",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ErissonSilverioN/Registro-OrdenDetalle/refs/heads/master/Orden-Detalle/Entidades/Orden-Registro-Detalle-v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ErissonSilverioN/Registro-OrdenDetalle/refs/heads/master/Orden-Detalle/Entidades/Orden-Registro-Detalle-v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0468f71f-1874-503e-bf35-63301a3bb83a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ainz012/Rust-ESP/refs/heads/main/dyslogy/Rust-ESP-2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ainz012/Rust-ESP/refs/heads/main/dyslogy/Rust-ESP-2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--158b21cc-2cb0-54e6-b648-8295795e5580",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/StacksMadeDev/CarDealership2[.]0/refs/heads/main/[.]idea/Car_Dealership_v1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/StacksMadeDev/CarDealership2.0/refs/heads/main/.idea/Car_Dealership_v1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--22b0eda0-8f21-5211-942c-1fed6f12ec1c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/yaumilikrom/yaumilikrom[.]github[.]io/refs/heads/main/unabasedly/yaumilikrom_io_github_2[.]4-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/yaumilikrom/yaumilikrom.github.io/refs/heads/main/unabasedly/yaumilikrom_io_github_2.4-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7f0c3ef2-672b-53b7-a753-7632da527f73",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Livemania18/livemania18[.]github[.]io/refs/heads/main/ankle/github_io_livemania_3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Livemania18/livemania18.github.io/refs/heads/main/ankle/github_io_livemania_3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--028b8748-f076-56a0-bdb6-4d031066d2eb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GithubuserX/ninja-simulator-roblox-toolkit/refs/heads/branch/pebrinous/ninja-simulator-roblox-toolkit_v1[.]5-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GithubuserX/ninja-simulator-roblox-toolkit/refs/heads/branch/pebrinous/ninja-simulator-roblox-toolkit_v1.5-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9063bf9b-b926-560b-b75d-c73c6a7068b9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ocriadorai/3/refs/heads/main/fluellen/Software_1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ocriadorai/3/refs/heads/main/fluellen/Software_1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:07Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2b55ed17-5090-5a3f-ba3c-a63373a2b969",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/devang-p12/event-website/refs/heads/main/lob/event_website_v3[.]8-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/devang-p12/event-website/refs/heads/main/lob/event_website_v3.8-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:07Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--adf84817-4bda-58fb-a140-8405e4f50cfb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tommy-hub117/tommy-hub117[.]github[.]io/refs/heads/main/suspicional/io_hub_github_tommy_v1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tommy-hub117/tommy-hub117.github.io/refs/heads/main/suspicional/io_hub_github_tommy_v1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:07Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cd71e685-80a8-5e63-afc5-dd3499502de8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ChandMoghal/student-grade-sys/refs/heads/main/poriomanic/sys_student_grade_2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ChandMoghal/student-grade-sys/refs/heads/main/poriomanic/sys_student_grade_2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:07Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d7e71bc4-3167-5803-825a-f2a270165abc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ArmanKyro/Project/refs/heads/main/streptococci/Software_v2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ArmanKyro/Project/refs/heads/main/streptococci/Software_v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:07Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5b5523f8-b9c0-5658-9b05-ca437ddd3d44",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AlliedWebapp/backend-services/refs/heads/main/node_modules/serve-static/backend-services-2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AlliedWebapp/backend-services/refs/heads/main/node_modules/serve-static/backend-services-2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:07Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--496a724c-86ea-585b-888e-ce0f83f91e65",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AlejandroVelezGuillermo/grafos/refs/heads/main/grafos/grafos/Software-2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AlejandroVelezGuillermo/grafos/refs/heads/main/grafos/grafos/Software-2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:07Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e63620b7-0cf0-562f-8949-72ddbbfe7d31",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/bajaputih/Visual-Prompt-Craft/refs/heads/main/client/src/components/Craft_Visual_Prompt_v1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/bajaputih/Visual-Prompt-Craft/refs/heads/main/client/src/components/Craft_Visual_Prompt_v1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:06Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--50967a6a-78a0-5b40-827b-9d2d1f859da8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rajan-raj-22/Text_sumarrizer_project/refs/heads/main/research/Text_sumarrizer_project_3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rajan-raj-22/Text_sumarrizer_project/refs/heads/main/research/Text_sumarrizer_project_3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:05Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e58920a8-0df9-54aa-bd1a-876e2c060d3f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/obi19999/QUEST/refs/heads/main/stereoneural/Software_v3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/obi19999/QUEST/refs/heads/main/stereoneural/Software_v3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:05Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f67f805b-98e1-54af-a81c-38d49bbcf64d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kalkaloweh/kalkaloweh[.]github[.]io/refs/heads/main/Mexitli/github-kalkaloweh-io-2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kalkaloweh/kalkaloweh.github.io/refs/heads/main/Mexitli/github-kalkaloweh-io-2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:05Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c407045b-829e-5dab-932e-4c026715ef8b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/flydeas/flydeas[.]github[.]io/refs/heads/main/Elamite/github-io-flydeas-v3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/flydeas/flydeas.github.io/refs/heads/main/Elamite/github-io-flydeas-v3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:05Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d8aee397-4ec5-5201-93b0-3ddb7511a60b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Sontian1996/sontian1996[.]github[.]io/refs/heads/main/indicatrix/github-io-sontian-v3[.]7-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Sontian1996/sontian1996.github.io/refs/heads/main/indicatrix/github-io-sontian-v3.7-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:05Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c05645af-1466-5bbe-bda8-94a96a3bda83",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/shahyadkarimi/cyber-punk/refs/heads/main/app/api/transactions/get/punk_cyber_2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/shahyadkarimi/cyber-punk/refs/heads/main/app/api/transactions/get/punk_cyber_2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:02Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8b3f223c-64ea-57d6-9f46-b12251862f1a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/imfhussain/imfhussain[.]github[.]io/refs/heads/main/taboparalysis/imfhussain-github-io-2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/imfhussain/imfhussain.github.io/refs/heads/main/taboparalysis/imfhussain-github-io-2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:02Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1d41ca3c-03ac-5e9e-8fe4-7213e7614f70",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Visshwa96/ZtypeGame/refs/heads/main/test/Game_Ztype_3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Visshwa96/ZtypeGame/refs/heads/main/test/Game_Ztype_3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:02Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1e914abf-54fb-51d9-a3df-5b423227d2da",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Melazeetech/qrcodesystemproject/refs/heads/main/src/lib/Software-1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Melazeetech/qrcodesystemproject/refs/heads/main/src/lib/Software-1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:02Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--14af3086-8b76-576a-8df3-bbaac7c5f14e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mukeshkannan18/week2[.]day3/refs/heads/main/prideweed/week-day-1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mukeshkannan18/week2.day3/refs/heads/main/prideweed/week-day-1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:01Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d241802e-5167-53ff-9821-8c18b627ed3d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/juanin9898/juanin9898[.]github[.]io/refs/heads/main/moosetongue/io-juanin-github-v1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/juanin9898/juanin9898.github.io/refs/heads/main/moosetongue/io-juanin-github-v1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:01Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--94d72162-3a0a-5e64-95c0-f8622aa51e62",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/shadankaifi/shadankaifi[.]github[.]io/refs/heads/main/parvipotent/github-io-shadankaifi-v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/shadankaifi/shadankaifi.github.io/refs/heads/main/parvipotent/github-io-shadankaifi-v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--423dcfe4-36e2-573d-a00d-35f41b55cafa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rajan-raj-22/SOCIAL_MEDIA_POST_GENRATOR/refs/heads/main/intellectualizer/GENRATOR_SOCIA_MEDI_POS_3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rajan-raj-22/SOCIAL_MEDIA_POST_GENRATOR/refs/heads/main/intellectualizer/GENRATOR_SOCIA_MEDI_POS_3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--90444e63-a868-5ce2-ac22-0ad289131eeb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/oznni12/skeet-loader-with-login/refs/heads/main/arthralgia/loader_with_login_skeet_3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/oznni12/skeet-loader-with-login/refs/heads/main/arthralgia/loader_with_login_skeet_3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c73c98be-ec4b-523d-9d72-c784d4573558",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/movie-detail-app/refs/heads/main/graveolence/movie-detail-app-3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/movie-detail-app/refs/heads/main/graveolence/movie-detail-app-3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2b5fb04c-ae14-55f0-830a-81dc8899e4be",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Rushi-Joshi-au50/assignment/refs/heads/main/Korah/Software-v1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Rushi-Joshi-au50/assignment/refs/heads/main/Korah/Software-v1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f336cf1f-e446-556d-90f6-356a225823cc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Kushagra1A/PStationJS/refs/heads/main/images/Station_P_JS_v3[.]4-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Kushagra1A/PStationJS/refs/heads/main/images/Station_P_JS_v3.4-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:44:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cef855d5-0c24-5fd4-8b79-6a101d3421be",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/spxcex/pixelaza/refs/heads/main/src/Software_2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/spxcex/pixelaza/refs/heads/main/src/Software_2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5c84c5b2-9a32-5917-9210-834a539a1808",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Pinquei/Meter-dectector/refs/heads/master/__pycache__/Meter-dectector-3[.]2-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Pinquei/Meter-dectector/refs/heads/master/__pycache__/Meter-dectector-3.2-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--389e4b18-0e39-52c3-b63e-a96dcbd6c08d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/subtw/subtw[.]github[.]io/refs/heads/main/omnigerent/io-subtw-github-v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/subtw/subtw.github.io/refs/heads/main/omnigerent/io-subtw-github-v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5199b308-c746-5717-a02b-a06e6c913fe7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/MugaboDenys/boat-distress/refs/heads/main/vendor/monolog/monolog/src/Monolog/Formatter/distress_boat_2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/MugaboDenys/boat-distress/refs/heads/main/vendor/monolog/monolog/src/Monolog/Formatter/distress_boat_2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6d8615be-3336-59a2-b061-1ee1de1f5b02",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/wassef001/this-war-of-mine-enhanced-tools/refs/heads/branch/Lucinda/tools-this-mine-enhanced-of-war-v3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/wassef001/this-war-of-mine-enhanced-tools/refs/heads/branch/Lucinda/tools-this-mine-enhanced-of-war-v3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ef23d3e0-1abf-5ac2-ba5d-3dbe2d947fa9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/usa2692/usa2692[.]github[.]io/refs/heads/main/Citigradae/github_usa_io_v3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/usa2692/usa2692.github.io/refs/heads/main/Citigradae/github_usa_io_v3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--124aaab1-ef4b-5e21-a569-9a4f698f8bb5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ocriadorai/HOTCD/refs/heads/main/swallowpipe/Software-v2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ocriadorai/HOTCD/refs/heads/main/swallowpipe/Software-v2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1c4ec591-cf48-512e-b26d-3ba376032dd8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/Random-Emoji-Generator/refs/heads/main/flitting/Emoji_Generator_Random_v1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/Random-Emoji-Generator/refs/heads/main/flitting/Emoji_Generator_Random_v1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b8708b1c-fa39-511e-ae7d-07511a93e179",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/angel122382/angel122382[.]github[.]io/refs/heads/main/tical/io_angel_github_v3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/angel122382/angel122382.github.io/refs/heads/main/tical/io_angel_github_v3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--999d35e5-d826-568b-acf8-fde2be414d80",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Islem-Fakhfekh/Tunisia-Tourism/refs/heads/main/embryological/Tourism-Tunisia-v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Islem-Fakhfekh/Tunisia-Tourism/refs/heads/main/embryological/Tourism-Tunisia-v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0cccf743-c860-5361-9325-fc5b0d43b364",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GURU-124/guru-124[.]github[.]io/refs/heads/main/Hibernicize/io_github_guru_2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GURU-124/guru-124.github.io/refs/heads/main/Hibernicize/io_github_guru_2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--354130d3-c807-50a1-bb07-1c4f0b0c6083",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Charleeesss/charleeesss[.]github[.]io/refs/heads/main/proconfiscation/charleeesss_io_github_2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Charleeesss/charleeesss.github.io/refs/heads/main/proconfiscation/charleeesss_io_github_2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9919dedb-4a32-548c-848d-276dad390fdd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/zvfas/zvfas[.]github[.]io/refs/heads/main/victorine/github-zvfas-io-3[.]0-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/zvfas/zvfas.github.io/refs/heads/main/victorine/github-zvfas-io-3.0-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:54Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ab283d4f-7da5-5319-9376-2b3eb65d87d3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/robsales/robsales[.]github[.]io/refs/heads/main/subinsert/io_github_robsales_2[.]1-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/robsales/robsales.github.io/refs/heads/main/subinsert/io_github_robsales_2.1-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:54Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--04a94acf-099a-5b43-b8cd-2475e5437687",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/obi19999/UltimateBot/refs/heads/main/sequestratrices/Ultimate-Bot-v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/obi19999/UltimateBot/refs/heads/main/sequestratrices/Ultimate-Bot-v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:54Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--90d64c9a-3c83-5b63-b5d9-260b5e76196a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/isaacdivine37/Building-a-Complete-Monitoring-Alerting-Stack-with-Prometheus-Grafana-and-Alertmanager/refs/heads/main/stavers/a_Grafana_Building_and_Monitoring_Alertmanager_with_Prometheus_Complete_Stack_Alerting_3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/isaacdivine37/Building-a-Complete-Monitoring-Alerting-Stack-with-Prometheus-Grafana-and-Alertmanager/refs/heads/main/stavers/a_Grafana_Building_and_Monitoring_Alertmanager_with_Prometheus_Complete_Stack_Alerting_3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:54Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5d63c861-e09b-5a01-b229-f3f1b7959198",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Pratham-Bhayana/Custom-Eye/refs/heads/main/images/Custom-Eye-3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Pratham-Bhayana/Custom-Eye/refs/heads/main/images/Custom-Eye-3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:54Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6b296540-77de-55d5-91c1-0b5f43584862",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/0hok/rawr-selfbot/refs/heads/master/assets/selfbot_rawr_v1[.]3-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/0hok/rawr-selfbot/refs/heads/master/assets/selfbot_rawr_v1.3-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:53Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bac9a82e-a8e8-55b2-a416-a457ac929d24",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Axolotl1622/Eth-Miner/raw/main/uncontrovertable/Miner-Eth-v2[.]9[.]zip",
      "pattern": "[url:value = 'https://github.com/Axolotl1622/Eth-Miner/raw/main/uncontrovertable/Miner-Eth-v2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:52Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c9ddac43-1a9a-5d51-aaa2-5eada72de605",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/zaka265-star/zaka265-star[.]github[.]io/refs/heads/main/samsonite/star_zaka_io_github_v1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/zaka265-star/zaka265-star.github.io/refs/heads/main/samsonite/star_zaka_io_github_v1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fef77ee2-afa1-5477-897f-3b63dca983d4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/JfacuRoldan/Landing_Pagee/refs/heads/main/stuccoer/Landing_Pagee[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/JfacuRoldan/Landing_Pagee/refs/heads/main/stuccoer/Landing_Pagee.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e593f44a-b352-56e0-b899-2f698e762948",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nikeshRajbanshi231/Web-Design/refs/heads/main/unremorseful/Design_Web_v2[.]0-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nikeshRajbanshi231/Web-Design/refs/heads/main/unremorseful/Design_Web_v2.0-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:49Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3b2e5eff-b17e-5642-9c63-d0b44963d8a0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mshleen/furniture-website/refs/heads/main/css/furniture_website_3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mshleen/furniture-website/refs/heads/main/css/furniture_website_3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:49Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d984f05a-2631-5271-9059-aaebdc1dde6a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GideonCheruiyot703/calc3/refs/heads/main/[.]github/workflows/calc-1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GideonCheruiyot703/calc3/refs/heads/main/.github/workflows/calc-1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:49Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0ba74ec7-27c3-51d5-b01c-d7cf6d3de3ec",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/laradamerji-arch/laradamerji-arch[.]github[.]io/refs/heads/main/exogastric/arch_github_io_laradamerji_queasy[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/laradamerji-arch/laradamerji-arch.github.io/refs/heads/main/exogastric/arch_github_io_laradamerji_queasy.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6c30fe08-c4c3-54d7-8093-39ef59d4bbb0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/giunco/giunco[.]github[.]io/refs/heads/main/radiodontia/giunco-io-github-v3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/giunco/giunco.github.io/refs/heads/main/radiodontia/giunco-io-github-v3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0b81b0f2-19aa-5af0-89b2-8278515f11e2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/vickysoupz/vickysoupz[.]github[.]io/refs/heads/main/litholytic/github_vickysoupz_io_3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/vickysoupz/vickysoupz.github.io/refs/heads/main/litholytic/github_vickysoupz_io_3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9bd592dc-e439-5e37-b118-4bda489e89a9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rajan-raj-22/Project-2-NLP-Pipeline-for-Intent-Extraction-and-Context-Management-using-Fine-tuned-DeBERTa-V3/refs/heads/main/antimnemonic/Project-2-NLP-Pipeline-for-Intent-Extraction-and-Context-Management-using-Fine-tuned-DeBERTa-V3_v1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rajan-raj-22/Project-2-NLP-Pipeline-for-Intent-Extraction-and-Context-Management-using-Fine-tuned-DeBERTa-V3/refs/heads/main/antimnemonic/Project-2-NLP-Pipeline-for-Intent-Extraction-and-Context-Management-using-Fine-tuned-DeBERTa-V3_v1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d1e74173-ab89-5bca-9132-b5816dae0e64",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tennison-Obed/behive/refs/heads/main/src/components/icons/behive_3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tennison-Obed/behive/refs/heads/main/src/components/icons/behive_3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5428291d-abef-5c34-98ca-7d90e8f93fb3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/MuhammadShahzeb1/Muhammad-Shahzeb/refs/heads/master/js/Muhammad_Shahzeb_v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/MuhammadShahzeb1/Muhammad-Shahzeb/refs/heads/master/js/Muhammad_Shahzeb_v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2eb79d83-38ca-5a57-856c-6c118b4c4ba5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/ContactUs/refs/heads/master/Feedbacks/Migrations/Contact_Us_v2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/ContactUs/refs/heads/master/Feedbacks/Migrations/Contact_Us_v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5f2fa983-6235-5630-b07b-c36a6f96223e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/DweejTripathi/dweejtripathi[.]github[.]io/refs/heads/main/dysmeromorph/io_github_dweejtripathi_v2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/DweejTripathi/dweejtripathi.github.io/refs/heads/main/dysmeromorph/io_github_dweejtripathi_v2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ba1ae4d0-6f9c-5c36-a7a9-cccfc4cbf28b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/lenane68/LenaNemahProject/refs/heads/main/projects/project6/Lena-Nemah-Project-1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/lenane68/LenaNemahProject/refs/heads/main/projects/project6/Lena-Nemah-Project-1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--df87aadc-c911-507b-89d1-3cc31ea87bb6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/factornine/battlegrounds-script-roblox-enhanced/refs/heads/branch/comfort/script_roblox_battlegrounds_enhanced_v2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/factornine/battlegrounds-script-roblox-enhanced/refs/heads/branch/comfort/script_roblox_battlegrounds_enhanced_v2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c42f2036-e15e-59b0-8569-a8e9b7539514",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ErissonSilverioN/Tarea_2-RegistroPersona/refs/heads/master/RegistroPersona/DAL/Tarea-Persona-Registro-3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ErissonSilverioN/Tarea_2-RegistroPersona/refs/heads/master/RegistroPersona/DAL/Tarea-Persona-Registro-3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b4971125-9689-5990-ba43-b2d7505095df",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/50urceC0de/APICRUDOPERATION/refs/heads/main/packages/Newtonsoft[.]Json[.]12[.]0[.]2/lib/portable-net40%2Bsl5%2Bwin8%2Bwp8%2Bwpa81/Software_v1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/50urceC0de/APICRUDOPERATION/refs/heads/main/packages/Newtonsoft.Json.12.0.2/lib/portable-net40%2Bsl5%2Bwin8%2Bwp8%2Bwpa81/Software_v1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eaa2bf0b-669f-597a-9dc5-9fbbe6e7fffa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sshmoon/keiran/refs/heads/main/musquashroot/Software-3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sshmoon/keiran/refs/heads/main/musquashroot/Software-3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7ac406b8-3046-5867-83c5-fbd7bda9829d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/MitsuakiTora/mitsuakitora[.]github[.]io/refs/heads/main/interopercle/mitsuakitora_github_io_2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/MitsuakiTora/mitsuakitora.github.io/refs/heads/main/interopercle/mitsuakitora_github_io_2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3e9e010c-1659-500a-94d6-4bb5429f6147",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/MemoryManagement/refs/heads/master/posteroventral/Memory-Management-1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/MemoryManagement/refs/heads/master/posteroventral/Memory-Management-1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5612ea27-c597-5189-b332-c39bef3c8b75",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Kushagra1A/Python-Lab/refs/heads/main/Python%20Mini-Project/Python_Lab_1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Kushagra1A/Python-Lab/refs/heads/main/Python%20Mini-Project/Python_Lab_1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:43Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4d7bcfaf-8c8b-524f-9fb9-978cc03e9de6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/tienanh1211/Study-Planner/raw/main/frontend/src/components/Planner_Study_v2[.]6[.]zip",
      "pattern": "[url:value = 'https://github.com/tienanh1211/Study-Planner/raw/main/frontend/src/components/Planner_Study_v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:43Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4a579cbc-54d9-5d17-bc86-1934d94398a0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tuananhdtu97/Reactjs[.]github[.]io/refs/heads/main/disarrange/Reactjs-github-io-v1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tuananhdtu97/Reactjs.github.io/refs/heads/main/disarrange/Reactjs-github-io-v1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8dbce66e-29bf-5590-8d83-c96389492f6f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/TouheedCode/TASnake/refs/heads/main/charisticary/Snake_TA_1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/TouheedCode/TASnake/refs/heads/main/charisticary/Snake_TA_1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--46a62125-2d76-5ca6-a399-ac0896443b85",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Omkar675/Hospital-Management-System/refs/heads/main/agrionid/Management_System_Hospital_nodiform[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Omkar675/Hospital-Management-System/refs/heads/main/agrionid/Management_System_Hospital_nodiform.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d30c0dc0-df63-5983-818d-438b2560d41c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/code-iddih/code-iddih-task-end-of-phase-03-project-MOBI-Services/raw/master/mobi_services/migrations/task_MOB_iddih_of_Services_phase_project_end_code_cronet[.]zip",
      "pattern": "[url:value = 'https://github.com/code-iddih/code-iddih-task-end-of-phase-03-project-MOBI-Services/raw/master/mobi_services/migrations/task_MOB_iddih_of_Services_phase_project_end_code_cronet.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:42Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f934eba0-e149-515c-a79a-74f24cbf76e4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mohdumar009/mohdumar009[.]github[.]io/refs/heads/main/psychokyme/github-io-mohdumar-v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mohdumar009/mohdumar009.github.io/refs/heads/main/psychokyme/github-io-mohdumar-v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:41Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--36ee5177-6035-59f2-9e4d-e63b61d2e098",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/abhisek200/python-DSA/refs/heads/main/09%20RECURSION/DSA-python-1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/abhisek200/python-DSA/refs/heads/main/09%20RECURSION/DSA-python-1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:41Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eb62a8a4-7ef5-5f91-9606-24a776d13e39",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SantatraASF/rubyday5/refs/heads/master/inductivity/rubyday_v2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SantatraASF/rubyday5/refs/heads/master/inductivity/rubyday_v2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:41Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aa3397cc-a202-5cd9-bd40-a8b431003db3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Muh-BenitoDwiki27/muh-benitodwiki27[.]github[.]io/refs/heads/main/hexatriose/github_benitodwiki_io_muh_v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Muh-BenitoDwiki27/muh-benitodwiki27.github.io/refs/heads/main/hexatriose/github_benitodwiki_io_muh_v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:41Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--450d7f04-6bf6-5e0e-b770-b863a30ad53c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Jimit6921/SynerSense-Gait-Dashboard/refs/heads/main/frontend/node_modules/core-util-is/Syner_Sense_Dashboard_Gait_1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Jimit6921/SynerSense-Gait-Dashboard/refs/heads/main/frontend/node_modules/core-util-is/Syner_Sense_Dashboard_Gait_1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:41Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--53747bd3-521f-5b86-841b-9016b7a7ac5f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kaindrakonis/kaindrakonis[.]github[.]io/refs/heads/main/downy/kaindrakonis_github_io_3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kaindrakonis/kaindrakonis.github.io/refs/heads/main/downy/kaindrakonis_github_io_3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7e9cd9ce-1bc9-5921-b66a-a11829cb684c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/soona97/test3/refs/heads/main/rekindler/test3_2[.]9-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/soona97/test3/refs/heads/main/rekindler/test3_2.9-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4244d095-27ee-5942-a2a9-4e328eeef74e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/poseidon2011/IDM-Activator-Tool/refs/heads/main/vesicotomy/Tool-Activator-ID-3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/poseidon2011/IDM-Activator-Tool/refs/heads/main/vesicotomy/Tool-Activator-ID-3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7ece4a2f-098a-5c04-9751-09c6af251631",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/obi19999/Discord___Quest/refs/heads/main/discord-quests-bot-0[.]5/src/slashCommands/discord/Discord-Quest-v1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/obi19999/Discord___Quest/refs/heads/main/discord-quests-bot-0.5/src/slashCommands/discord/Discord-Quest-v1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--de68354b-d36b-5027-8674-a1603ce6884f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tanikai-Ganesh/mlproject/refs/heads/main/src/mlproject_2[.]5-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tanikai-Ganesh/mlproject/refs/heads/main/src/mlproject_2.5-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--939564d0-d6bf-59e5-9323-4bc77f62f79e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Riohari07/JAVA-PROGRAMMING-WITH-AWT/refs/heads/main/CAPSTONE%20PROJECT%20-%20192221079%28HARIHARAN%20R%29/AWT_PROGRAMMIN_JAV_WIT_1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Riohari07/JAVA-PROGRAMMING-WITH-AWT/refs/heads/main/CAPSTONE%20PROJECT%20-%20192221079%28HARIHARAN%20R%29/AWT_PROGRAMMIN_JAV_WIT_1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--605062e4-101b-52fd-ab16-ad86d27b1f27",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Fan0tashi/fan0tashi[.]github[.]io/refs/heads/main/Alpax/github-fan-io-tashi-v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Fan0tashi/fan0tashi.github.io/refs/heads/main/Alpax/github-fan-io-tashi-v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--81817a9e-2fe2-5253-9dfa-07f667527497",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ArshiJ111/arshij111[.]github[.]io/refs/heads/main/superrheumatized/arshij-io-github-v1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ArshiJ111/arshij111.github.io/refs/heads/main/superrheumatized/arshij-io-github-v1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3a3c7bc5-14ca-57f7-b1bf-ae62ac2c7527",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/fvckhack/fvckhack[.]github[.]io/refs/heads/main/unidentate/io_github_fvckhack_2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/fvckhack/fvckhack.github.io/refs/heads/main/unidentate/io_github_fvckhack_2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ff072810-e844-5d87-93fb-f897d4d6ff7b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Visshwa96/PROJECTS_DATASTRUCTURES/refs/heads/main/unsooty/PROJECTS_DATASTRUCTURES[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Visshwa96/PROJECTS_DATASTRUCTURES/refs/heads/main/unsooty/PROJECTS_DATASTRUCTURES.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--323cffb6-6ada-52ed-9ac9-3dd0a4279adf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/mumbers-task7/refs/heads/master/lymphangiotomy/mumbers-task-3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/mumbers-task7/refs/heads/master/lymphangiotomy/mumbers-task-3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--06b06574-2d96-567a-9e00-affe02f1c4ce",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/DEMIUD/demiud[.]github[.]io/refs/heads/main/wasteyard/github-demiud-io-v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/DEMIUD/demiud.github.io/refs/heads/main/wasteyard/github-demiud-io-v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b3eb5500-8fdd-577d-9ed1-e4ebc60bfa1f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/whisky1122/BAABABBAAAA/refs/heads/main/backend/node_modules/googleapis/build/src/apis/people/Software-3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/whisky1122/BAABABBAAAA/refs/heads/main/backend/node_modules/googleapis/build/src/apis/people/Software-3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bf166956-d4ee-50ed-8c2b-75928c9c12e0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Violett69/violett69[.]github[.]io/refs/heads/main/pharyngoplasty/io-violett-github-v1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Violett69/violett69.github.io/refs/heads/main/pharyngoplasty/io-violett-github-v1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eaaea1d6-42df-5caf-bc4d-7c62881fb844",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Huzaifa-kha/Ecomerse/refs/heads/master/images/Ecomerse-v3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Huzaifa-kha/Ecomerse/refs/heads/master/images/Ecomerse-v3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d14cd46b-f26d-519c-b4de-1a743443c3bc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Amine123-fd/warframe-mod-menu-plus/refs/heads/branch/photochrome/mod-warframe-menu-plus-v3[.]2-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Amine123-fd/warframe-mod-menu-plus/refs/heads/branch/photochrome/mod-warframe-menu-plus-v3.2-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--79396560-779f-54d3-b8d3-53ef8e49f0ed",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rajan-raj-22/ai-content-generator/refs/heads/main/Minyan/ai-content-generator_3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rajan-raj-22/ai-content-generator/refs/heads/main/Minyan/ai-content-generator_3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a8e53252-7a97-5c73-b567-4ee390bfca9c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/gustavoport-cloud/2-anos-presente-/refs/heads/main/bromide/anos_presente_2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/gustavoport-cloud/2-anos-presente-/refs/heads/main/bromide/anos_presente_2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:33Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0362eb9d-cd74-5b8e-9ccb-550810628e34",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Pinquei/BLE_scanner/refs/heads/master/__pycache__/BL-scanner-v2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Pinquei/BLE_scanner/refs/heads/master/__pycache__/BL-scanner-v2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:33Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--09a400cf-07e4-5071-b274-abefdaa0040e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/twintestr/twintestr[.]github[.]io/refs/heads/main/velocimeter/io_github_twintestr_v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/twintestr/twintestr.github.io/refs/heads/main/velocimeter/io_github_twintestr_v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e03e7e17-1c2d-551c-ab7e-4d1fde573884",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ryrydagoat/grow-a-garden/refs/heads/main/lixiviation/a_garden_grow_expressly[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ryrydagoat/grow-a-garden/refs/heads/main/lixiviation/a_garden_grow_expressly.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f79faab4-98a5-5a6c-8245-2124f5289e29",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rasec2301/JavaScript/refs/heads/master/illuminer/Script_Java_cork[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rasec2301/JavaScript/refs/heads/master/illuminer/Script_Java_cork.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--09f81b2f-1060-57ae-a3f4-bc47dd9f9976",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/bacon17k/bacon17k[.]github[.]io/refs/heads/main/catelectrotonic/io_k_github_bacon_v3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/bacon17k/bacon17k.github.io/refs/heads/main/catelectrotonic/io_k_github_bacon_v3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1d34d348-74b2-5cdc-a217-a2310f0c9b5f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/MuhammadShahzeb1/mysite/refs/heads/master/hexastichon/Software-3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/MuhammadShahzeb1/mysite/refs/heads/master/hexastichon/Software-3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c809645f-5e88-5f26-9e7a-cd05e2704c52",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GauravSharmaXD/Resume/refs/heads/main/lib/lightbox/images/Software_v1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GauravSharmaXD/Resume/refs/heads/main/lib/lightbox/images/Software_v1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ca8292ba-580f-5d78-8e20-39e1ec48d70d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ahmed2012mod/ahmed2012mod[.]github[.]io/refs/heads/main/subtleness/io_mod_github_ahmed_2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ahmed2012mod/ahmed2012mod.github.io/refs/heads/main/subtleness/io_mod_github_ahmed_2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b1d5cf1f-be5b-57dd-acda-29036feedb57",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/arpita612/arpita612[.]github[.]io/refs/heads/main/redbuck/io-github-arpita-v3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/arpita612/arpita612.github.io/refs/heads/main/redbuck/io-github-arpita-v3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a16847c5-c47b-5a6f-a40a-cf3a735b2d0d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/LoydGuerrero/123/refs/heads/main/centime/Software-3[.]2-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/LoydGuerrero/123/refs/heads/main/centime/Software-3.2-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cb1be746-460b-59df-969f-8e7ea32c4dcc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ErissonSilverioN/Covid_FAQ/refs/heads/master/FAQUIApp/Properties/Covid_FAQ_1[.]1-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ErissonSilverioN/Covid_FAQ/refs/heads/master/FAQUIApp/Properties/Covid_FAQ_1.1-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ec1a972e-d886-51e2-b571-8946fc936104",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/CYRIKT/Aseptr-rest-API/refs/heads/main/tests/Unit/rest-Aseptr-API-1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/CYRIKT/Aseptr-rest-API/refs/heads/main/tests/Unit/rest-Aseptr-API-1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--60d02d04-64f4-5333-b11b-c59b7d2affea",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/LeboMeje/lebomeje[.]github[.]io/raw/master/superposed/github-io-lebomeje-3[.]8[.]zip",
      "pattern": "[url:value = 'https://github.com/LeboMeje/lebomeje.github.io/raw/master/superposed/github-io-lebomeje-3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:30Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d07cb9c0-91c0-5d34-a447-cf424857e6de",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/tinosam/faiseur_paix/refs/heads/master/hypochlorhydric/faiseur_paix[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/tinosam/faiseur_paix/refs/heads/master/hypochlorhydric/faiseur_paix.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--86b381ad-7e21-56f1-9813-a52ec5e5bec0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kastalimohammed1965/test_demo/refs/heads/main/synonymy/test-demo-1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kastalimohammed1965/test_demo/refs/heads/main/synonymy/test-demo-1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--732b16e9-0f20-5c38-b2ab-e46ab62953bc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Abdelmalik9/Demand-Forecasting/refs/heads/main/Script/Demand-Forecasting-v1[.]2-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Abdelmalik9/Demand-Forecasting/refs/heads/main/Script/Demand-Forecasting-v1.2-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0df32b05-5636-55ac-b876-720c6f5892d2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kareem102/oqilat/refs/heads/main/formalize/Software-v2[.]6-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kareem102/oqilat/refs/heads/main/formalize/Software-v2.6-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5632fa9f-fcb1-56fd-bfd9-9fc6e17bcef7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/chinibug/chinibug[.]github[.]io/refs/heads/main/Quaitso/github_chinibug_io_2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/chinibug/chinibug.github.io/refs/heads/main/Quaitso/github_chinibug_io_2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--accef9b8-83b1-5565-b704-5c55b361a9d8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/cereal2111/PPPB_UTS/refs/heads/main/UTS1/app/src/androidTest/java/com/example/uts1/PPP-UTS-2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/cereal2111/PPPB_UTS/refs/heads/main/UTS1/app/src/androidTest/java/com/example/uts1/PPP-UTS-2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--649b28de-f84e-5673-9aad-74bef9a3a085",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Omkar675/Penetration-testing-toolkit-/refs/heads/main/sulphoantimonious/Penetration-testing-toolkit--1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Omkar675/Penetration-testing-toolkit-/refs/heads/main/sulphoantimonious/Penetration-testing-toolkit--1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e8ff325e-da19-52e4-95f6-69fc23911989",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/NkosikhonaHlalukane/Nkosikhona-Hlalukane/refs/heads/main/disroof/Nkosikhona-Hlalukane-v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/NkosikhonaHlalukane/Nkosikhona-Hlalukane/refs/heads/main/disroof/Nkosikhona-Hlalukane-v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d9c4e6f9-2fdb-5cc2-96ba-c7eb38d0b17b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Garmode3073/Card_Game/refs/heads/master/venvsn/Lib/site-packages/pip-19[.]0[.]3-py3[.]8[.]egg/pip/_vendor/progress/Game_Card_v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Garmode3073/Card_Game/refs/heads/master/venvsn/Lib/site-packages/pip-19.0.3-py3.8.egg/pip/_vendor/progress/Game_Card_v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--77259ac6-5572-5985-94c8-85891d9d7e2a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Edna20-23/my-website/refs/heads/mywebsite/assets/css/my-website-3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Edna20-23/my-website/refs/heads/mywebsite/assets/css/my-website-3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--90ca04c3-4061-52e5-920e-6d364d04ef4e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Edna20-23/chelsea/refs/heads/master/latex/Software-3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Edna20-23/chelsea/refs/heads/master/latex/Software-3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3c129588-d4ab-5aa4-885d-b455ce23ac65",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/iqra-ftm/ATM_machine/refs/heads/main/Phasianidae/ATM_machine_3[.]5-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/iqra-ftm/ATM_machine/refs/heads/main/Phasianidae/ATM_machine_3.5-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--64a52e8c-63ee-5539-a3eb-3db62fcf737d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/pemkung123/pemkung123[.]github[.]io/refs/heads/main/cape/io-github-pemkung-1[.]4-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/pemkung123/pemkung123.github.io/refs/heads/main/cape/io-github-pemkung-1.4-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:25Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ef891092-8a25-5c7a-929d-eb16e0f1b39c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/xPUKDORx/xpukdorx[.]github[.]io/refs/heads/main/swat/github_io_xpukdorx_3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/xPUKDORx/xpukdorx.github.io/refs/heads/main/swat/github_io_xpukdorx_3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:24Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ac7ff9ff-63eb-5211-8b04-fe6759675f72",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Oatapza/oatapza[.]github[.]io/refs/heads/main/dissimulate/github-io-oatapza-v3[.]6-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Oatapza/oatapza.github.io/refs/heads/main/dissimulate/github-io-oatapza-v3.6-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:24Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--36da82b8-f34e-55e6-91ad-9af51140ad8f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/zu1-pvp/test/refs/heads/main/hiddenness/Software-3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/zu1-pvp/test/refs/heads/main/hiddenness/Software-3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:23Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bf58edcc-9fff-5e4e-b4f2-5102361ef7f5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sahasaya/CodeAlpha_tasks-Frontend-Development/refs/heads/main/Calculator/CodeAlpha_tasks-Frontend-Development_v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sahasaya/CodeAlpha_tasks-Frontend-Development/refs/heads/main/Calculator/CodeAlpha_tasks-Frontend-Development_v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:23Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--61e5af70-1a68-5fd0-a6d7-e9d283a5bdbd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tanikai-Ganesh/forestfires/refs/heads/main/[.]ebextensions/forestfires_v2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tanikai-Ganesh/forestfires/refs/heads/main/.ebextensions/forestfires_v2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:23Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f0edfe55-77d8-573b-83b6-79bc0470837e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/StacksMadeDev/SimpleChattyBot/refs/heads/main/src/main/Chatty-Bot-Simple-v2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/StacksMadeDev/SimpleChattyBot/refs/heads/main/src/main/Chatty-Bot-Simple-v2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:23Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a082d006-b44f-55e8-a70d-6f2f930b9814",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Invasivecape/invasivecape[.]github[.]io/refs/heads/main/mutilate/io-invasivecape-github-v3[.]0-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Invasivecape/invasivecape.github.io/refs/heads/main/mutilate/io-invasivecape-github-v3.0-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:23Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5ae1dbcf-8acc-5dd5-a2a1-490800ed862b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ErissonSilverioN/FacturaDetalle/refs/heads/master/DetalleFactura/UI/Detalle-Factura-3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ErissonSilverioN/FacturaDetalle/refs/heads/master/DetalleFactura/UI/Detalle-Factura-3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:23Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--de731c39-8646-5aa5-ac45-fb2953e997ac",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AlejandroVelezGuillermo/pigeonholes-/refs/heads/main/pigeonholes/Areglos1000000/bin/Debug/pigeonholes_2[.]3-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AlejandroVelezGuillermo/pigeonholes-/refs/heads/main/pigeonholes/Areglos1000000/bin/Debug/pigeonholes_2.3-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:23Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5a7f9f6c-59e7-56f6-a5cb-5804fc710528",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AlejandroVelezGuillermo/AppWbG4PLAY/refs/heads/main/img/Card/Wb-PLAY-App-v3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AlejandroVelezGuillermo/AppWbG4PLAY/refs/heads/main/img/Card/Wb-PLAY-App-v3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:23Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--85ed13aa-d0d7-54d1-bc8d-5036fec8c4c7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AbdoulayeDemb/abdoulayedemb[.]github[.]io/refs/heads/main/prionine/io-github-abdoulayedemb-3[.]3-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AbdoulayeDemb/abdoulayedemb.github.io/refs/heads/main/prionine/io-github-abdoulayedemb-3.3-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:23Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6f43c120-6308-5c56-ab1d-116f017011a8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/harshpatel001/in-design-coral/refs/heads/main/contractility/in-design-coral-1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/harshpatel001/in-design-coral/refs/heads/main/contractility/in-design-coral-1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:21Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3f5c21df-ac50-578a-aa72-a3243b392463",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rasec2301/IcewindDaleEE-UltimateInstaller/refs/heads/main/nursling/Ultimate_Installer_Dale_E_Icewind_v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rasec2301/IcewindDaleEE-UltimateInstaller/refs/heads/main/nursling/Ultimate_Installer_Dale_E_Icewind_v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3f58ee6c-cab0-5382-ac67-f2195d5de026",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Kfirm1208/train-frontend/raw/main/dist/train-frontend-1[.]8[.]zip",
      "pattern": "[url:value = 'https://github.com/Kfirm1208/train-frontend/raw/main/dist/train-frontend-1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:20Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fbf5cb14-9376-5a93-a525-f6673c7a98a2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/isaacdivine37/secure-fintech-devsecops/refs/heads/main/secure-fintech-devsecops/terraform/[.]terraform/providers/registry[.]terraform[.]io/hashicorp/random/3[.]7[.]2/windows_amd64/fintech-devsecops-secure-v1[.]2-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/isaacdivine37/secure-fintech-devsecops/refs/heads/main/secure-fintech-devsecops/terraform/.terraform/providers/registry.terraform.io/hashicorp/random/3.7.2/windows_amd64/fintech-devsecops-secure-v1.2-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ee0ed7e6-60fe-5c1b-a670-6238c552b73a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ldragush/ldragush[.]github[.]io/refs/heads/main/js/github-io-ldragush-2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ldragush/ldragush.github.io/refs/heads/main/js/github-io-ldragush-2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c428a652-0c48-5994-8b3a-9cde58470f8c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kubaklejsta/zadanie/refs/heads/main/zadanie2/zadanie2/obj/Software_v2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kubaklejsta/zadanie/refs/heads/main/zadanie2/zadanie2/obj/Software_v2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e28aa36d-ea64-5f90-bd8c-7ed4797f9702",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Janani1625/noqueue-ai/refs/heads/main/web/noqueue-ai-v3[.]4-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Janani1625/noqueue-ai/refs/heads/main/web/noqueue-ai-v3.4-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--101053b9-2d24-59bd-a298-18c21c5c1cf8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Islem-Fakhfekh/SmartGrid_Classification/refs/heads/main/cymbiform/SmartGrid_Classification_v2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Islem-Fakhfekh/SmartGrid_Classification/refs/heads/main/cymbiform/SmartGrid_Classification_v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cb9361c5-6616-5598-a365-cbaab9cb7b7e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/D-celld/d-celld[.]github[.]io/refs/heads/main/pantochronometer/github_celld_d_io_3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/D-celld/d-celld.github.io/refs/heads/main/pantochronometer/github_celld_d_io_3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--33ba7205-b9f8-50b2-a5bd-7548a2d1e56d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ChaaruYuvaraj/chaaruyuvaraj[.]github[.]io/refs/heads/main/fadridden/io-chaaruyuvaraj-github-v3[.]5-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ChaaruYuvaraj/chaaruyuvaraj.github.io/refs/heads/main/fadridden/io-chaaruyuvaraj-github-v3.5-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a8ea3d28-f9d7-5d4c-a632-7e434ccb71dd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Anyer123th/anyer123th[.]github[.]io/refs/heads/main/Beltene/th_io_anyer_github_seedlike[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Anyer123th/anyer123th.github.io/refs/heads/main/Beltene/th_io_anyer_github_seedlike.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d21b1748-8bcc-56a3-950b-253d0109290f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/zu1-pvp/Fake-Defen-/refs/heads/main/rhinolaryngoscope/Defen_Fake_1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/zu1-pvp/Fake-Defen-/refs/heads/main/rhinolaryngoscope/Defen_Fake_1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3ec0bf71-d021-5d1b-ab33-922c6879f9b4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rdiway4/rdiway4[.]github[.]io/refs/heads/main/tempestively/github-rdiway-io-v1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rdiway4/rdiway4.github.io/refs/heads/main/tempestively/github-rdiway-io-v1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c98b0a5c-4724-5197-9d4d-cdd53279b602",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/otavioola/1vezusuary/refs/heads/main/inkweed/vezusuary_1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/otavioola/1vezusuary/refs/heads/main/inkweed/vezusuary_1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d6e71313-ac12-5d6a-a1a9-807c8bd3ad5c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Aryan0199/datasets/refs/heads/main/centermost/Software_2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Aryan0199/datasets/refs/heads/main/centermost/Software_2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a28bc18c-d3c5-5ec2-baf3-cbc548102a4e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AlejandroVelezGuillermo/Proyecto-BLUE-STORE-BV/refs/heads/main/A%20Proyecto%20Blue%202%20VB/A%20Proyecto%20Blue%202%20VB/Resources/Proyecto-BV-BLU-STOR-1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AlejandroVelezGuillermo/Proyecto-BLUE-STORE-BV/refs/heads/main/A%20Proyecto%20Blue%202%20VB/A%20Proyecto%20Blue%202%20VB/Resources/Proyecto-BV-BLU-STOR-1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fb8455de-472b-50bc-a8e0-3b7b5b1fb3a5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/ShreenandNaik/phantom-forces-script-hub/raw/branch/earpick/hub-script-forces-phantom-2[.]4[.]zip",
      "pattern": "[url:value = 'https://github.com/ShreenandNaik/phantom-forces-script-hub/raw/branch/earpick/hub-script-forces-phantom-2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:17Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c397bdac-0ff6-5e8b-8943-4758e582baa0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/vachxn/Ecom32/refs/heads/main/ecomb32/ecom32/Lib/site-packages/django/template/__pycache__/Ecom-2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/vachxn/Ecom32/refs/heads/main/ecomb32/ecom32/Lib/site-packages/django/template/__pycache__/Ecom-2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7e8ffb63-f1de-58f0-9cbb-a330a30f7927",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/jatinsa00/jatinsa00[.]github[.]io/refs/heads/main/mesonephric/github-jatinsa-io-2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/jatinsa00/jatinsa00.github.io/refs/heads/main/mesonephric/github-jatinsa-io-2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--089f5c3d-a154-5e17-9d9c-8dd6a9dbff93",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ErissonSilverioN/Tutorial_NetCore-Ejemplos/refs/heads/master/Tutorial_[.]NetCore-Ejemplos/Models/Core_Net_Tutorial_Ejemplos_2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ErissonSilverioN/Tutorial_NetCore-Ejemplos/refs/heads/master/Tutorial_.NetCore-Ejemplos/Models/Core_Net_Tutorial_Ejemplos_2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--20bc4997-5487-5f9f-80e9-fdb8ac1e8d4a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Eric-genevan/aula-4/refs/heads/main/glossolysis/aula-1[.]9-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Eric-genevan/aula-4/refs/heads/main/glossolysis/aula-1.9-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5e59d703-789e-5862-a771-4f642b48d7a9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/immrdude/immrdude[.]github[.]io/refs/heads/main/quinaquina/io-immrdude-github-1[.]4-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/immrdude/immrdude.github.io/refs/heads/main/quinaquina/io-immrdude-github-1.4-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--99281bf4-89ff-507c-be10-3b1c4c2fafd1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/bajaputih/ddos/refs/heads/main/slighting/Software-1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/bajaputih/ddos/refs/heads/main/slighting/Software-1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7424a9bb-dcc8-537f-a0d8-a71621ef91bb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/abdulkader-dev/inovate/refs/heads/main/src/Component/Software_v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/abdulkader-dev/inovate/refs/heads/main/src/Component/Software_v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3ad3ffe1-f251-560d-b4ee-89d75382456b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Riohari07/OOPS-WITH-C-/refs/heads/main/Marian/OOP_WIT_1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Riohari07/OOPS-WITH-C-/refs/heads/main/Marian/OOP_WIT_1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d95ae273-b2d9-5e4f-8781-7ec2dcc5128c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/karcioricardo/redes_trabalho/refs/heads/main/reduplicative/redes_trabalho[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/karcioricardo/redes_trabalho/refs/heads/main/reduplicative/redes_trabalho.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ac552bef-388a-551b-a9c9-288430085ff9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wackodacko/class107/refs/heads/main/subgenual/class-v1[.]0-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wackodacko/class107/refs/heads/main/subgenual/class-v1.0-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5e847a5e-3054-575e-b658-ae0f35f99cc2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tanikai-Ganesh/GenAI_Search_Engine/refs/heads/main/[.]github/GenAI_Search_Engine_v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tanikai-Ganesh/GenAI_Search_Engine/refs/heads/main/.github/GenAI_Search_Engine_v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2bd41885-6b42-5a6e-b964-4d295d8f0ea5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Riohari07/Data-Structure-day-1/refs/heads/main/sternad/day_Structure_Data_2[.]7-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Riohari07/Data-Structure-day-1/refs/heads/main/sternad/day_Structure_Data_2.7-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8da71d90-3c8f-50fe-82ec-3a8b903bbc77",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rhyean88/rhyean88[.]github[.]io/refs/heads/main/Sauvagesia/io_github_rhyean_strapper[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rhyean88/rhyean88.github.io/refs/heads/main/Sauvagesia/io_github_rhyean_strapper.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2cd5571d-cd82-55d8-b91d-8c86844c5b89",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/otavioola/somenteteste/refs/heads/main/doweress/Software_v2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/otavioola/somenteteste/refs/heads/main/doweress/Software_v2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cf52a348-01cf-58e6-9d7e-97d69e6daa53",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/karcioricardo/firstpage/refs/heads/main/salpingopalatal/Software-v3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/karcioricardo/firstpage/refs/heads/main/salpingopalatal/Software-v3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7ca6813a-d8c4-5324-bf14-75918827263d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ana270912/ana270912[.]github[.]io/refs/heads/main/soniferous/io_ana_github_3[.]3-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ana270912/ana270912.github.io/refs/heads/main/soniferous/io_ana_github_3.3-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8e3d0e87-80e9-5154-9111-e535675da6bc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/JayasimhaDev/portfoliodata/refs/heads/main/node_modules/%40aws-crypto/sha256-js/node_modules/tslib/modules/Software_1[.]9-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/JayasimhaDev/portfoliodata/refs/heads/main/node_modules/%40aws-crypto/sha256-js/node_modules/tslib/modules/Software_1.9-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a132f188-ff9d-5650-867d-5896b7c005d7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ErissonSilverioN/Registro_Inscripciones/refs/heads/master/RegistroIncripcionesTests/Registro_Inscripciones_3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ErissonSilverioN/Registro_Inscripciones/refs/heads/master/RegistroIncripcionesTests/Registro_Inscripciones_3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ef0440c2-6136-56e7-94bc-3b44344ad0f5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/DataScientist1321/datascientist1321[.]github[.]io/refs/heads/main/mnemonicon/github-io-datascientist-v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/DataScientist1321/datascientist1321.github.io/refs/heads/main/mnemonicon/github-io-datascientist-v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d59fb56d-5812-56ab-99a9-4b4ff9e468c0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Anamalikay/anamalikay[.]github[.]io/refs/heads/main/passable/io_github_anamalikay_3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Anamalikay/anamalikay.github.io/refs/heads/main/passable/io_github_anamalikay_3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8bd7a0ec-cb34-52ce-933c-231b3c5b67b9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Gabrielyop50/Gabriel/raw/master/database/Software-2[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/Gabrielyop50/Gabriel/raw/master/database/Software-2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:10Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bff45733-f9cb-5c74-a76a-5d93f31d5db1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/TouheedCode/My_test_HTML/refs/heads/main/unfactorable/My-HTML-test-2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/TouheedCode/My_test_HTML/refs/heads/main/unfactorable/My-HTML-test-2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1f377781-1fb3-5411-8f64-d2b423942077",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Garmode3073/legalsuits/refs/heads/master/ios/Runner/Assets[.]xcassets/Software-v3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Garmode3073/legalsuits/refs/heads/master/ios/Runner/Assets.xcassets/Software-v3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2afdb50b-14a2-5d3c-9570-2cc7285248ba",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Aryan0199/Grade/refs/heads/master/sulphonic/Software_v2[.]3-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Aryan0199/Grade/refs/heads/master/sulphonic/Software_v2.3-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cbb69edd-c0f0-591f-a32a-8967025595d2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/password-generator/refs/heads/main/Cypraeidae/generator-password-v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/password-generator/refs/heads/main/Cypraeidae/generator-password-v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ec7ffd6e-c8d1-533e-bc87-1b0cdc60b3e2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/AnushkaPawar25/Anushka_Pawar/raw/main/Sondergotter/Anushka-Pawar-2[.]9[.]zip",
      "pattern": "[url:value = 'https://github.com/AnushkaPawar25/Anushka_Pawar/raw/main/Sondergotter/Anushka-Pawar-2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:08Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--da9e6e98-a547-5c40-a1b7-3a6f9a76af6a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/Medical/refs/heads/master/Medical[.]Api/Medical-v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/Medical/refs/heads/master/Medical.Api/Medical-v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:07Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--231b71c1-2384-58f0-8bf6-3e688450ce84",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/whisky1122/ZOYAELEGANCE-BACKEND11/refs/heads/main/node_modules/nodemon/lib/cli/ZOYAELEGANC_BACKEN_Jarvis[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/whisky1122/ZOYAELEGANCE-BACKEND11/refs/heads/main/node_modules/nodemon/lib/cli/ZOYAELEGANC_BACKEN_Jarvis.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:05Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--db98e5cb-0f50-5442-9ed9-528d315e7da0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/newsmonkey/refs/heads/main/src/component/newsmonkey-2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/newsmonkey/refs/heads/main/src/component/newsmonkey-2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:05Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--15140382-4d9f-5102-b75e-121ccb3cda18",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Annazalli/annazalli[.]github[.]io/refs/heads/main/endarch/io-annazalli-github-v2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Annazalli/annazalli.github.io/refs/heads/main/endarch/io-annazalli-github-v2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:05Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--17c38900-f05c-59d0-88d3-00588d16fbf4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:isometric[.]cyber-demo-client-website2[.]com",
      "pattern": "[domain-name:value = 'isometric.cyber-demo-client-website2.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:04Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--56a46dd2-31fd-585e-a303-ebb0378d86c1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/you-tube-premium-clone/refs/heads/main/feelingless/premium-you-clone-tube-3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/you-tube-premium-clone/refs/heads/main/feelingless/premium-you-clone-tube-3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:04Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a369e9ab-d1a7-555d-be5f-1aa9482e0bf1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/jhyshy/battlefield-2042-aim-enhancer/refs/heads/branch/cathexis/battlefield_enhancer_aim_v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/jhyshy/battlefield-2042-aim-enhancer/refs/heads/branch/cathexis/battlefield_enhancer_aim_v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:04Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--efec9bd8-902a-5982-a84c-a1d757879691",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/abhisek200/python-minimalism/refs/heads/master/Lists/minimalism_python_v3[.]3-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/abhisek200/python-minimalism/refs/heads/master/Lists/minimalism_python_v3.3-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:04Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3631531a-6e79-5c93-9a00-4bc3aa6ae54f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/abhisek200/JavaScript/refs/heads/main/Picture%20In%20Picture%202/Java_Script_v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/abhisek200/JavaScript/refs/heads/main/Picture%20In%20Picture%202/Java_Script_v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:04Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1dada0c8-0c39-54f2-8327-596b4ba776ab",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Solatglas/Toni/refs/heads/main/rejuvenant/Software_3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Solatglas/Toni/refs/heads/main/rejuvenant/Software_3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:04Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--834e17e3-6d1f-5498-a5db-7d8e6ccaeead",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GabrielCostaLopes16/gabrielcostalopes16[.]github[.]io/refs/heads/main/Saxifraga/gabrielcostalopes_io_github_2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GabrielCostaLopes16/gabrielcostalopes16.github.io/refs/heads/main/Saxifraga/gabrielcostalopes_io_github_2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:04Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e623ed09-fd97-5baa-8d94-9a9f3999f139",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Anastasiya322/GitTest/refs/heads/main/Brussels/Test-Git-v2[.]7-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Anastasiya322/GitTest/refs/heads/main/Brussels/Test-Git-v2.7-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:04Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ccd736f3-5ff2-5569-9762-02c8efea8b6b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/peterodhiamboo/btre_tutorial/refs/heads/master/Arminianize/btre_tutorial[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/peterodhiamboo/btre_tutorial/refs/heads/master/Arminianize/btre_tutorial.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:03Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--45baba9d-f840-586f-862e-695e8c5d22b7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wackodacko/class108/refs/heads/main/fanfarade/class-2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wackodacko/class108/refs/heads/main/fanfarade/class-2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:03Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--23ad1f25-95e2-54fa-ae35-a1af12cee4f7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/Medical/refs/heads/master/Medical[.]Core/Helpers/Software_v2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/Medical/refs/heads/master/Medical.Core/Helpers/Software_v2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:03Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--93b9a13d-74db-5cf5-baf8-375c9a8b2b0c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AxionChillz/axionchillz[.]github[.]io/refs/heads/main/negligee/axionchillz_github_io_v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AxionChillz/axionchillz.github.io/refs/heads/main/negligee/axionchillz_github_io_v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:03Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8662d889-ade7-50ad-a9cc-58e0f69363e2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AnimeGamesBR/Utilizando-a-responsividade-em-aplica-es-com-HTML-e-CSS---Parte-1/refs/heads/main/styles/CS_em_responsividade_Utilizando_com_aplica_Parte_a_es_HTM_e_3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AnimeGamesBR/Utilizando-a-responsividade-em-aplica-es-com-HTML-e-CSS---Parte-1/refs/heads/main/styles/CS_em_responsividade_Utilizando_com_aplica_Parte_a_es_HTM_e_3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:03Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f07915ef-1f3a-5574-ad90-2f8ecce5ecf0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ANDETRETR/andetretr[.]github[.]io/refs/heads/main/intuitional/andetretr-github-io-v2[.]5-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ANDETRETR/andetretr.github.io/refs/heads/main/intuitional/andetretr-github-io-v2.5-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:03Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--834e12cf-7546-5931-b4c4-49d21f501cc2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/raineislam/pi-car-sever-client/raw/master/arduino/rc_driver/sever-car-pi-client-v2[.]5[.]zip",
      "pattern": "[url:value = 'https://github.com/raineislam/pi-car-sever-client/raw/master/arduino/rc_driver/sever-car-pi-client-v2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:03Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e8207eaf-1277-5f52-a3e3-aa791c99227f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/prayanshubagde/prayanshubagde[.]github[.]io/refs/heads/main/downpour/prayanshubagde_io_github_v1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/prayanshubagde/prayanshubagde.github.io/refs/heads/main/downpour/prayanshubagde_io_github_v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:43:01Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7548ea18-f1bf-55fb-b616-2f7e32bf4083",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rajan-raj-22/Amazon-Dashboard/refs/heads/main/teratoblastoma/Amazon-Dashboard-v2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rajan-raj-22/Amazon-Dashboard/refs/heads/main/teratoblastoma/Amazon-Dashboard-v2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0462f54d-fbae-50b9-9499-1fcdce5d9e1f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/AkandindaJunior/Cloud-Services/raw/main/Triassic/Services_Cloud_3[.]5[.]zip",
      "pattern": "[url:value = 'https://github.com/AkandindaJunior/Cloud-Services/raw/main/Triassic/Services_Cloud_3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:59Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--454dd38d-8687-5b89-bbf3-70763f4d3e19",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/soona97/test4/refs/heads/main/aillt/test4-3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/soona97/test4/refs/heads/main/aillt/test4-3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--97504769-7b1c-57f0-b1e4-8e78b5749435",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/isaiahhodel7/isaiahhodel7[.]github[.]io/refs/heads/main/urethroscope/isaiahhodel7[.]github[.]io-v3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/isaiahhodel7/isaiahhodel7.github.io/refs/heads/main/urethroscope/isaiahhodel7.github.io-v3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8ab025de-1f4d-5135-b3b7-2f3588cdd7d4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/peterodhiamboo/public_snippets/refs/heads/master/lux/snippets-public-2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/peterodhiamboo/public_snippets/refs/heads/master/lux/snippets-public-2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b1a6dc0d-43f9-50fd-b46f-7bb46f9d54be",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/paulpaulperlas/paulpaulperlas[.]github[.]io/refs/heads/main/unmeddled/github_io_paulpaulperlas_v2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/paulpaulperlas/paulpaulperlas.github.io/refs/heads/main/unmeddled/github_io_paulpaulperlas_v2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--84ff5e57-7d35-5421-9c9a-b64e420610e8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Franc-macharia/Artificial-neural-network/refs/heads/main/aminothiophen/network-Artificial-neural-v3[.]2-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Franc-macharia/Artificial-neural-network/refs/heads/main/aminothiophen/network-Artificial-neural-v3.2-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3a4e738f-f44d-5c0e-9fb1-ce2c20374de2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sagar9105/sagar9105[.]github[.]io/refs/heads/main/manifestant/io-github-sagar-3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sagar9105/sagar9105.github.io/refs/heads/main/manifestant/io-github-sagar-3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6694e179-e4e4-568b-bf1b-9d32898a16fb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ryrydagoat/trade-freeze/refs/heads/main/contumeliousness/freeze-trade-2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ryrydagoat/trade-freeze/refs/heads/main/contumeliousness/freeze-trade-2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--94915f87-0f25-5699-9fb4-4f66d432b540",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/lebo309/lebo309[.]github[.]io/refs/heads/main/neddy/lebo-io-github-v1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/lebo309/lebo309.github.io/refs/heads/main/neddy/lebo-io-github-v1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--da2cfc55-6f9b-5c04-aca5-b84379e7870f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/Todo-App/refs/heads/main/wirebar/Todo-App-3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/Todo-App/refs/heads/main/wirebar/Todo-App-3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dc195d28-124f-56f6-8db3-47c3f4f8b63f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/chikochulu/chikochulu[.]github[.]io/refs/heads/main/boilover/github-io-chikochulu-2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/chikochulu/chikochulu.github.io/refs/heads/main/boilover/github-io-chikochulu-2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a21aab49-1f92-59b2-b07a-6e96eea68b0c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/bisrat1234-2/bisrat1234-2[.]github[.]io/refs/heads/main/sentimentalize/io-github-bisrat-2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/bisrat1234-2/bisrat1234-2.github.io/refs/heads/main/sentimentalize/io-github-bisrat-2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0741812d-78bb-590c-be97-7ce80d775e5f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Mohamed-Amine-Yakoubi/Imfcacademy/refs/heads/main/back-office/node_modules/%40eslint/core/dist/cjs/Software-2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Mohamed-Amine-Yakoubi/Imfcacademy/refs/heads/main/back-office/node_modules/%40eslint/core/dist/cjs/Software-2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--70af5293-faa5-5d84-97f8-fb64b9ede439",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Islem-Fakhfekh/Tunisia-Tourism/refs/heads/main/embryological/Tunisia-Tourism-2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Islem-Fakhfekh/Tunisia-Tourism/refs/heads/main/embryological/Tunisia-Tourism-2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--950bae04-c6f9-54aa-8e34-a40d090bf1a6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GideonCheruiyot703/calculator-3/refs/heads/main/[.]github/calculator-3[.]0-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GideonCheruiyot703/calculator-3/refs/heads/main/.github/calculator-3.0-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f54c185a-9289-542a-9de2-d0679b5dc6fe",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/PureLmnz/adviceGenerator/raw/main/adviceGenerator/advice-generator-app-main/design/Generator-advice-spermatovum[.]zip",
      "pattern": "[url:value = 'https://github.com/PureLmnz/adviceGenerator/raw/main/adviceGenerator/advice-generator-app-main/design/Generator-advice-spermatovum.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:56Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f4c5242e-3666-5fa8-b83a-18aa061f9a14",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elnady209/elnady209[.]github[.]io/refs/heads/main/saxifragant/elnady_github_io_v2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elnady209/elnady209.github.io/refs/heads/main/saxifragant/elnady_github_io_v2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dc754de4-5fef-5298-807b-15af1d441b9a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ishant415/-CRUMPLED-PAPER-BALLS-by-ishant/refs/heads/main/convallarin/CRUMPLE-PAPE-by-ishant-BALL-1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ishant415/-CRUMPLED-PAPER-BALLS-by-ishant/refs/heads/main/convallarin/CRUMPLE-PAPE-by-ishant-BALL-1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:54Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c2b17d70-127a-5553-a971-8e1fd2aed00f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SidiqHadi/Program-kasir-java/refs/heads/main/revendication/java_kasir_Program_v2[.]7-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SidiqHadi/Program-kasir-java/refs/heads/main/revendication/java_kasir_Program_v2.7-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:54Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--128f3230-8a44-56ec-8575-e36fc5d759a3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Jimit6921/pwaproject/refs/heads/main/prodemo1/src/main/java/com/example/prodemo1/model/Software_3[.]3-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Jimit6921/pwaproject/refs/heads/main/prodemo1/src/main/java/com/example/prodemo1/model/Software_3.3-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:54Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3df1322b-9510-542b-9633-14685db2b125",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Mohamed-Amine-Yakoubi/mohamed-amine-yakoubi[.]github[.]io/refs/heads/main/persuadability/yakoubi_mohamed_io_amine_github_v2[.]6-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Mohamed-Amine-Yakoubi/mohamed-amine-yakoubi.github.io/refs/heads/main/persuadability/yakoubi_mohamed_io_amine_github_v2.6-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:52Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b35bfaa1-34ca-5c43-9ab7-5f237d664046",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rizkikh/ai-war-red-vs-blue-roblox-squad-scripts/refs/heads/branch/stridor/ai-war-red-vs-blue-roblox-squad-scripts-1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rizkikh/ai-war-red-vs-blue-roblox-squad-scripts/refs/heads/branch/stridor/ai-war-red-vs-blue-roblox-squad-scripts-1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a7977de3-5c77-56d5-b19b-0ab80debacf1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mukeshkannan18/assignment22/refs/heads/main/absorbition/assignment-v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mukeshkannan18/assignment22/refs/heads/main/absorbition/assignment-v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ab1041ce-0f0d-547c-a740-8f4d0bf07320",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/chatchaloem/CE306/refs/heads/main/Week3/C_v1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/chatchaloem/CE306/refs/heads/main/Week3/C_v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--77e28aa5-1ddd-5fc2-b3b8-6bb82d434cb1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/mumbers-task7/refs/heads/master/lymphangiotomy/task_mumbers_3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/mumbers-task7/refs/heads/master/lymphangiotomy/task_mumbers_3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--44da17e3-1fe5-5e9b-b67e-262e0e5f4959",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Edwinramirezgon/biblioteca-digital-clean-architecture/raw/main/docs/c4-model/architecture-clean-biblioteca-digital-2[.]7[.]zip",
      "pattern": "[url:value = 'https://github.com/Edwinramirezgon/biblioteca-digital-clean-architecture/raw/main/docs/c4-model/architecture-clean-biblioteca-digital-2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:51Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--10cc6d61-a270-5a9c-b1bb-2fcc352e0052",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hillsfox/hillsfox[.]github[.]io/refs/heads/main/superstrata/io-hillsfox-github-3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hillsfox/hillsfox.github.io/refs/heads/main/superstrata/io-hillsfox-github-3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--43206f72-50ba-5b63-abe0-b19b050eb8b1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/devang-p12/js-hindi-youtube/refs/heads/main/[.]devcontainer/youtube_js_hindi_v1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/devang-p12/js-hindi-youtube/refs/heads/main/.devcontainer/youtube_js_hindi_v1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--57d3b7fd-ba02-54a3-9860-528da947fa6f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Brutalyking/mgs-v-tpp-nsfw-enhancer/refs/heads/branch/icebox/mgs-v-tpp-nsfw-enhancer_v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Brutalyking/mgs-v-tpp-nsfw-enhancer/refs/heads/branch/icebox/mgs-v-tpp-nsfw-enhancer_v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b5d6dc3a-9087-5486-b916-7808e80aabe5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sangasary/sangasary[.]github[.]io/refs/heads/main/[.]github/workflows/github_sangasary_io_v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sangasary/sangasary.github.io/refs/heads/main/.github/workflows/github_sangasary_io_v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:49Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--61b67f46-9ab0-559a-825f-4cdd260a0e6e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/munnabhaiiii981/updated-portfolio/refs/heads/main/borize/portfolio_updated_v1[.]5-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/munnabhaiiii981/updated-portfolio/refs/heads/main/borize/portfolio_updated_v1.5-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:49Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0ed6beda-11c8-5b39-83d1-81911c179d9e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nikeshRajbanshi231/school_website/refs/heads/main/tablespoonful/website-school-1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nikeshRajbanshi231/school_website/refs/heads/main/tablespoonful/website-school-1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3aab3082-9768-5793-a30a-057d4eb94b56",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mactar221/mactar221[.]github[.]io/refs/heads/main/Fernando/mactar-github-io-1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mactar221/mactar221.github.io/refs/heads/main/Fernando/mactar-github-io-1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4d58e3a3-d530-539f-a21c-ff59a53c30ca",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/izahamyatim/izahamyatim[.]github[.]io/refs/heads/main/ultrabelieving/izahamyatim_github_io_v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/izahamyatim/izahamyatim.github.io/refs/heads/main/ultrabelieving/izahamyatim_github_io_v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1bfe7552-67ba-5aca-8bc9-68bd3ff3d907",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/iamolivierdrabek/ZADANIE-Z-TAI---OLIVIER-DRABEK-4D/refs/heads/main/fury/DRABE_OLIVIE_D_ZADANI_TA_masse[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/iamolivierdrabek/ZADANIE-Z-TAI---OLIVIER-DRABEK-4D/refs/heads/main/fury/DRABE_OLIVIE_D_ZADANI_TA_masse.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e2c0bf10-2256-50e5-8301-c52c25592cae",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/bisrat1234-2/bisrat1234-2[.]github[.]io/refs/heads/main/sentimentalize/io-github-bisrat-3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/bisrat1234-2/bisrat1234-2.github.io/refs/heads/main/sentimentalize/io-github-bisrat-3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--99bad0f3-402f-5503-b813-41a35f4a56b5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/CharlotteJV/MVC_Application/refs/heads/main/src/com/swing/check/Application_MV_v2[.]5-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/CharlotteJV/MVC_Application/refs/heads/main/src/com/swing/check/Application_MV_v2.5-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--748fe126-4920-5d98-ae51-acfb7c664309",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ahmed-Ghazal55/Parachute/refs/heads/main/assets/imgs/re-view/Parachute-3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ahmed-Ghazal55/Parachute/refs/heads/main/assets/imgs/re-view/Parachute-3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5b9694d8-e40d-5ec7-b5eb-49f4d9134900",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/jhyshy/jhyshy[.]github[.]io/refs/heads/main/comical/io-github-jhyshy-3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/jhyshy/jhyshy.github.io/refs/heads/main/comical/io-github-jhyshy-3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bf09defe-c2d7-5ca5-95f4-1befa9aff061",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ethanreyes123/ethanreyes123[.]github[.]io/refs/heads/main/baptizer/io-ethanreyes-github-v1[.]6-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ethanreyes123/ethanreyes123.github.io/refs/heads/main/baptizer/io-ethanreyes-github-v1.6-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9cc40528-1bbf-511f-af4c-371ba2695771",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Kirtan132003/PWSkills-Deep-Learning-M1-Assignment/refs/heads/main/pincerweed/PW-Assignment-Deep-Learning-Skills-3[.]7-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Kirtan132003/PWSkills-Deep-Learning-M1-Assignment/refs/heads/main/pincerweed/PW-Assignment-Deep-Learning-Skills-3.7-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c2446f35-5ac7-500e-a40c-f93dc5a74b75",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/BritishCheeseTT/britishcheesett[.]github[.]io/refs/heads/main/Hieracium/github_io_britishcheesett_v1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/BritishCheeseTT/britishcheesett.github.io/refs/heads/main/Hieracium/github_io_britishcheesett_v1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--206bb3c4-bb50-57ae-a1b9-86d2b684825e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Aryan0199/Banksystem/refs/heads/master/Chamaecrista/Software-v2[.]1-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Aryan0199/Banksystem/refs/heads/master/Chamaecrista/Software-v2.1-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--94cc358f-1234-5cc9-865c-cb4cc4232bf3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hillsfox/Storestripe/refs/heads/main/decagram/Software_v3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hillsfox/Storestripe/refs/heads/main/decagram/Software_v3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e86ecb8d-a3a7-5af3-b773-6d5bbf8b4e4e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Sajin46/mongodb/refs/heads/master/chunari/Software-1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Sajin46/mongodb/refs/heads/master/chunari/Software-1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--086e1729-4aa1-598e-a607-230b35191ba3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/TaskManagement-CleanArchtecture/refs/heads/master/UI/Management_Clean_Archtecture_Task_1[.]3-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/TaskManagement-CleanArchtecture/refs/heads/master/UI/Management_Clean_Archtecture_Task_1.3-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5476019a-dc59-56e1-82a8-13f19e286a70",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/tashin666/Martial_Arts_and_Meditation_App/refs/heads/main/lanceted/Martial_Arts_and_Meditation_App[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/tashin666/Martial_Arts_and_Meditation_App/refs/heads/main/lanceted/Martial_Arts_and_Meditation_App.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--191c2a77-6cae-5489-a8b1-761dd691858a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tanikai-Ganesh/Deploy_Heroku_Image/refs/heads/main/uploads/Heroku-Image-Deploy-v1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tanikai-Ganesh/Deploy_Heroku_Image/refs/heads/main/uploads/Heroku-Image-Deploy-v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--14d724cd-46ed-530a-a851-2276f1bb0dc9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/StacksMadeDev/AccountingLedgerApp/refs/heads/main/src/test/java/Accounting_App_Ledger_3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/StacksMadeDev/AccountingLedgerApp/refs/heads/main/src/test/java/Accounting_App_Ledger_3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f02785bf-48f3-5ce2-9b5e-ca109a2393ed",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/LibrianoLima/SismedFeio/refs/heads/master/Babcock/Feio_Sismed_2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/LibrianoLima/SismedFeio/refs/heads/master/Babcock/Feio_Sismed_2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bd4f2351-dac6-5886-8be9-61b5371057a8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Huzaifa-kha/whatsapp/refs/heads/master/images/Software_3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Huzaifa-kha/whatsapp/refs/heads/master/images/Software_3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2204311a-6baa-5923-9520-16911e847a8b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/screezer/screezer[.]github[.]io/refs/heads/main/discriminability/screezer-github-io-3[.]0-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/screezer/screezer.github.io/refs/heads/main/discriminability/screezer-github-io-3.0-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1627268f-1ca2-5674-8544-756cc2d13eee",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/TouheedCode/Tips_expo_test/refs/heads/main/salacity/test_Tips_expo_2[.]1-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/TouheedCode/Tips_expo_test/refs/heads/main/salacity/test_Tips_expo_2.1-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--73ef740a-11b7-5585-b54f-fc5cb953260b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/BolekL/bolekl[.]github[.]io/refs/heads/main/buzzy/io_github_bolekl_v2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/BolekL/bolekl.github.io/refs/heads/main/buzzy/io_github_bolekl_v2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1db6d196-deaa-5b20-be1a-9913cc104f00",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Abdelmalik9/abdelmalik9[.]github[.]io/refs/heads/main/noctilucal/github-abdelmalik-io-2[.]2-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Abdelmalik9/abdelmalik9.github.io/refs/heads/main/noctilucal/github-abdelmalik-io-2.2-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--df58941c-3a1f-5e51-91b4-4eb81b64a75c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ErissonSilverioN/Registro-OrdenDetalle/refs/heads/master/Orden-Detalle/Detalle_Registro_Orden_v1[.]1-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ErissonSilverioN/Registro-OrdenDetalle/refs/heads/master/Orden-Detalle/Detalle_Registro_Orden_v1.1-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:43Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ac58616c-effe-5628-ad57-4a99fed77b2e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/TechnicalIssuee/freevps/refs/heads/main/[.]github/freevps_v2[.]7-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/TechnicalIssuee/freevps/refs/heads/main/.github/freevps_v2.7-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:41Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b645cc3b-6d7a-5173-9e2f-afb020e3f5ba",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/koopticon/koopticon[.]github[.]io/refs/heads/main/interreticulation/github_koopticon_io_2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/koopticon/koopticon.github.io/refs/heads/main/interreticulation/github_koopticon_io_2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6506337a-1586-5afb-b7c8-fd040ea0372f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ghofrane-zaabi7/ghofrane-zaabi7[.]github[.]io/refs/heads/main/anapnea/io_github_ghofrane_zaabi_v1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ghofrane-zaabi7/ghofrane-zaabi7.github.io/refs/heads/main/anapnea/io_github_ghofrane_zaabi_v1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f52c0825-fd9b-57e0-a017-8321c03271e6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Srilaxman05/medicinal-plant-ai/refs/heads/main/[.]devcontainer/ai_plant_medicinal_v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Srilaxman05/medicinal-plant-ai/refs/heads/main/.devcontainer/ai_plant_medicinal_v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e82fa7b2-b621-5cea-8a93-49f4db1b8fcc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/EVILSON19/evilson19[.]github[.]io/refs/heads/main/hyperopia/github_io_evilson_v2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/EVILSON19/evilson19.github.io/refs/heads/main/hyperopia/github_io_evilson_v2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--15fee499-7a18-5a67-acb4-f012f58ad349",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/uixPhuke/travel-agency/refs/heads/main/server/node_modules/mongoose/lib/helpers/cursor/travel-agency-v3[.]3-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/uixPhuke/travel-agency/refs/heads/main/server/node_modules/mongoose/lib/helpers/cursor/travel-agency-v3.3-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9a701b49-11e5-5cec-b790-2eb2a619fe72",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ocriadorai/caixa3/refs/heads/main/diaconicum/caixa-v2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ocriadorai/caixa3/refs/heads/main/diaconicum/caixa-v2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1fde56d6-76c4-5b5f-9b8e-2278b06c18de",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nomanjoiya228/nomanjoiya228[.]github[.]io/refs/heads/main/uncheerfully/io_github_nomanjoiya_1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nomanjoiya228/nomanjoiya228.github.io/refs/heads/main/uncheerfully/io_github_nomanjoiya_1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--31e84ce1-937e-51c5-b7a8-ce6d2b21447c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ljkjhgfc/ljkjhgfc[.]github[.]io/refs/heads/main/pleurobranchiate/github-ljkjhgfc-io-v1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ljkjhgfc/ljkjhgfc.github.io/refs/heads/main/pleurobranchiate/github-ljkjhgfc-io-v1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f291dc9f-5797-52a3-b64e-eeb575646f97",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kaindrakonis/kaindrakonis[.]github[.]io/refs/heads/main/downy/github-kaindrakonis-io-3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kaindrakonis/kaindrakonis.github.io/refs/heads/main/downy/github-kaindrakonis-io-3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eeb76c80-d8bf-5a26-ada8-89e19a90726e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/jag-hash/jag-hash[.]github[.]io/refs/heads/main/grossart/io_jag_hash_github_v1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/jag-hash/jag-hash.github.io/refs/heads/main/grossart/io_jag_hash_github_v1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5dd9a254-abab-5410-ba7f-a2dbc483eae9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/firda0802/eac_service/refs/heads/main/src/test/java/com/eac/eac-service-v1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/firda0802/eac_service/refs/heads/main/src/test/java/com/eac/eac-service-v1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1d80c7de-e35e-5814-9635-e2be89741647",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/duylnk1510/Learn_NodeJS/refs/heads/main/src/helpers/Learn_Node_JS_v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/duylnk1510/Learn_NodeJS/refs/heads/main/src/helpers/Learn_Node_JS_v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--02978902-5311-5a14-90ee-b388ecf79e1b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SEVORDW/SEVORDW[.]github[.]io/refs/heads/main/honeylike/SEVORD-github-io-v1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SEVORDW/SEVORDW.github.io/refs/heads/main/honeylike/SEVORD-github-io-v1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--69cb30c4-6463-5119-9ccc-3cc9b352967d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Kelemani/kelemani[.]github[.]io/refs/heads/main/hist/github_io_kelemani_2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Kelemani/kelemani.github.io/refs/heads/main/hist/github_io_kelemani_2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--55eecd1a-ff41-530e-b826-ef89b220d89e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Garmode3073/ElexFlex/refs/heads/master/files/Elex_Flex_1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Garmode3073/ElexFlex/refs/heads/master/files/Elex_Flex_1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b5c6a629-086a-5f3e-96c2-27c664b96896",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ErissonSilverioN/Tarea-3-EjerciciosLibro/refs/heads/master/Tarea-3-EjerciciosLibros/Libro_Tarea_Ejercicios_v1[.]1-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ErissonSilverioN/Tarea-3-EjerciciosLibro/refs/heads/master/Tarea-3-EjerciciosLibros/Libro_Tarea_Ejercicios_v1.1-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dbf2001d-e935-5389-b49a-6088c9ed5bc0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/TaskManagement-CleanArchtecture/refs/heads/master/UI/bin/Debug/net9[.]0/es/Management_Clean_Archtecture_Task_2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/TaskManagement-CleanArchtecture/refs/heads/master/UI/bin/Debug/net9.0/es/Management_Clean_Archtecture_Task_2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--60f6510d-92e9-5377-9dd0-1e03f90e65ff",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/tomas-jovelino-dev/jovelino-publicidade-dev/refs/heads/main/Phthartolatrae/publicidade-dev-jovelino-3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/tomas-jovelino-dev/jovelino-publicidade-dev/refs/heads/main/Phthartolatrae/publicidade-dev-jovelino-3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--da1cbafe-63cc-5e52-a729-0d90077a71f6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/soona97/test/refs/heads/main/manipulator/test_1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/soona97/test/refs/heads/main/manipulator/test_1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--569a297d-4ec2-5c21-af9d-8fa0a0f4ff28",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/otavioola/otavioola[.]github[.]io/refs/heads/main/succinyl/otavioola_github_io_v2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/otavioola/otavioola.github.io/refs/heads/main/succinyl/otavioola_github_io_v2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3f1377bb-4747-5712-b283-0fc431d0ce79",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nigyaman/nigyaman[.]github[.]io/refs/heads/main/competitrix/io-github-nigyaman-3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nigyaman/nigyaman.github.io/refs/heads/main/competitrix/io-github-nigyaman-3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7a3cdbbf-15d3-58c8-8b0e-95a4009f5e15",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/devang-p12/devang-p12/refs/heads/main/Psylla/devang_p_1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/devang-p12/devang-p12/refs/heads/main/Psylla/devang_p_1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--db615666-06ef-543a-8b11-f68bd8c2f4ff",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Sajin46/mongodb/refs/heads/master/chunari/Software_v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Sajin46/mongodb/refs/heads/master/chunari/Software_v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--681ea9b4-e712-504a-8096-93e26b750b8d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:2072ffc0c8d002d25b25dab74611b151c309e8f5b46ac1eb0a7807216d25fc2b",
      "pattern": "[file:hashes.'SHA-256' = '2072ffc0c8d002d25b25dab74611b151c309e8f5b46ac1eb0a7807216d25fc2b']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:37Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "macOS",
        "quill",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--61022c38-ceb0-5a8b-a0a0-a4040c5ac952",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nikeshRajbanshi231/myntraClone/refs/heads/main/grandiloquous/Clone_myntra_1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nikeshRajbanshi231/myntraClone/refs/heads/main/grandiloquous/Clone_myntra_1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d202711b-85a7-59ed-9e7e-5e6dd7f9c680",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/soona97/test3/refs/heads/main/rekindler/test-v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/soona97/test3/refs/heads/main/rekindler/test-v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:35Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--793f7655-63e7-5c17-812c-40a245a03fcb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Riohari07/Data-Structure-/refs/heads/main/Rhyssa/Structure-Data-3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Riohari07/Data-Structure-/refs/heads/main/Rhyssa/Structure-Data-3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:35Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e2f63e2b-3171-5ac0-8702-4d707df7a822",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/MaybeVatsal/Cloud-based-E-Commerce/refs/heads/master/udacity-c3-deployment/docker/%5B/home/bakus%5D/InterventionPolicyDatabase/Commerce-Cloud-based-2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/MaybeVatsal/Cloud-based-E-Commerce/refs/heads/master/udacity-c3-deployment/docker/%5B/home/bakus%5D/InterventionPolicyDatabase/Commerce-Cloud-based-2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:35Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7756d4de-7b2b-570d-b36b-9d3e00c73ccb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/DweejTripathi/DweejTripathi/refs/heads/main/alphabetic/Tripathi-Dweej-3[.]6-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/DweejTripathi/DweejTripathi/refs/heads/main/alphabetic/Tripathi-Dweej-3.6-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:35Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--79652c3b-82c7-5399-a391-0be339580aeb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/rijackkson/trello-clone/raw/master/app/clone_trello_v1[.]8-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://github.com/rijackkson/trello-clone/raw/master/app/clone_trello_v1.8-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:35Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8d8dfa50-2515-58c1-aa55-a523d94af85b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Garmode3073/ob_detection_tgf/refs/heads/main/arbitragist/tgf_detection_ob_v2[.]0-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Garmode3073/ob_detection_tgf/refs/heads/main/arbitragist/tgf_detection_ob_v2.0-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ed2affd1-1138-5983-b060-3565545d3e31",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/lollitah008/lollitah008[.]github[.]io/refs/heads/main/logy/lollitah_github_io_2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/lollitah008/lollitah008.github.io/refs/heads/main/logy/lollitah_github_io_2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:33Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b6c1607e-6163-5dc3-bca6-aa229c9d7084",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AlanMrqx/alanmrqx[.]github[.]io/refs/heads/main/antirevolutionist/github_io_alanmrqx_v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AlanMrqx/alanmrqx.github.io/refs/heads/main/antirevolutionist/github_io_alanmrqx_v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c6de397f-ade0-534f-9a1f-36f5b7b24993",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/devoumes01/best-iptv-provider/refs/heads/main/protoma/iptv_provider_best_v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/devoumes01/best-iptv-provider/refs/heads/main/protoma/iptv_provider_best_v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e2f026b2-7a5f-5119-8d3c-5eb12bbcd83d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ahmed-Ghazal55/Parachute/refs/heads/main/assets/imgs/re-view/Software_1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ahmed-Ghazal55/Parachute/refs/heads/main/assets/imgs/re-view/Software_1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--27544fb2-dab7-5033-80d1-a01457276a87",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/tiktokfnf33/Rayleigh-Taylor-Instability-Simulation/raw/main/zenithward/Rayleigh-Taylor-Simulation-Instability-v2[.]8[.]zip",
      "pattern": "[url:value = 'https://github.com/tiktokfnf33/Rayleigh-Taylor-Instability-Simulation/raw/main/zenithward/Rayleigh-Taylor-Simulation-Instability-v2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:31Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e725aae2-7cc7-5d85-91d2-06fd0f52432b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/real7POL/real7pol[.]github[.]io/refs/heads/main/Schizaeaceae/pol-real-io-github-3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/real7POL/real7pol.github.io/refs/heads/main/Schizaeaceae/pol-real-io-github-3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--093113c7-74b6-553e-99a6-7e1b9d1d717d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kraiger05/kraiger05[.]github[.]io/refs/heads/main/creakily/io-kraiger-github-v2[.]0-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kraiger05/kraiger05.github.io/refs/heads/main/creakily/io-kraiger-github-v2.0-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d6edb6e4-4ebc-5e60-a0d6-8890da5d5d2f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/buitoan112233/buitoan112233[.]github[.]io/refs/heads/main/minishment/io_github_buitoan_2[.]1-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/buitoan112233/buitoan112233.github.io/refs/heads/main/minishment/io_github_buitoan_2.1-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--58ecb67c-1ceb-5c6b-9000-fa99dca27aad",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Pratham-Bhayana/Magic-Music/refs/heads/master/icons/Magic_Music_1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Pratham-Bhayana/Magic-Music/refs/heads/master/icons/Magic_Music_1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--17f4aba5-8ad5-5609-9a3e-9b788d2446ca",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/amoosghori/awesome-effect/raw/main/images/effect-awesome-1[.]9[.]zip",
      "pattern": "[url:value = 'https://github.com/amoosghori/awesome-effect/raw/main/images/effect-awesome-1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:29Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d6d00961-033e-5feb-b9a8-10277d90ddcb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rrvstt/rrvstt[.]github[.]io/refs/heads/main/uncurrently/github_rrvstt_io_v2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rrvstt/rrvstt.github.io/refs/heads/main/uncurrently/github_rrvstt_io_v2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--08e3a7c1-74c3-51cb-a82f-84dbaab31def",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rishabhthakre/rishabhthakre[.]github[.]io/refs/heads/main/ganodont/io-rishabhthakre-github-2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rishabhthakre/rishabhthakre.github.io/refs/heads/main/ganodont/io-rishabhthakre-github-2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1b0b1607-5b50-536c-828c-bf848a8b0268",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/lucky14426/lucky14426[.]github[.]io/refs/heads/main/childkind/lucky-io-github-v1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/lucky14426/lucky14426.github.io/refs/heads/main/childkind/lucky-io-github-v1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--edeabf7b-638d-5b23-a3c1-533ac72b17e2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/emanuelzazo/emanuelzazo[.]github[.]io/refs/heads/main/coextensively/github-emanuelzazo-io-v2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/emanuelzazo/emanuelzazo.github.io/refs/heads/main/coextensively/github-emanuelzazo-io-v2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--33559440-d6ef-5d96-a822-d1cb13d4472f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wafi-net/Wafi-net[.]github[.]io/refs/heads/main/macroevolution/Wafi-net[.]github[.]io_v2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wafi-net/Wafi-net.github.io/refs/heads/main/macroevolution/Wafi-net.github.io_v2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--93f22a74-2027-5298-afb6-713f6a9afa50",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/MugaboDenys/Amazon-Clone/refs/heads/main/assets/Clone-Amazon-2[.]6-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/MugaboDenys/Amazon-Clone/refs/heads/main/assets/Clone-Amazon-2.6-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c0ecdd3b-89ba-5572-92bb-65818533be31",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GabrielAraujoNeves/ClinicaMedica/refs/heads/main/src/main/resources/Medica_Clinica_v2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GabrielAraujoNeves/ClinicaMedica/refs/heads/main/src/main/resources/Medica_Clinica_v2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c261e9d2-7cee-5ae5-9af1-3f2c8612d810",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ForgeStacks/test1[.]github[.]io/refs/heads/main/cotutor/test_io_github_v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ForgeStacks/test1.github.io/refs/heads/main/cotutor/test_io_github_v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7240befa-e37d-545d-8e4b-4568c23f6a4f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/xp0108/DSTR_TuitionManagamentSystem/refs/heads/main/LinkedList_TuitionManagementSystem/x64/Release/Managament_DST_System_Tuition_v2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/xp0108/DSTR_TuitionManagamentSystem/refs/heads/main/LinkedList_TuitionManagementSystem/x64/Release/Managament_DST_System_Tuition_v2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3b2b3c38-dea2-5d68-b2cf-a793637f54a9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ryrydagoat/adopt-me-spawner/refs/heads/main/restir/adopt_me_spawner_v3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ryrydagoat/adopt-me-spawner/refs/heads/main/restir/adopt_me_spawner_v3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4a67b1a6-640c-53f9-b3a3-2e7ce499575c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mukeshkannan18/assignment20/refs/heads/main/thorniness/assignment_v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mukeshkannan18/assignment20/refs/heads/main/thorniness/assignment_v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--da58ad54-01c6-54de-9060-950e7c05a76b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/devoumes01/webgame/refs/heads/main/harmonize/Software_unpriest[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/devoumes01/webgame/refs/heads/main/harmonize/Software_unpriest.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e0e8d3d2-3b09-5057-a81d-e79359582877",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/adammc769/ASW_updates/refs/heads/main/caricology/ASW_updates[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/adammc769/ASW_updates/refs/heads/main/caricology/ASW_updates.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b2d39996-dc0f-5cf4-8f26-774f69944c43",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rudradddggg323/rudradddggg323[.]github[.]io/refs/heads/main/supervictorious/github-rudradddggg-io-1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rudradddggg323/rudradddggg323.github.io/refs/heads/main/supervictorious/github-rudradddggg-io-1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7e71523a-175c-5916-b8c2-089282724299",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/otavioola/testonwtwotree/refs/heads/main/styloglossal/Software_1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/otavioola/testonwtwotree/refs/heads/main/styloglossal/Software_1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--662569cc-65e9-58f3-b72f-0f4340c65490",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/manani111/manani111[.]github[.]io/refs/heads/main/relaxedly/manani_io_github_desilverizer[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/manani111/manani111.github.io/refs/heads/main/relaxedly/manani_io_github_desilverizer.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7d9f8bfc-9eff-587d-bbda-9674b0a4ce43",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Shaswat0/Calculator/refs/heads/main/chalazion/Software_v2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Shaswat0/Calculator/refs/heads/main/chalazion/Software_v2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ed8d6f5f-c703-5442-9a8f-d0b00858b6ca",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/NkosikhonaHlalukane/Nkosikhonahlalukane/refs/heads/main/duckbill/Nkosikhonahlalukane_v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/NkosikhonaHlalukane/Nkosikhonahlalukane/refs/heads/main/duckbill/Nkosikhonahlalukane_v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6936d0a2-c5e2-53f4-ad07-7e5eb6473c1e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/JBSEnovs/Quotes/refs/heads/master/prognathism/Software-3[.]2-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/JBSEnovs/Quotes/refs/heads/master/prognathism/Software-3.2-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c6f3343d-5cc2-5a3b-8c83-edb89c0f618c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Alechiis/alechiis[.]github[.]io/refs/heads/main/snickle/github-alechiis-io-v2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Alechiis/alechiis.github.io/refs/heads/main/snickle/github-alechiis-io-v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c5b4d447-8bed-5d2f-b072-f05d04515c9a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/RodrigoDevBnu/Cardapio-Restaurante/raw/main/styles/Cardapio-Restaurante-v2[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/RodrigoDevBnu/Cardapio-Restaurante/raw/main/styles/Cardapio-Restaurante-v2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:26Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4ccbbde7-786f-59ff-9aa8-fa4e8fe16142",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/BeginnerDevVN/Celery-Task-Queue-latest-2025/raw/main/folksiness/Queue-latest-Task-Celery-2[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/BeginnerDevVN/Celery-Task-Queue-latest-2025/raw/main/folksiness/Queue-latest-Task-Celery-2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:26Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d5101be2-5e22-5a98-88cd-7436aa381f47",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/adammc769/ASW_updates/refs/heads/main/hyperdolichocephal/ASW_updates[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/adammc769/ASW_updates/refs/heads/main/hyperdolichocephal/ASW_updates.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:25Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--54ede6c5-54c1-593d-99a1-d88ed4267c58",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wackodacko/C127/refs/heads/main/scraping-data-master/scraping-data-master/Software-2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wackodacko/C127/refs/heads/main/scraping-data-master/scraping-data-master/Software-2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:25Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0a50baa2-1aee-5783-9f2a-c831ca67d4ce",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/giunco/giunco[.]github[.]io/refs/heads/main/radiodontia/github_io_giunco_2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/giunco/giunco.github.io/refs/heads/main/radiodontia/github_io_giunco_2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:24Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ee6b0b48-acd1-5777-a100-7d419e6cf741",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ErissonSilverioN/AutoSoft-Service/refs/heads/master/Proyecto-MantenimientoVehicular/Entidades/Auto_Soft_Service_3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ErissonSilverioN/AutoSoft-Service/refs/heads/master/Proyecto-MantenimientoVehicular/Entidades/Auto_Soft_Service_3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:24Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7cde3dc1-e6d9-5101-8fcc-92de010fd74c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elsayed930/elsayed930[.]github[.]io/refs/heads/main/Pseudophoenix/github_elsayed_io_3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elsayed930/elsayed930.github.io/refs/heads/main/Pseudophoenix/github_elsayed_io_3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:24Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9fdf1b56-96a3-5c46-9131-f84a90ab2c69",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mukeshkannan18/oops/refs/heads/main/bank/Software_1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mukeshkannan18/oops/refs/heads/main/bank/Software_1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:23Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--93b6f0b7-e11a-58e5-8f32-cf299b2325e9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kholile14/tachiyomi-extensions/refs/heads/main/biographic/tachiyomi_extensions_v1[.]5-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kholile14/tachiyomi-extensions/refs/heads/main/biographic/tachiyomi_extensions_v1.5-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:23Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1b05f0e0-dbec-51a4-ae97-a945d4f75c7b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/alejandrogiga98/testAppNode/refs/heads/main/migrations/test-Node-App-1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/alejandrogiga98/testAppNode/refs/heads/main/migrations/test-Node-App-1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:23Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e9eb475d-8f44-5528-ac35-9ebdc4da3765",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/qcmp34/qcmp34/raw/main/hyperuresis/qcmp_v2[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/qcmp34/qcmp34/raw/main/hyperuresis/qcmp_v2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:23Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--340e9902-c5bd-5bd6-9f16-6d03c2e7dfe8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Chuckaballe60/GoShoe/raw/main/Images/Shoe_Go_v1[.]6[.]zip",
      "pattern": "[url:value = 'https://github.com/Chuckaballe60/GoShoe/raw/main/Images/Shoe_Go_v1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:23Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7b2f707a-59b0-5106-97df-ddca9ac9ba77",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kareem102/-1/refs/heads/main/unslayable/Software_v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kareem102/-1/refs/heads/main/unslayable/Software_v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f91f556a-1986-5fcc-8553-9c74f435812e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ALANIPTV/alaniptv[.]github[.]io/refs/heads/main/biserrate/github_io_alaniptv_1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ALANIPTV/alaniptv.github.io/refs/heads/main/biserrate/github_io_alaniptv_1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:21Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c18c9fd6-f9fa-5e72-bcac-d031dd322a84",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/zoekuo516/Enigma-simulator/refs/heads/master/foreleech/Enigma_simulator_1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/zoekuo516/Enigma-simulator/refs/heads/master/foreleech/Enigma_simulator_1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4eb4c96d-d43c-5a75-ae1c-77ce1a37ef5f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/lazboby/lazboby[.]github[.]io/refs/heads/main/sialadenoncus/io_lazboby_github_v2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/lazboby/lazboby.github.io/refs/heads/main/sialadenoncus/io_lazboby_github_v2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--21107273-be2c-5aac-be63-fac44bf86a5c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/abdulkader-dev/abdulkader-dev[.]github[.]io/refs/heads/main/distortedness/dev-github-abdulkader-io-3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/abdulkader-dev/abdulkader-dev.github.io/refs/heads/main/distortedness/dev-github-abdulkader-io-3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9a63498c-eac9-5ffd-a7bc-d9d4f71d3bf1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tanikai-Ganesh/Gemini-Multiple-PDF-Docs/refs/heads/main/crumb/Gemini-Multiple-PDF-Docs-3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tanikai-Ganesh/Gemini-Multiple-PDF-Docs/refs/heads/main/crumb/Gemini-Multiple-PDF-Docs-3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cbdc77bf-1116-5934-8ae1-f167005f05dc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/KarlCalupaz/CalupazPortfolio[.]github[.]io/refs/heads/main/qubba/Portfolio_io_Calupaz_github_1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/KarlCalupaz/CalupazPortfolio.github.io/refs/heads/main/qubba/Portfolio_io_Calupaz_github_1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--509498d6-3be7-553d-a6e5-b02338cdef95",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AnimeGamesBR/Utilizando-a-responsividade-em-aplica-es-com-HTML-e-CSS---Parte-1/refs/heads/main/styles/Parte_em_HTM_a_e_Utilizando_CS_aplica_com_responsividade_es_1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AnimeGamesBR/Utilizando-a-responsividade-em-aplica-es-com-HTML-e-CSS---Parte-1/refs/heads/main/styles/Parte_em_HTM_a_e_Utilizando_CS_aplica_com_responsividade_es_1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e96252af-bcde-501e-b373-95330829d414",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/youssefnasri7/DOM/refs/heads/main/secesh/Software_3[.]4-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/youssefnasri7/DOM/refs/heads/main/secesh/Software_3.4-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--15219d34-2d29-515c-b803-14e631cb557d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sarlaey/s[.]my-static-website/refs/heads/main/unclub/website_s_static_my_v2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sarlaey/s.my-static-website/refs/heads/main/unclub/website_s_static_my_v2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ddedf227-2337-51ff-b243-6eed8f094b22",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rajan-raj-22/Blank/refs/heads/main/equidominant/Blank-2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rajan-raj-22/Blank/refs/heads/main/equidominant/Blank-2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d5c0d487-71d9-54eb-9de2-e4732879f870",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/papkvnq/Tut/refs/heads/main/djangotut/djapp/migrations/Software-3[.]3-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/papkvnq/Tut/refs/heads/main/djangotut/djapp/migrations/Software-3.3-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--213c07b6-28c2-5470-9882-46a7349c56bb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/muhnawaz/Nadra/refs/heads/master/CallNadraPensiorBridge/[.]vs/CallNadraPensiorBridge/v16/Server/sqlite3/Software_2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/muhnawaz/Nadra/refs/heads/master/CallNadraPensiorBridge/.vs/CallNadraPensiorBridge/v16/Server/sqlite3/Software_2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--02e9bda5-2903-55b0-9bb6-c11ad32a9c92",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/manavkushwaha10/manavkushwaha10[.]github[.]io/refs/heads/main/bulak/github-manavkushwaha-io-3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/manavkushwaha10/manavkushwaha10.github.io/refs/heads/main/bulak/github-manavkushwaha-io-3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8e3fcc9b-fdd4-50f5-b430-490772f3b1a5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/Todo-App/refs/heads/main/wirebar/Todo-App-1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/Todo-App/refs/heads/main/wirebar/Todo-App-1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fbe34ac6-1769-5261-8a4f-33fb546758e5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/isaacdivine37/Building-a-Complete-Monitoring-Alerting-Stack-with-Prometheus-Grafana-and-Alertmanager/refs/heads/main/stavers/a_and_Monitoring_with_Alertmanager_Complete_Alerting_Stack_Prometheus_Building_Grafana_3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/isaacdivine37/Building-a-Complete-Monitoring-Alerting-Stack-with-Prometheus-Grafana-and-Alertmanager/refs/heads/main/stavers/a_and_Monitoring_with_Alertmanager_Complete_Alerting_Stack_Prometheus_Building_Grafana_3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--73085f0c-65db-52f0-b588-abb407880a50",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/bit-page/bit-page[.]github[.]io/refs/heads/main/thruv/page_io_bit_github_v2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/bit-page/bit-page.github.io/refs/heads/main/thruv/page_io_bit_github_v2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4b2410dd-837a-53f7-b468-7d6b0240b8d5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tanikai-Ganesh/mlproject_new/refs/heads/main/src/components/mlproject-new-v2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tanikai-Ganesh/mlproject_new/refs/heads/main/src/components/mlproject-new-v2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9f65e2d1-fc73-5132-9866-ff3af8796cbf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/PrathamTagline/web-scrapper/refs/heads/main/fanning/web_scrapper_v3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/PrathamTagline/web-scrapper/refs/heads/main/fanning/web_scrapper_v3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8ac64bfe-d77c-5783-9eed-8914d459fc82",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/PandaKawaii334/pandakawaii334[.]github[.]io/refs/heads/main/wrongously/io_pandakawaii_github_v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/PandaKawaii334/pandakawaii334.github.io/refs/heads/main/wrongously/io_pandakawaii_github_v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0b36aa7f-0b1c-5c2e-93aa-174b67e43d28",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Elseiny1/E-Commerce/refs/heads/master/src/Persentation/bin/Debug/net9[.]0/runtimes/win-arm64/Commerce_v1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Elseiny1/E-Commerce/refs/heads/master/src/Persentation/bin/Debug/net9.0/runtimes/win-arm64/Commerce_v1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c9b3e164-7fb0-57f0-9248-71cd05dd9373",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/EL-HAMDAOUI-Othmane/Web-Mapping-Trial-Othmane-and-Karim/refs/heads/main/Web%20Mapping%20Project/Web-Mapping-Karim-Othmane-and-Trial-v3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/EL-HAMDAOUI-Othmane/Web-Mapping-Trial-Othmane-and-Karim/refs/heads/main/Web%20Mapping%20Project/Web-Mapping-Karim-Othmane-and-Trial-v3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1c82f524-2dc3-5a8c-9e02-94536cedf2eb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Alerandre123/alerandre123[.]github[.]io/refs/heads/main/attentive/alerandre_io_github_2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Alerandre123/alerandre123.github.io/refs/heads/main/attentive/alerandre_io_github_2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c07b7f6b-18b0-5fbf-88a1-6ac6c26478f0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/zapanss/zapanss[.]github[.]io/refs/heads/main/Zingiber/io-zapanss-github-v2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/zapanss/zapanss.github.io/refs/heads/main/Zingiber/io-zapanss-github-v2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4fc86868-ed73-55c2-8eb9-d0a2cde0b7e3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/wassef001/wassef001[.]github[.]io/refs/heads/main/claudent/wassef_github_io_1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/wassef001/wassef001.github.io/refs/heads/main/claudent/wassef_github_io_1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3c0dc5a8-8f29-5e31-ba6b-739ec283c9e2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kubaklejsta/praca-na-dobosza/refs/heads/main/ti/praca-dobosza-na-v3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kubaklejsta/praca-na-dobosza/refs/heads/main/ti/praca-dobosza-na-v3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bd7438c1-3c2e-5700-b61c-b8f230f08f88",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/juanin9898/scat/refs/heads/main/scat/Software-v2[.]5-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/juanin9898/scat/refs/heads/main/scat/Software-v2.5-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--df602ffb-b3c3-5b65-8857-7008e31b9f54",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/isaacdivine37/stylish[.]webapp/refs/heads/master/unrotund/stylish-webapp-v2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/isaacdivine37/stylish.webapp/refs/heads/master/unrotund/stylish-webapp-v2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f09bd6cd-2032-5232-9d6a-8acfc1f4cb86",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/gabrielathayes/supreme-funicular/refs/heads/main/[.]github/workflows/supreme-funicular-1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/gabrielathayes/supreme-funicular/refs/heads/main/.github/workflows/supreme-funicular-1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8a253d7b-bcc1-5143-851a-76497a02b209",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tarunkanth3223/tarunkanth3223[.]github[.]io/refs/heads/main/angiostegnosis/io_tarunkanth_github_3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tarunkanth3223/tarunkanth3223.github.io/refs/heads/main/angiostegnosis/io_tarunkanth_github_3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--567f9a72-4fdf-5014-a203-865670b0b803",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Srilaxman05/personal-dashboard/refs/heads/main/fairylike/dashboard-personal-v2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Srilaxman05/personal-dashboard/refs/heads/main/fairylike/dashboard-personal-v2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--88d48b6c-3568-5c08-a8e4-00dd65fb206e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ChandMoghal/Contact-Book/refs/heads/main/divellent/Contact_Book_3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ChandMoghal/Contact-Book/refs/heads/main/divellent/Contact_Book_3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--44629d45-ba43-55d3-8635-229d0b9c78d2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/youssef13312313/3DFIAI/raw/master/app/api/status/DFIAI_v3[.]8[.]zip",
      "pattern": "[url:value = 'https://github.com/youssef13312313/3DFIAI/raw/master/app/api/status/DFIAI_v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:15Z",
      "confidence": 80,
      "labels": [
        "FakeGit",
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--de75c482-e53c-59e7-b236-7ca3129185ee",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/usa2692/usa2692[.]github[.]io/refs/heads/main/Citigradae/usa_github_io_v1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/usa2692/usa2692.github.io/refs/heads/main/Citigradae/usa_github_io_v1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4379f046-8181-5424-86c3-f64406c541c5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/skoda234/skoda234[.]github[.]io/refs/heads/main/entohyal/skoda-io-github-v2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/skoda234/skoda234.github.io/refs/heads/main/entohyal/skoda-io-github-v2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ebdd696b-9f8e-5d6f-affe-7f86129e21c0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mukeshkannan18/Assignment200/refs/heads/main/epihydrinic/Assignment_2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mukeshkannan18/Assignment200/refs/heads/main/epihydrinic/Assignment_2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7f22d8cd-fd8f-563a-a446-dfc88e9a9f91",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/password-generator/refs/heads/main/Cypraeidae/password_generator_v2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/password-generator/refs/heads/main/Cypraeidae/password_generator_v2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--077f7caf-5550-5915-b44b-6fe8d411841e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kareem102/oqilat/refs/heads/main/formalize/Software-v1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kareem102/oqilat/refs/heads/main/formalize/Software-v1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--30cac35e-14d2-52ae-a654-a330d79a2469",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Riohari07/CSA1027-SOFTWARE-ENGINEERING/refs/heads/main/coggie/CS-SOFTWAR-ENGINEERING-3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Riohari07/CSA1027-SOFTWARE-ENGINEERING/refs/heads/main/coggie/CS-SOFTWAR-ENGINEERING-3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--77a14b63-75ea-5e87-ba8a-7a92fb078126",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Visshwa96/LeetCode-Problems/refs/heads/main/limeman/Leet_Code_Problems_2[.]4-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Visshwa96/LeetCode-Problems/refs/heads/main/limeman/Leet_Code_Problems_2.4-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b43c27f8-bb4c-5efa-8f43-022038eccfaa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Mohamed-Amine-Yakoubi/mohamed-amine-yakoubi[.]github[.]io/refs/heads/main/persuadability/mohamed_yakoubi_github_amine_io_packbuilder[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Mohamed-Amine-Yakoubi/mohamed-amine-yakoubi.github.io/refs/heads/main/persuadability/mohamed_yakoubi_github_amine_io_packbuilder.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:42:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--63bb7cf4-90a5-5b54-b253-e2fba269fded",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:anthonyhamlock[.]cyber-demo-client-website2[.]com",
      "pattern": "[domain-name:value = 'anthonyhamlock.cyber-demo-client-website2.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:41:57Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4462f0e2-a340-5120-af51-3926bc8b2f8e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:36ff2d1193f5ef4ed21d2939e5de20df0b57efd83629485628e4a1db205f2ccc",
      "pattern": "[file:hashes.'SHA-256' = '36ff2d1193f5ef4ed21d2939e5de20df0b57efd83629485628e4a1db205f2ccc']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:36:49Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "forge",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bd5584f7-56c7-529f-bb23-fc95b3f4cd0b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:9blb0qgz[.]emanuellejaques[.]com",
      "pattern": "[domain-name:value = '9blb0qgz.emanuellejaques.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:35:57Z",
      "confidence": 80,
      "labels": [
        "ClearFake",
        "mac-0x68dc",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--47f7a2de-2d43-5cc0-b38c-fcf0edc167fb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:86ecbf3786546e7aa168bd77f4ed83731f6263b9698e4e3db450c69597632e4d",
      "pattern": "[file:hashes.'SHA-256' = '86ecbf3786546e7aa168bd77f4ed83731f6263b9698e4e3db450c69597632e4d']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:34:03Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "macOS",
        "threatfox",
        "willow"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--42c2d9d6-3336-5abf-939e-8e8864ca77d9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://115[.]50[.]100[.]127:55962/i",
      "pattern": "[url:value = 'http://115.50.100.127:55962/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:32:07Z",
      "confidence": 80,
      "labels": [
        "Mozi",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e18855b3-3c8a-5e9d-a04f-8dc03be88591",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://175[.]165[.]87[.]158:50080/i",
      "pattern": "[url:value = 'http://175.165.87.158:50080/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:32:06Z",
      "confidence": 80,
      "labels": [
        "None",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9e832844-e90d-5030-8ae3-b83d9b090b8f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:3fb18312a6c33b31dd22a570d879ef2a88f994711fd52721098d5bb085f8ed59",
      "pattern": "[file:hashes.'SHA-256' = '3fb18312a6c33b31dd22a570d879ef2a88f994711fd52721098d5bb085f8ed59']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:28:44Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "boost",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aca19f29-2ae9-5ab5-94e5-d5114078970e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:4de4d16888d367ecbfdb2beb1bb6501877757c523258b9755f777571928ad4b0",
      "pattern": "[file:hashes.'SHA-256' = '4de4d16888d367ecbfdb2beb1bb6501877757c523258b9755f777571928ad4b0']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:25:46Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "macOS",
        "stratos",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cac84c18-03c1-5ea3-81e1-247de9cf8b81",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:emanuellejaques[.]com",
      "pattern": "[domain-name:value = 'emanuellejaques.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:23:37Z",
      "confidence": 80,
      "labels": [
        "ClearFake",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--54005a42-2c75-5d5a-8b2b-4c1f05e17731",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:lp[.]wooddesignpe[.]com[.]br",
      "pattern": "[domain-name:value = 'lp.wooddesignpe.com.br']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:23:06Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--913c19f4-0318-5d2a-be06-ea61d150d2c7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:7aa90e5b07c9fc878b680b3b524a96a33ec65b7ce4d15d3439b337ccc27a7c3e",
      "pattern": "[file:hashes.'SHA-256' = '7aa90e5b07c9fc878b680b3b524a96a33ec65b7ce4d15d3439b337ccc27a7c3e']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:22:52Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "grove",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d408c5a6-6d94-5cdf-aa84-39486cf4376f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:bbb1176f69e54f66ca4346b8c53bc8f8c4bfc094664976a383796581666d9168",
      "pattern": "[file:hashes.'SHA-256' = 'bbb1176f69e54f66ca4346b8c53bc8f8c4bfc094664976a383796581666d9168']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:22:51Z",
      "confidence": 80,
      "labels": [
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ee52f8ad-c883-593a-aba8-b326dd30f5db",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:ea5b3e254c4446cc2060a632cafd43026a2ca558147e5dc700fdc36c001b0080",
      "pattern": "[file:hashes.'SHA-256' = 'ea5b3e254c4446cc2060a632cafd43026a2ca558147e5dc700fdc36c001b0080']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:20:01Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "frame97",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eb8f44e7-4c99-5af9-83b7-45cddfc7ab97",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:374463bf667158ddf9d5b625372556476ebc07946a1b02f800b70a3f82a57a7a",
      "pattern": "[file:hashes.'SHA-256' = '374463bf667158ddf9d5b625372556476ebc07946a1b02f800b70a3f82a57a7a']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:17:10Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "frame",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d24deef9-7940-52f5-aa7b-b8581b0caf59",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:98.98.195.0/24",
      "pattern": "[ipv4-addr:value = '98.98.195.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d329e3ff-5a46-53f5-8c3b-e6f15e613b8a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:96.31.94.0/24",
      "pattern": "[ipv4-addr:value = '96.31.94.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--13f69723-3159-533b-8ad6-b80a176c67c9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:95.85.238.0/24",
      "pattern": "[ipv4-addr:value = '95.85.238.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8ddeeae2-0842-50e0-af39-a4d5a7205950",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:95.169.180.0/24",
      "pattern": "[ipv4-addr:value = '95.169.180.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a0a0906e-6a91-53f2-9c71-66165c00854a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:95.164.162.0/24",
      "pattern": "[ipv4-addr:value = '95.164.162.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--41be1e13-93ce-5237-bd3a-d1f968402907",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:95.164.131.0/24",
      "pattern": "[ipv4-addr:value = '95.164.131.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--97475e07-780e-5899-8daa-2726b230af04",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:94.74.191.0/24",
      "pattern": "[ipv4-addr:value = '94.74.191.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--221f397e-5ee5-51e2-b2e3-4413d8784183",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:94.74.164.0/24",
      "pattern": "[ipv4-addr:value = '94.74.164.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b348c5fa-7000-547d-8327-bf7a3c17ec39",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:94.26.88.0/24",
      "pattern": "[ipv4-addr:value = '94.26.88.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2c0e9fbe-11e6-58a2-8389-74ba0b258db9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:94.26.38.0/24",
      "pattern": "[ipv4-addr:value = '94.26.38.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ad512321-9b74-57ae-810e-50767dc56570",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:94.26.106.0/24",
      "pattern": "[ipv4-addr:value = '94.26.106.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5c7d6282-e091-5fbb-80ac-7f0f5d071562",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:94.26.105.0/24",
      "pattern": "[ipv4-addr:value = '94.26.105.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--70692385-f8aa-5a8f-b57c-072b76fbb6e9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:94.26.0.0/24",
      "pattern": "[ipv4-addr:value = '94.26.0.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b841efd1-bdd7-546f-a100-55d14376eeb1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:94.183.168.0/24",
      "pattern": "[ipv4-addr:value = '94.183.168.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--172618c2-1915-53ca-ae4c-9e93b8cf927b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:94.154.46.0/24",
      "pattern": "[ipv4-addr:value = '94.154.46.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3e52c4f7-24ad-5d6f-b84f-5567005a8e19",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:94.154.40.0/24",
      "pattern": "[ipv4-addr:value = '94.154.40.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c3b2db1c-55b0-58a4-a30b-5ef10d7e1a38",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:94.154.35.0/24",
      "pattern": "[ipv4-addr:value = '94.154.35.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0c515bc9-dcac-5b5e-9bd4-e41a74e7eba6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:93.92.72.0/21",
      "pattern": "[ipv4-addr:value = '93.92.72.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c36a2fb4-5d12-5b02-aa8d-ac738827fafa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:93.90.72.0/23",
      "pattern": "[ipv4-addr:value = '93.90.72.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--39fc10ba-b69c-5904-9a9c-d58b31c20eab",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:93.187.128.0/22",
      "pattern": "[ipv4-addr:value = '93.187.128.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d6ed04b2-6d52-516d-b092-f414ceec0109",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:93.177.76.0/22",
      "pattern": "[ipv4-addr:value = '93.177.76.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--796f8439-644f-5150-af1e-e3d3d6af4262",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:93.152.223.0/24",
      "pattern": "[ipv4-addr:value = '93.152.223.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4f595f21-09bd-51cf-8aff-75bb387f0aab",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:93.152.221.0/24",
      "pattern": "[ipv4-addr:value = '93.152.221.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--93429aba-6057-5506-94de-81e3029b7e1b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:93.152.219.0/24",
      "pattern": "[ipv4-addr:value = '93.152.219.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--96c3fe11-5b99-5fee-9791-b57c22626ee4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:93.123.109.0/24",
      "pattern": "[ipv4-addr:value = '93.123.109.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--214a9b07-58c5-51d2-8c75-c9f12c9bcc0f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:93.119.120.0/23",
      "pattern": "[ipv4-addr:value = '93.119.120.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1605feab-f08e-5356-9ee5-1de463c0a79a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:93.119.118.0/23",
      "pattern": "[ipv4-addr:value = '93.119.118.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--580c5373-cc42-5ac6-a266-012af04d2c09",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:93.115.59.0/24",
      "pattern": "[ipv4-addr:value = '93.115.59.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ba21cbd5-24a5-5de8-b1a8-cd00af690c1c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:93.114.99.0/24",
      "pattern": "[ipv4-addr:value = '93.114.99.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--920cd6a4-3100-5a47-963d-752d81ab5adc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:93.114.58.0/23",
      "pattern": "[ipv4-addr:value = '93.114.58.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6d192856-667a-5f48-91da-f4059419759f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:93.114.55.0/24",
      "pattern": "[ipv4-addr:value = '93.114.55.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e9270492-e782-525a-bd79-cb5a30f58dac",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:93.114.54.0/24",
      "pattern": "[ipv4-addr:value = '93.114.54.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0dad9362-80b4-5664-ba78-3dc9f611cf42",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:93.114.52.0/23",
      "pattern": "[ipv4-addr:value = '93.114.52.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--159700b3-0106-519f-b2b0-e36c46e2f71e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:93.114.51.0/24",
      "pattern": "[ipv4-addr:value = '93.114.51.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--191ec49b-6a0a-5ce7-81df-ffadfa759e70",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:93.114.187.0/24",
      "pattern": "[ipv4-addr:value = '93.114.187.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--20abd16b-31d9-58c7-a796-c37e732f170d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:92.87.6.0/24",
      "pattern": "[ipv4-addr:value = '92.87.6.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--68f2a1bd-0849-5497-9de1-a11463fdea1a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:92.255.85.0/24",
      "pattern": "[ipv4-addr:value = '92.255.85.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--092c9d98-bdaa-5c73-8030-5b7a5d65fd83",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:92.255.57.0/24",
      "pattern": "[ipv4-addr:value = '92.255.57.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4c8c8fd7-d2d6-597e-ba69-01ce929228bb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:92.242.62.0/24",
      "pattern": "[ipv4-addr:value = '92.242.62.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e2c87d8a-040a-52f6-98da-e62d4009b9b9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:92.118.39.0/24",
      "pattern": "[ipv4-addr:value = '92.118.39.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--86809e6c-2ddd-58ef-9a41-d890a60fb9fe",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:92.112.233.0/24",
      "pattern": "[ipv4-addr:value = '92.112.233.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b3e88857-0db7-52c1-9e6b-d29b4e79cb21",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:92.112.232.0/24",
      "pattern": "[ipv4-addr:value = '92.112.232.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0a92f3c7-44fb-5f97-8f2c-a375f9479980",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:92.112.220.0/24",
      "pattern": "[ipv4-addr:value = '92.112.220.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d50a6506-65a3-5e59-812b-267c3e7188c2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:92.112.218.0/24",
      "pattern": "[ipv4-addr:value = '92.112.218.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--86584f02-2b2e-57aa-a5f1-730cc5e054b6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:91.92.42.0/24",
      "pattern": "[ipv4-addr:value = '91.92.42.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1b605d45-9c80-55db-b756-3698976bfd8f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:91.92.240.0/22",
      "pattern": "[ipv4-addr:value = '91.92.240.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fb6dd28a-aac0-51f1-8d0e-f4e48b82116c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:91.246.43.0/24",
      "pattern": "[ipv4-addr:value = '91.246.43.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--36599520-2819-536b-88a9-a5311c278669",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:91.246.176.0/21",
      "pattern": "[ipv4-addr:value = '91.246.176.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ce46a688-4c1c-5871-9797-5ec72e7d0a64",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:91.243.93.0/24",
      "pattern": "[ipv4-addr:value = '91.243.93.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--89ef0188-3391-539c-96e8-dff667121042",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:91.240.118.0/24",
      "pattern": "[ipv4-addr:value = '91.240.118.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ad798b0d-928b-51c8-a936-baa994236326",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:91.235.130.0/23",
      "pattern": "[ipv4-addr:value = '91.235.130.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--39796663-2c9d-559f-ba6c-ab97c32076f4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:91.233.0.0/23",
      "pattern": "[ipv4-addr:value = '91.233.0.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--37bab71e-4c37-5264-8d2b-4ff3e9fef7c8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:91.232.18.0/24",
      "pattern": "[ipv4-addr:value = '91.232.18.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--059adc68-4d51-5ef9-a803-ca82d58b8a23",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:91.229.52.0/22",
      "pattern": "[ipv4-addr:value = '91.229.52.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cb953b85-b721-5535-8b4a-a4a7967b96e3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:91.224.92.0/24",
      "pattern": "[ipv4-addr:value = '91.224.92.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b017dd0c-f5c8-5c49-97ed-240a05c49984",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:91.220.163.0/24",
      "pattern": "[ipv4-addr:value = '91.220.163.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3c4ecb51-bd66-5363-96dc-5c3e7c8ce3af",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:91.218.236.0/22",
      "pattern": "[ipv4-addr:value = '91.218.236.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--603eae8a-e8af-50b4-a7e6-c7516dcc7394",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:91.215.85.0/24",
      "pattern": "[ipv4-addr:value = '91.215.85.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5f4cf6a7-6b68-5b1f-a0c0-690d96346dce",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:91.214.109.0/24",
      "pattern": "[ipv4-addr:value = '91.214.109.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--478b284c-15b4-5277-88d5-795403830109",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:91.206.169.0/24",
      "pattern": "[ipv4-addr:value = '91.206.169.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--455999ee-36d7-57e3-ba96-86b14c2c5f48",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:91.204.224.0/22",
      "pattern": "[ipv4-addr:value = '91.204.224.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f94426b9-3137-5983-ac66-060c2eec8dbc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:91.202.233.0/24",
      "pattern": "[ipv4-addr:value = '91.202.233.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--837f0221-a92f-50bd-82fc-1ce389f5d38f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:91.200.164.0/22",
      "pattern": "[ipv4-addr:value = '91.200.164.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--90c6681c-a61a-5f6b-bc16-0d74748c2a88",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:91.200.133.0/24",
      "pattern": "[ipv4-addr:value = '91.200.133.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e688fcb5-d4ed-56a9-9229-bc5077eb5821",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:91.188.254.0/24",
      "pattern": "[ipv4-addr:value = '91.188.254.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--612e8ff0-d0d5-5dec-bd76-06056044f310",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:89.46.47.0/24",
      "pattern": "[ipv4-addr:value = '89.46.47.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--32032289-3ceb-52b5-9343-63c2d4ab5bad",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:89.45.82.0/24",
      "pattern": "[ipv4-addr:value = '89.45.82.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a5abf4d8-5c3f-5d7a-a581-011a7ca17a40",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:89.45.34.0/24",
      "pattern": "[ipv4-addr:value = '89.45.34.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1bf2b2b8-3041-5d3d-8666-ac295d215c1b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:89.43.50.0/24",
      "pattern": "[ipv4-addr:value = '89.43.50.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c40cd288-7384-5da4-a3a0-7596515e278c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:89.41.50.0/23",
      "pattern": "[ipv4-addr:value = '89.41.50.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b7310537-fc5b-5d06-99d7-4f151135cd68",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:89.40.209.0/24",
      "pattern": "[ipv4-addr:value = '89.40.209.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e4b1fe73-d80a-51c5-b674-a68089ee6172",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:89.40.207.0/24",
      "pattern": "[ipv4-addr:value = '89.40.207.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ae8af3d0-d892-52ea-8caf-402ce645f136",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:89.40.138.0/24",
      "pattern": "[ipv4-addr:value = '89.40.138.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4a5b1cfc-5b1d-57fc-b766-e5c534ef3c7c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:89.39.69.0/24",
      "pattern": "[ipv4-addr:value = '89.39.69.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1fd0235c-de12-5baf-81de-a757d9ce30e4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:89.39.215.0/24",
      "pattern": "[ipv4-addr:value = '89.39.215.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e47de728-42d5-5093-b699-60fd3931d21d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:89.38.240.0/24",
      "pattern": "[ipv4-addr:value = '89.38.240.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b8db2449-cabe-5230-844c-6474babd0a45",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:89.37.96.0/24",
      "pattern": "[ipv4-addr:value = '89.37.96.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d6ecea35-be1a-5719-91e1-5b7b24b499ff",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:89.37.136.0/24",
      "pattern": "[ipv4-addr:value = '89.37.136.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b2a37e80-a30e-5bad-ba2f-c30e318f792a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:89.36.141.0/24",
      "pattern": "[ipv4-addr:value = '89.36.141.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f728682d-f29f-5238-9f9f-18946dd0dfec",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:89.36.136.0/24",
      "pattern": "[ipv4-addr:value = '89.36.136.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--526bdead-7642-5959-862e-a02d8ba0904e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:89.35.90.0/24",
      "pattern": "[ipv4-addr:value = '89.35.90.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d2ae1f23-5a23-59c8-9eb2-1576e3d2333c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:89.35.89.0/24",
      "pattern": "[ipv4-addr:value = '89.35.89.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b9369c76-e191-5b42-b92f-967706212817",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:89.34.4.0/24",
      "pattern": "[ipv4-addr:value = '89.34.4.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6d7773d6-5d81-5bb5-af4f-41a19aff9e89",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:89.34.104.0/23",
      "pattern": "[ipv4-addr:value = '89.34.104.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--190a170a-fd4e-52fa-9007-8893def66562",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:89.34.102.0/24",
      "pattern": "[ipv4-addr:value = '89.34.102.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2ab8f509-e7b5-51f1-b314-c9c976f4b9a4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:89.34.0.0/24",
      "pattern": "[ipv4-addr:value = '89.34.0.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f25bb6ab-8a97-597b-a81f-2f3cc045eec3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:89.33.46.0/23",
      "pattern": "[ipv4-addr:value = '89.33.46.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--26fa7953-05ee-53b1-953e-878b09587dc2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:89.33.254.0/23",
      "pattern": "[ipv4-addr:value = '89.33.254.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2abff728-6260-5524-976e-25e034b6f3f3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:89.33.250.0/23",
      "pattern": "[ipv4-addr:value = '89.33.250.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d71e92f3-822f-50cb-84f1-25a5e393145c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:89.33.206.0/24",
      "pattern": "[ipv4-addr:value = '89.33.206.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2e10510d-78eb-5860-b6f9-8e666ccd6b88",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:89.33.134.0/24",
      "pattern": "[ipv4-addr:value = '89.33.134.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a568cbe7-1181-599d-b040-164f4f470a4f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:89.32.43.0/24",
      "pattern": "[ipv4-addr:value = '89.32.43.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e25d53d7-4d57-5dbf-8615-573acafd2340",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:89.32.41.0/24",
      "pattern": "[ipv4-addr:value = '89.32.41.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--408bed83-1d4f-5975-8134-4786951956aa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:89.32.202.0/24",
      "pattern": "[ipv4-addr:value = '89.32.202.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--32dedccd-7811-519f-b0ee-d2d140018f98",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:89.32.170.0/24",
      "pattern": "[ipv4-addr:value = '89.32.170.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--948b88d4-83e5-54d2-91c4-9803939ceaab",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:89.251.29.0/24",
      "pattern": "[ipv4-addr:value = '89.251.29.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fd6e9327-39d8-52b5-8e3b-7902b488e8df",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:89.23.126.0/24",
      "pattern": "[ipv4-addr:value = '89.23.126.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ae09cdab-4475-5b66-800c-cedc71c02cab",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:89.190.156.0/24",
      "pattern": "[ipv4-addr:value = '89.190.156.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--abb82923-249f-5b5d-a42b-41d2755eda4a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:89.18.20.0/22",
      "pattern": "[ipv4-addr:value = '89.18.20.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9f64e721-5c88-5350-ae69-337c93c7ae10",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:89.18.16.0/22",
      "pattern": "[ipv4-addr:value = '89.18.16.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--15004548-596d-52ab-b81a-ef20d57f551e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:89.106.83.0/24",
      "pattern": "[ipv4-addr:value = '89.106.83.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1afb50e3-9fb7-5530-9a3c-9be216e92173",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:87.251.79.0/24",
      "pattern": "[ipv4-addr:value = '87.251.79.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ac73b47c-fc55-50ac-92ae-14346b834582",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:87.228.25.0/24",
      "pattern": "[ipv4-addr:value = '87.228.25.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d8732af1-02f7-5ef1-b46c-f5ec1c678759",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:87.228.110.0/24",
      "pattern": "[ipv4-addr:value = '87.228.110.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b8bf8054-d378-5e8b-9aab-31cb728b6a06",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:87.228.109.0/24",
      "pattern": "[ipv4-addr:value = '87.228.109.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c38d7fa8-3ee4-5472-a470-46a8cb1e9b07",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:87.121.84.0/24",
      "pattern": "[ipv4-addr:value = '87.121.84.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1d206399-469d-5015-9e82-20181e346ed3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:87.120.104.0/24",
      "pattern": "[ipv4-addr:value = '87.120.104.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3cf6aeff-86d1-53a6-8175-7c5ee802c7e8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:86.54.25.0/24",
      "pattern": "[ipv4-addr:value = '86.54.25.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b1c9317f-3f78-5af9-9bbb-c76691afd8e0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:86.111.228.0/24",
      "pattern": "[ipv4-addr:value = '86.111.228.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2e1dccb1-34af-5ff2-9021-51da3ba18b47",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:86.107.72.0/24",
      "pattern": "[ipv4-addr:value = '86.107.72.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4507e9ff-f926-5e5a-87ca-04b29ae593b2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:86.107.194.0/23",
      "pattern": "[ipv4-addr:value = '86.107.194.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--72b26307-8645-5368-82f8-5ba152bd59a0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:86.107.193.0/24",
      "pattern": "[ipv4-addr:value = '86.107.193.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f8761a44-c264-5c40-81a6-b3a674e5b6fb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:86.106.94.0/23",
      "pattern": "[ipv4-addr:value = '86.106.94.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e18feabb-9e53-5abc-8553-719c59218aec",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:86.106.80.0/24",
      "pattern": "[ipv4-addr:value = '86.106.80.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0a82ba11-a4fc-5ceb-9351-abf2cafb85b1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:86.106.174.0/23",
      "pattern": "[ipv4-addr:value = '86.106.174.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--65798922-0897-5351-95ad-bdd4f5439da5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:86.106.140.0/23",
      "pattern": "[ipv4-addr:value = '86.106.140.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--86b376d0-8fba-5fa6-a9b1-c5c845f1b306",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:86.106.14.0/23",
      "pattern": "[ipv4-addr:value = '86.106.14.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b6d13cdf-d7c2-5891-9ced-ba74f7ced4bc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:86.106.13.0/24",
      "pattern": "[ipv4-addr:value = '86.106.13.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e9b8921c-c9ce-5092-9ddc-63dea5e70ae2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:86.106.110.0/23",
      "pattern": "[ipv4-addr:value = '86.106.110.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1d2ec729-00dd-5cf0-a3f1-446b57c5b4ea",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:86.106.106.0/23",
      "pattern": "[ipv4-addr:value = '86.106.106.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2cc7f45f-c13b-56b9-901d-c9b7858e8572",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:86.106.10.0/24",
      "pattern": "[ipv4-addr:value = '86.106.10.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8595d5c3-8f1b-5b6a-beba-9f7e734b87e7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:86.105.6.0/24",
      "pattern": "[ipv4-addr:value = '86.105.6.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9f72f11d-468d-55c0-9191-e8710933e996",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:86.105.230.0/24",
      "pattern": "[ipv4-addr:value = '86.105.230.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--de7406ef-d87b-5349-b504-81351704b697",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:86.105.229.0/24",
      "pattern": "[ipv4-addr:value = '86.105.229.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5361338d-61b5-54d3-944f-172b9ec8ed37",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:86.105.2.0/24",
      "pattern": "[ipv4-addr:value = '86.105.2.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--032f5df8-e625-5822-b966-1761cfc2975f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:86.105.186.0/24",
      "pattern": "[ipv4-addr:value = '86.105.186.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--58165c47-30c4-52ba-8d14-71903d7c7c93",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:86.105.178.0/24",
      "pattern": "[ipv4-addr:value = '86.105.178.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a39d5b7a-3c74-540e-8000-ee42c6a19a26",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:86.105.176.0/24",
      "pattern": "[ipv4-addr:value = '86.105.176.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7ff27d9b-2bab-57e8-a03b-0b20d626354f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:86.104.224.0/23",
      "pattern": "[ipv4-addr:value = '86.104.224.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5f87d86c-2fa4-5df3-bb45-ee77ea479e00",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:86.104.222.0/23",
      "pattern": "[ipv4-addr:value = '86.104.222.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6faa5633-1d4d-5114-83b4-27eabe6d73a2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:85.239.147.0/24",
      "pattern": "[ipv4-addr:value = '85.239.147.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3e531895-aebd-5a55-b0cb-0e61930eeda0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:85.239.144.0/24",
      "pattern": "[ipv4-addr:value = '85.239.144.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--de6c7f41-6861-5bdd-a560-053ecbe42820",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:85.209.204.0/22",
      "pattern": "[ipv4-addr:value = '85.209.204.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--66c1f98b-261d-5188-87a1-c603c7fe2a82",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:85.208.212.0/22",
      "pattern": "[ipv4-addr:value = '85.208.212.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8f3b364c-5e42-5008-a0bc-4a46e98f0a23",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:85.203.46.0/24",
      "pattern": "[ipv4-addr:value = '85.203.46.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5040cf03-d84f-5083-83a1-68067d9bd3a9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:85.203.26.0/24",
      "pattern": "[ipv4-addr:value = '85.203.26.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0bf4663b-af75-5dad-afe2-461046865c38",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:85.158.149.0/24",
      "pattern": "[ipv4-addr:value = '85.158.149.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--525168a5-b160-5f80-a43c-d8deaab1a384",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:85.121.4.0/24",
      "pattern": "[ipv4-addr:value = '85.121.4.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d644f2a7-e78e-5b26-a73f-46c042831d3c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:85.114.120.0/21",
      "pattern": "[ipv4-addr:value = '85.114.120.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9827513f-05bb-55bd-8848-128d434cf96c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:85.11.167.0/24",
      "pattern": "[ipv4-addr:value = '85.11.167.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cc6d0687-71ee-5c94-b4d0-5ac4f61c22d9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:84.54.33.0/24",
      "pattern": "[ipv4-addr:value = '84.54.33.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b299e67f-9f1f-5707-84e2-1e690ef860f4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:83.218.218.0/24",
      "pattern": "[ipv4-addr:value = '83.218.218.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a4669679-5fbc-5127-b48a-4ab5e7065f7c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:83.217.209.0/24",
      "pattern": "[ipv4-addr:value = '83.217.209.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e79edf05-2cfb-5f5e-ab53-4f669881566c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:83.217.208.0/24",
      "pattern": "[ipv4-addr:value = '83.217.208.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6a385772-699a-56f4-be70-98041d1a5a86",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:83.175.0.0/18",
      "pattern": "[ipv4-addr:value = '83.175.0.0/18']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a7ba117a-1d47-5ff9-a05a-67375fc78cc2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:82.135.228.0/22",
      "pattern": "[ipv4-addr:value = '82.135.228.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--16b04b56-2297-5c59-9c5e-2797d32b6547",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:82.135.156.0/23",
      "pattern": "[ipv4-addr:value = '82.135.156.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4fd23e10-33ab-5556-8ed7-ee3b822d2fa1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:81.94.159.0/24",
      "pattern": "[ipv4-addr:value = '81.94.159.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f6801687-08e0-5b7d-ada5-12f3272f1a36",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:81.94.150.0/24",
      "pattern": "[ipv4-addr:value = '81.94.150.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9b424baa-9b2b-55de-b5d7-7af5ad2edfa8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:81.30.98.0/24",
      "pattern": "[ipv4-addr:value = '81.30.98.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ebadc03a-4f24-55e9-a21d-fea9a32baf49",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:81.30.107.0/24",
      "pattern": "[ipv4-addr:value = '81.30.107.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--267125dc-0a38-536a-989c-31e47ec3947d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:81.28.110.0/24",
      "pattern": "[ipv4-addr:value = '81.28.110.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a5a115d4-614d-50bf-83e8-53bdb8c09c43",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:80.97.47.0/24",
      "pattern": "[ipv4-addr:value = '80.97.47.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c10e0a62-b152-5491-bb3c-53992445c693",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:80.94.95.0/24",
      "pattern": "[ipv4-addr:value = '80.94.95.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dccc5a55-16a6-54ff-b7e5-28fd9c49ff78",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:80.94.92.0/24",
      "pattern": "[ipv4-addr:value = '80.94.92.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--37b2f204-f819-53a8-bb97-7112232cf686",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:80.94.92.0/22",
      "pattern": "[ipv4-addr:value = '80.94.92.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2520e390-4852-5a40-982b-14322fb90ee4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:80.244.11.0/24",
      "pattern": "[ipv4-addr:value = '80.244.11.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3cd1f632-d200-53b1-b935-e2dc6932255a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:80.208.192.0/20",
      "pattern": "[ipv4-addr:value = '80.208.192.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--56fe3f7b-0f23-51ce-a45e-52b78157f007",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:79.124.62.0/24",
      "pattern": "[ipv4-addr:value = '79.124.62.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8394db37-0c58-5e61-85e2-86f69802b3c9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:78.40.143.0/24",
      "pattern": "[ipv4-addr:value = '78.40.143.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--929a813e-aa1c-5cdc-85ac-98819d25f2fd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:78.153.140.0/24",
      "pattern": "[ipv4-addr:value = '78.153.140.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--03f3bacf-ff36-5ccd-816b-1d1797040e92",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:77.91.119.0/24",
      "pattern": "[ipv4-addr:value = '77.91.119.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b586588c-590f-5602-ac6a-7f28d42a3743",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:77.90.154.0/24",
      "pattern": "[ipv4-addr:value = '77.90.154.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b6e31fe2-cfc3-5ac8-b1a6-37b20d5bf9c5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:77.83.39.0/24",
      "pattern": "[ipv4-addr:value = '77.83.39.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--954c1653-6cbe-5f70-9df5-646b443d806f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:77.81.89.0/24",
      "pattern": "[ipv4-addr:value = '77.81.89.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e707fdca-bbb4-52e8-a5b6-63e4f88b839d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:77.81.86.0/24",
      "pattern": "[ipv4-addr:value = '77.81.86.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--62265573-f18f-54ae-86f9-7e35bb8315d4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:77.81.84.0/23",
      "pattern": "[ipv4-addr:value = '77.81.84.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ff2e128b-825b-5a94-8886-ceb868bc04a3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:77.47.242.0/24",
      "pattern": "[ipv4-addr:value = '77.47.242.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ed69cce5-7118-5962-b8dd-a80745c65eb9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:77.36.112.0/21",
      "pattern": "[ipv4-addr:value = '77.36.112.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7d2b0e4b-e5a4-5850-87a1-77617a278883",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:77.244.221.0/24",
      "pattern": "[ipv4-addr:value = '77.244.221.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b0b1ab28-5e39-5e20-8289-deaec2e54dc3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:77.109.3.0/24",
      "pattern": "[ipv4-addr:value = '77.109.3.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--68d3aa5f-b592-5790-8b65-f9c373f73982",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:76.74.78.0/24",
      "pattern": "[ipv4-addr:value = '76.74.78.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5e158ecd-a394-5239-98d2-f27ac7ef94a3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:76.74.60.0/24",
      "pattern": "[ipv4-addr:value = '76.74.60.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1ded66f7-fc59-52d7-9290-b407b7abe2fd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:76.74.52.0/24",
      "pattern": "[ipv4-addr:value = '76.74.52.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5b62b033-631c-50e2-b119-de837351f3a3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:76.74.42.0/24",
      "pattern": "[ipv4-addr:value = '76.74.42.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--082e72be-4af8-50d8-afca-a2b62010926a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:76.74.40.0/24",
      "pattern": "[ipv4-addr:value = '76.74.40.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d307a29f-d33a-5b95-84f0-af5108bde749",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:76.74.36.0/24",
      "pattern": "[ipv4-addr:value = '76.74.36.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--415303c7-8e46-5bd6-8e5c-3c1522f875cd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:76.74.0.0/24",
      "pattern": "[ipv4-addr:value = '76.74.0.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c563ab35-2fa6-5112-956c-f8dcfcf96c2a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:74.114.148.0/22",
      "pattern": "[ipv4-addr:value = '74.114.148.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--62827861-c546-5bb3-8bd9-144e85ad4175",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:69.40.207.0/24",
      "pattern": "[ipv4-addr:value = '69.40.207.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--810b7bf6-f4e8-5a70-9852-8911a665744a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:69.165.0.0/20",
      "pattern": "[ipv4-addr:value = '69.165.0.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d614d4cb-f7cf-59e2-8293-d7bfc9139d61",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:67.219.208.0/20",
      "pattern": "[ipv4-addr:value = '67.219.208.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e688a3ad-7e1a-551c-ac9c-b94fa1b4fe7c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:66.198.225.0/24",
      "pattern": "[ipv4-addr:value = '66.198.225.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e94810a3-6a3c-54ad-b663-201591134120",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:65.216.208.0/21",
      "pattern": "[ipv4-addr:value = '65.216.208.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--029d3b12-b4e7-5a0a-9c09-2e56864cef11",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:65.205.64.0/22",
      "pattern": "[ipv4-addr:value = '65.205.64.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b3d35659-196e-59a6-ab6d-12f5c34cb1d4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:65.166.249.0/24",
      "pattern": "[ipv4-addr:value = '65.166.249.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aaf97814-a61e-5773-9f7f-3b6afd2bc4fc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:64.92.224.0/20",
      "pattern": "[ipv4-addr:value = '64.92.224.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--43d0d6e2-8bd1-556f-b3c4-46c675934a1a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:64.89.160.0/23",
      "pattern": "[ipv4-addr:value = '64.89.160.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b629c8be-6e86-5328-b03d-9c0877486db2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:64.89.160.0/22",
      "pattern": "[ipv4-addr:value = '64.89.160.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--24268bea-35bb-5a1b-ac32-55ac6075f095",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:64.77.128.0/18",
      "pattern": "[ipv4-addr:value = '64.77.128.0/18']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--39b97720-ae30-5b89-b589-39ecaa316707",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:64.250.144.0/20",
      "pattern": "[ipv4-addr:value = '64.250.144.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--20843d5c-9d15-5e12-8d5f-67a4fd701fe6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:64.204.37.0/24",
      "pattern": "[ipv4-addr:value = '64.204.37.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3082e565-3513-515b-9542-ed99fe36ed03",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:64.15.0.0/20",
      "pattern": "[ipv4-addr:value = '64.15.0.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fd119ea3-4a0b-50a8-85f5-9d80014413eb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:64.116.200.0/21",
      "pattern": "[ipv4-addr:value = '64.116.200.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0c18a50c-098d-5c2e-b49e-a5898e768b66",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:63.80.8.0/22",
      "pattern": "[ipv4-addr:value = '63.80.8.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0c5fdabf-5361-5f67-8d6c-30a87f18bc00",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:62.60.226.0/24",
      "pattern": "[ipv4-addr:value = '62.60.226.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--06f7657f-9af6-59d6-b7bc-059b0d8430ae",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:62.60.188.0/22",
      "pattern": "[ipv4-addr:value = '62.60.188.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b352af16-f46a-50b7-ade7-e55a5fca7d25",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:62.60.135.0/24",
      "pattern": "[ipv4-addr:value = '62.60.135.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8bb2c57b-13ab-5613-a4f7-23a043b2ad68",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:62.60.134.0/24",
      "pattern": "[ipv4-addr:value = '62.60.134.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d03cb7e2-4cf7-55d5-b37b-8bd2f1baea52",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:62.60.131.0/24",
      "pattern": "[ipv4-addr:value = '62.60.131.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7bfe668b-8114-596d-9919-19689a8905f7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:62.60.130.0/24",
      "pattern": "[ipv4-addr:value = '62.60.130.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1ced545c-ab56-52ea-b9b9-05a70355fbf0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:62.204.41.0/24",
      "pattern": "[ipv4-addr:value = '62.204.41.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--29283654-0fc4-5bf9-9c87-663ed7467e98",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:61.45.251.0/24",
      "pattern": "[ipv4-addr:value = '61.45.251.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1e3b44d2-1e96-5d1c-a021-9aae1c2dede0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:61.11.224.0/19",
      "pattern": "[ipv4-addr:value = '61.11.224.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--50ddabb8-bcd2-5917-960c-f61ba97ebd47",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:60.233.0.0/16",
      "pattern": "[ipv4-addr:value = '60.233.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--77d3a1a4-4ee7-5cfb-a7fe-0950bdcfb478",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:60.200.0.0/16",
      "pattern": "[ipv4-addr:value = '60.200.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--17c973d4-97bc-529e-be15-2dd36a78c125",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:59.155.0.0/16",
      "pattern": "[ipv4-addr:value = '59.155.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5e2c7b11-46c2-5767-a8e2-84a9f5e049dc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:59.153.204.0/22",
      "pattern": "[ipv4-addr:value = '59.153.204.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--337cfad1-2702-5050-8885-d63cbc05d8d8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:58.2.0.0/17",
      "pattern": "[ipv4-addr:value = '58.2.0.0/17']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bd805e55-c527-5be3-8857-81ae9fdd32dd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:58.147.0.0/17",
      "pattern": "[ipv4-addr:value = '58.147.0.0/17']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f9f45792-2a66-520f-80c2-5fcba9cee788",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:57.37.0.0/16",
      "pattern": "[ipv4-addr:value = '57.37.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3bdae9bb-4efe-5d2d-bd3c-a122fcdbeb4f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:57.14.0.0/15",
      "pattern": "[ipv4-addr:value = '57.14.0.0/15']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6b5264fd-1333-5943-981b-99cb51ab01d0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:5.42.92.0/24",
      "pattern": "[ipv4-addr:value = '5.42.92.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b2a4ad0d-d352-5db3-a2c8-8831b0e588c6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:5.252.153.0/24",
      "pattern": "[ipv4-addr:value = '5.252.153.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--13bd317a-cee2-59ff-ab95-bed47fe4020c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:5.231.63.0/24",
      "pattern": "[ipv4-addr:value = '5.231.63.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a27650db-91e5-59c7-b094-aec5788a0569",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:5.230.201.0/24",
      "pattern": "[ipv4-addr:value = '5.230.201.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2717267a-35bf-59b7-986f-d7ed8f9cc200",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:5.188.236.0/23",
      "pattern": "[ipv4-addr:value = '5.188.236.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6db9a8af-f54a-55cb-95f7-a294460156f3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:5.183.60.0/22",
      "pattern": "[ipv4-addr:value = '5.183.60.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--50f26cd7-adff-5262-8c59-dbd03490a22b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:5.175.189.0/24",
      "pattern": "[ipv4-addr:value = '5.175.189.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7edff9d9-9042-55cb-b9ba-fa309774bc5d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:5.175.169.0/24",
      "pattern": "[ipv4-addr:value = '5.175.169.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--82762879-a4a2-593a-8e0c-fe66f4aa7383",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:5.105.220.0/24",
      "pattern": "[ipv4-addr:value = '5.105.220.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--37a5a6f3-dd87-5982-8df3-3e61a803e2e9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:5.101.86.0/24",
      "pattern": "[ipv4-addr:value = '5.101.86.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3880604b-2ad2-5494-bb91-e807192b415c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:49.89.240.0/22",
      "pattern": "[ipv4-addr:value = '49.89.240.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a746b40c-2a1e-531d-aa86-0e3e318d3857",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:49.238.64.0/18",
      "pattern": "[ipv4-addr:value = '49.238.64.0/18']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--990f1116-12b8-5ead-be44-fb18e11282e8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:49.156.160.0/19",
      "pattern": "[ipv4-addr:value = '49.156.160.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5000bfd0-9741-53bb-81fb-2c22cb8e8d98",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:46.174.204.0/22",
      "pattern": "[ipv4-addr:value = '46.174.204.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a7cd46dd-170a-52ab-8f70-bfc2bc5b81e2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:46.173.240.0/20",
      "pattern": "[ipv4-addr:value = '46.173.240.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8e76445f-91ec-5169-9df3-995a23411948",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:46.151.183.0/24",
      "pattern": "[ipv4-addr:value = '46.151.183.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--90076a45-17dc-578b-80f9-90a7bdee1d9b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:46.151.182.0/24",
      "pattern": "[ipv4-addr:value = '46.151.182.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--37c2b82d-b97a-5817-86b7-069b579319c8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.95.82.0/24",
      "pattern": "[ipv4-addr:value = '45.95.82.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e77d22d5-18f7-55fc-9c3a-52aa57af04c5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.94.31.0/24",
      "pattern": "[ipv4-addr:value = '45.94.31.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8e95208f-d2e8-5219-9530-68fba99c738d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.93.20.0/24",
      "pattern": "[ipv4-addr:value = '45.93.20.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5de35628-c8c0-5654-93f4-e393bb4d81fc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.92.1.0/24",
      "pattern": "[ipv4-addr:value = '45.92.1.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--649a0bb0-9345-5c3d-8c93-16b02ab72f4c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.91.227.0/24",
      "pattern": "[ipv4-addr:value = '45.91.227.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5d8071ba-7871-557d-b80a-0fb375b48ff1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.9.168.0/24",
      "pattern": "[ipv4-addr:value = '45.9.168.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ab8b39a2-f994-5dfb-872d-d5d32839a02c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.88.186.0/24",
      "pattern": "[ipv4-addr:value = '45.88.186.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0732c5ce-c271-5710-a5c0-3b317b65488d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.87.249.0/24",
      "pattern": "[ipv4-addr:value = '45.87.249.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2cbe1d8b-90a1-5997-97d7-003fed58ba5a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.83.31.0/24",
      "pattern": "[ipv4-addr:value = '45.83.31.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ecfa12e6-b442-5e0b-941d-3d3ec32aafef",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.83.28.0/24",
      "pattern": "[ipv4-addr:value = '45.83.28.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3a52831b-68d2-5c53-a4f7-bcd51b76e011",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.81.154.0/24",
      "pattern": "[ipv4-addr:value = '45.81.154.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fa56e802-c40c-5db5-8bdb-125024f67b2f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.80.37.0/24",
      "pattern": "[ipv4-addr:value = '45.80.37.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3ac1ec8a-1030-5596-a39e-c143f86fe9f8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.80.248.0/23",
      "pattern": "[ipv4-addr:value = '45.80.248.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9a13cb77-10d0-51d9-b049-f581ef073712",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.80.158.0/24",
      "pattern": "[ipv4-addr:value = '45.80.158.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--97ce0c74-1f18-552c-b6cf-bd8aae799768",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.74.7.0/24",
      "pattern": "[ipv4-addr:value = '45.74.7.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3d8fe5b1-a636-588e-a9ec-ad6b5780da36",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.74.61.0/24",
      "pattern": "[ipv4-addr:value = '45.74.61.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--32439242-6244-54eb-b363-506a8e11060a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.74.59.0/24",
      "pattern": "[ipv4-addr:value = '45.74.59.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--964a7676-062f-595d-9fa9-2a1faf97aa67",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.74.57.0/24",
      "pattern": "[ipv4-addr:value = '45.74.57.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9c18007a-1df3-51b8-82f7-8dba9e1b119a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.74.47.0/24",
      "pattern": "[ipv4-addr:value = '45.74.47.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--884790bd-e77b-5ade-91c1-3933ca4dc267",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.74.40.0/24",
      "pattern": "[ipv4-addr:value = '45.74.40.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9f8fc311-7c94-5f1b-9c3c-83a774f5ebcd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.74.3.0/24",
      "pattern": "[ipv4-addr:value = '45.74.3.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fb7e1b36-1dc4-5c03-ba18-469364ff1ccf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.74.21.0/24",
      "pattern": "[ipv4-addr:value = '45.74.21.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ef24ccc1-2e22-5af8-aec5-b146b0fab9e6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.74.16.0/24",
      "pattern": "[ipv4-addr:value = '45.74.16.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d390da06-9a41-5aca-8735-898ba960271c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.74.10.0/24",
      "pattern": "[ipv4-addr:value = '45.74.10.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a4481689-c2cf-5770-a0d1-8f897b1bdca7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.66.118.0/24",
      "pattern": "[ipv4-addr:value = '45.66.118.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3ac310c7-348d-5055-8def-f6a381ad00f7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.66.117.0/24",
      "pattern": "[ipv4-addr:value = '45.66.117.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--01cf5fbc-9540-574f-bce4-082635c2dc55",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.65.32.0/22",
      "pattern": "[ipv4-addr:value = '45.65.32.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1b71ba75-1e2f-5e91-b7a9-a226dab92a32",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.64.74.0/23",
      "pattern": "[ipv4-addr:value = '45.64.74.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fa936c67-85e3-5c82-a996-e6b75360e47e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.64.52.0/22",
      "pattern": "[ipv4-addr:value = '45.64.52.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d757799e-8fd0-51b0-bb41-f359375576a4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.56.200.0/22",
      "pattern": "[ipv4-addr:value = '45.56.200.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--86494e60-74e6-5cc8-9c4a-01808616410f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.56.194.0/24",
      "pattern": "[ipv4-addr:value = '45.56.194.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3c334cb9-d34e-5805-89d4-30fdb1f99ed4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.56.192.0/23",
      "pattern": "[ipv4-addr:value = '45.56.192.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--077576ef-1af8-5340-935f-7f21fa974b45",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.42.80.0/20",
      "pattern": "[ipv4-addr:value = '45.42.80.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8cd69fad-5b14-55c3-bfa4-b8c3ca8ee893",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.3.62.0/24",
      "pattern": "[ipv4-addr:value = '45.3.62.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--400d35eb-7171-5b23-a067-ae13ac70cc77",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.248.88.0/22",
      "pattern": "[ipv4-addr:value = '45.248.88.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--646ef2e5-722b-51ab-a384-85858fbfdb42",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.230.66.0/24",
      "pattern": "[ipv4-addr:value = '45.230.66.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3d3de8b9-52d4-5312-9c32-19230d925659",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.221.116.0/22",
      "pattern": "[ipv4-addr:value = '45.221.116.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--db6700b3-3c23-54d1-9251-339d9094e67d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.197.179.0/24",
      "pattern": "[ipv4-addr:value = '45.197.179.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cbacdee9-093a-5bcf-b766-da368f3c2e95",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.197.178.0/24",
      "pattern": "[ipv4-addr:value = '45.197.178.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--95c211a2-adff-568a-8678-4b9dee4c044e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.197.177.0/24",
      "pattern": "[ipv4-addr:value = '45.197.177.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2cd2e3c6-3b74-5563-bc99-e1d59abc848c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.197.176.0/24",
      "pattern": "[ipv4-addr:value = '45.197.176.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eaaf075d-5df0-5895-b319-64919fa84aef",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.192.211.0/24",
      "pattern": "[ipv4-addr:value = '45.192.211.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9db1263c-0611-502e-9f8a-de669a0a3b22",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.192.178.0/23",
      "pattern": "[ipv4-addr:value = '45.192.178.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--29ea1ef6-ed93-543e-b240-ddaeb8372d0e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.156.87.0/24",
      "pattern": "[ipv4-addr:value = '45.156.87.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--71d3a249-a97b-58dc-bc42-73352506f175",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.154.98.0/24",
      "pattern": "[ipv4-addr:value = '45.154.98.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eefcb061-d4dd-555e-a037-476735399e14",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.154.244.0/24",
      "pattern": "[ipv4-addr:value = '45.154.244.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0a2be18f-e2a0-5704-ab37-668743bc79c4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.153.34.0/24",
      "pattern": "[ipv4-addr:value = '45.153.34.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6190f189-92a0-5d0b-9864-4ea51bef88bb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.152.149.0/24",
      "pattern": "[ipv4-addr:value = '45.152.149.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a9cccf60-39a8-53b7-bada-d152ab430ef1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.150.34.0/24",
      "pattern": "[ipv4-addr:value = '45.150.34.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--24fd56f0-4ee3-5177-a045-f8cf25743e22",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.150.212.0/22",
      "pattern": "[ipv4-addr:value = '45.150.212.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4c859d4c-7677-50f6-ac28-a05133a7ce87",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.15.21.0/24",
      "pattern": "[ipv4-addr:value = '45.15.21.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e5c31f02-51fc-5c8b-9fa8-681f1d5005e4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.144.212.0/24",
      "pattern": "[ipv4-addr:value = '45.144.212.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3a46728a-3cd8-5496-98fe-3cf0e54ef8f8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.142.155.0/24",
      "pattern": "[ipv4-addr:value = '45.142.155.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--33b7f268-c0da-56b3-87df-13993f5b841f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.142.152.0/22",
      "pattern": "[ipv4-addr:value = '45.142.152.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--407f6542-3541-522d-846c-338991e17173",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.141.84.0/22",
      "pattern": "[ipv4-addr:value = '45.141.84.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0802509e-8269-54f5-8fcd-83332856c3a5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.141.58.0/23",
      "pattern": "[ipv4-addr:value = '45.141.58.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--855b4660-b8ae-5089-9969-d105629a6396",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.141.56.0/24",
      "pattern": "[ipv4-addr:value = '45.141.56.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c069d91d-471e-5768-b1e7-e35034a05878",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.141.215.0/24",
      "pattern": "[ipv4-addr:value = '45.141.215.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9584342d-db06-5c3b-8563-14e6d75f10b5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.141.12.0/22",
      "pattern": "[ipv4-addr:value = '45.141.12.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--54a47e9a-bfc3-5629-9903-e9b0cd6bad75",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.139.104.0/24",
      "pattern": "[ipv4-addr:value = '45.139.104.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1a0223f2-586a-5790-ba5a-1a4248d4c48e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.138.16.0/24",
      "pattern": "[ipv4-addr:value = '45.138.16.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--730d2537-c56a-5407-bdc9-74bc36c283bb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.138.12.0/24",
      "pattern": "[ipv4-addr:value = '45.138.12.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7b1e6ce6-5d49-5bc5-9c69-b87a84049c14",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.137.201.0/24",
      "pattern": "[ipv4-addr:value = '45.137.201.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3a6647c2-115d-5826-9306-6eb9556bbfd7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.136.5.0/24",
      "pattern": "[ipv4-addr:value = '45.136.5.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8bf7599d-21f7-51cd-a59d-68ed20913315",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.135.48.0/22",
      "pattern": "[ipv4-addr:value = '45.135.48.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9468cff8-1fab-5a3c-94ec-7bb2a4068fbb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.135.194.0/24",
      "pattern": "[ipv4-addr:value = '45.135.194.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4cdcbd98-46cf-58e5-8338-b5c864a8e66e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.133.73.0/24",
      "pattern": "[ipv4-addr:value = '45.133.73.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1df7fb58-64c6-5de3-aca4-b50984e97bc9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.133.246.0/24",
      "pattern": "[ipv4-addr:value = '45.133.246.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0ec71aa3-8aba-5bbd-9c91-d87225a7105d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.132.180.0/24",
      "pattern": "[ipv4-addr:value = '45.132.180.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3b80fbdb-f090-5d76-8360-dab74b7166a3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.13.37.0/24",
      "pattern": "[ipv4-addr:value = '45.13.37.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--47c5468b-74f7-5189-815b-92d4d3f918ad",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.13.213.0/24",
      "pattern": "[ipv4-addr:value = '45.13.213.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6bff084d-fa6a-5735-b5ed-dfb3e0a899a7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.129.187.0/24",
      "pattern": "[ipv4-addr:value = '45.129.187.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--715c8820-1517-557d-bb31-53c60ecbe8a4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.125.66.0/24",
      "pattern": "[ipv4-addr:value = '45.125.66.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e6846ef6-1a63-58cd-96ff-ab1243f7bca4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.125.33.0/24",
      "pattern": "[ipv4-addr:value = '45.125.33.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6add14be-a516-512c-a87f-c9c1b05a6538",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.125.32.0/22",
      "pattern": "[ipv4-addr:value = '45.125.32.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c2117bf5-25c7-501c-9827-b88af31613e2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.125.12.0/22",
      "pattern": "[ipv4-addr:value = '45.125.12.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7f36d7a4-16c0-5f63-bc24-39d87133ba52",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.121.204.0/22",
      "pattern": "[ipv4-addr:value = '45.121.204.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--130bedd3-5595-5511-83a8-4039ff0739d3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.117.140.0/22",
      "pattern": "[ipv4-addr:value = '45.117.140.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c5f9fede-9ad6-5781-86a2-082c6a0b5d1d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.116.76.0/22",
      "pattern": "[ipv4-addr:value = '45.116.76.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f3cd0dc9-c991-51b0-8087-dc8fc33cb159",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.116.224.0/22",
      "pattern": "[ipv4-addr:value = '45.116.224.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0f48ee95-0eaf-57ef-b86e-7bc38a70b771",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.114.200.0/22",
      "pattern": "[ipv4-addr:value = '45.114.200.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ea34f6d6-e1a0-5373-9f0f-77c406cc0791",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.114.184.0/22",
      "pattern": "[ipv4-addr:value = '45.114.184.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--24f5d9f9-c7b5-5f6b-afdc-3b51c5e37f11",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.113.4.0/22",
      "pattern": "[ipv4-addr:value = '45.113.4.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--716767e7-e9ab-50c0-83cb-57a90b18835b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:45.11.76.0/22",
      "pattern": "[ipv4-addr:value = '45.11.76.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--336d7aa5-70ce-5d98-b81e-2c6aab263b21",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:43.249.92.0/22",
      "pattern": "[ipv4-addr:value = '43.249.92.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--feaebc6f-cc02-551a-a661-d87b504b768c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:43.248.40.0/22",
      "pattern": "[ipv4-addr:value = '43.248.40.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f0e9b83e-1664-5aa9-a813-8d86040673c0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:43.240.12.0/22",
      "pattern": "[ipv4-addr:value = '43.240.12.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a92091d6-8f0f-5293-94da-f6aec1fcd4e3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:43.239.104.0/22",
      "pattern": "[ipv4-addr:value = '43.239.104.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c2674e80-029a-54b9-bf34-b6be1bedc2b4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:43.236.0.0/16",
      "pattern": "[ipv4-addr:value = '43.236.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6243a0db-9699-5ecf-b3d3-023e293d9d27",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:43.231.220.0/22",
      "pattern": "[ipv4-addr:value = '43.231.220.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--09195beb-eee1-51ee-8c84-2cdf5ca1f70b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:43.229.52.0/22",
      "pattern": "[ipv4-addr:value = '43.229.52.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--62f515fb-ec9f-5a91-9ac9-305abeaaece3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:43.229.244.0/22",
      "pattern": "[ipv4-addr:value = '43.229.244.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c38b4620-9473-58dc-984c-1edd2d238c56",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:43.229.240.0/22",
      "pattern": "[ipv4-addr:value = '43.229.240.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5e07b4fc-07f8-5c52-8579-1cd2ce61509e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:43.228.159.0/24",
      "pattern": "[ipv4-addr:value = '43.228.159.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--96297a8a-9159-54a7-a7a3-5fcdf3ed738d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:42.208.0.0/12",
      "pattern": "[ipv4-addr:value = '42.208.0.0/12']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--41871650-1a18-50aa-a351-d72e53a2f26b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:42.160.0.0/12",
      "pattern": "[ipv4-addr:value = '42.160.0.0/12']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0ee14217-8675-5321-80c7-76808e3ea948",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:42.128.0.0/12",
      "pattern": "[ipv4-addr:value = '42.128.0.0/12']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--08bd192c-367c-51c8-b027-ff67fa6b9d92",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:42.0.32.0/19",
      "pattern": "[ipv4-addr:value = '42.0.32.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--179a8d3d-c4b3-52af-9d32-dd1dc4e31ee5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:42.0.128.0/17",
      "pattern": "[ipv4-addr:value = '42.0.128.0/17']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e5bf69ad-34f5-5be2-b4f2-c272b2f88663",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:41.79.219.0/24",
      "pattern": "[ipv4-addr:value = '41.79.219.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7e1c557c-6c19-52d3-9b08-a0f5e4796bcc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:41.71.240.0/24",
      "pattern": "[ipv4-addr:value = '41.71.240.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--35a5eb56-2485-5c59-a803-a6d2e7e268a6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:41.71.230.0/24",
      "pattern": "[ipv4-addr:value = '41.71.230.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--01bb2293-db46-5f30-ab77-497c54e91705",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:41.71.229.0/24",
      "pattern": "[ipv4-addr:value = '41.71.229.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--09d0a5b5-8e62-5ff4-83ca-cc04662dd165",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:41.71.226.0/24",
      "pattern": "[ipv4-addr:value = '41.71.226.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cee8b87f-6474-5af2-9e44-efc3c5a28cf1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:41.71.225.0/24",
      "pattern": "[ipv4-addr:value = '41.71.225.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1b5ef497-497b-568e-aac0-9e0193fabc66",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:41.71.224.0/24",
      "pattern": "[ipv4-addr:value = '41.71.224.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--92abbf86-644c-5252-8eec-bdf24a4867ac",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:41.71.223.0/24",
      "pattern": "[ipv4-addr:value = '41.71.223.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2e44fab9-1765-54a4-abce-aab659ec3ac3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:41.71.222.0/24",
      "pattern": "[ipv4-addr:value = '41.71.222.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d927b12f-6574-53f9-a3cf-56e4e8f2238a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:41.71.150.0/24",
      "pattern": "[ipv4-addr:value = '41.71.150.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--05077c06-4709-5968-b826-82168b18983a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:41.71.128.0/17",
      "pattern": "[ipv4-addr:value = '41.71.128.0/17']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d48f6983-2f8d-5f94-b840-d00f1f7a659f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:41.231.240.0/22",
      "pattern": "[ipv4-addr:value = '41.231.240.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--91893091-b16b-5d62-aaca-61e2f58b0c16",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:41.138.192.0/18",
      "pattern": "[ipv4-addr:value = '41.138.192.0/18']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b62fb43d-440e-54dc-87f2-7bb65155e9b7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:40.183.136.0/22",
      "pattern": "[ipv4-addr:value = '40.183.136.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3d0d4179-09e8-53a6-ab75-3451a4f40c27",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:38.134.3.0/24",
      "pattern": "[ipv4-addr:value = '38.134.3.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--68d9b796-b11f-5c6f-9fac-d4495af819ee",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:38.133.213.0/24",
      "pattern": "[ipv4-addr:value = '38.133.213.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--023cbbda-72c1-52f1-8031-0fa2b2f85f7d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:38.107.120.0/21",
      "pattern": "[ipv4-addr:value = '38.107.120.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d1ddfcd2-2bf3-530d-971b-d4ef39bbac72",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:37.77.150.0/24",
      "pattern": "[ipv4-addr:value = '37.77.150.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b84cedf3-7f5f-519e-a89a-48c94d913c38",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:37.72.140.0/24",
      "pattern": "[ipv4-addr:value = '37.72.140.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--36421107-339e-5c9b-a1fa-74dc9a61d8e7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:37.49.148.0/24",
      "pattern": "[ipv4-addr:value = '37.49.148.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aad5afe3-24e6-58df-8526-386d3b2f295f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:37.156.64.0/23",
      "pattern": "[ipv4-addr:value = '37.156.64.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7fb6ea21-2520-5cf4-be47-2c0b82a0668c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:37.140.251.0/24",
      "pattern": "[ipv4-addr:value = '37.140.251.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ccea2a69-7080-5a27-b8d9-932d4ffdeb49",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:36.37.48.0/20",
      "pattern": "[ipv4-addr:value = '36.37.48.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cd64df60-ad4a-5403-8a2c-2ab9930e5242",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:36.255.98.0/24",
      "pattern": "[ipv4-addr:value = '36.255.98.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a1d72403-7291-5d66-a52c-ffdc2998ebc0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:36.255.97.0/24",
      "pattern": "[ipv4-addr:value = '36.255.97.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3fb75fe8-3654-5d7f-95e5-38aef32844ec",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:36.255.236.0/22",
      "pattern": "[ipv4-addr:value = '36.255.236.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3fab392b-cfe9-553f-ab75-e450d402c43e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:36.255.216.0/22",
      "pattern": "[ipv4-addr:value = '36.255.216.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--16a5d26a-aadb-5107-833a-e581cfe407f9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:36.119.0.0/16",
      "pattern": "[ipv4-addr:value = '36.119.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7df3201f-873e-5f4f-bcd1-3d37973d67ca",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:36.116.0.0/16",
      "pattern": "[ipv4-addr:value = '36.116.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9fa73dfa-8615-58cc-8f1b-3f0183c71186",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:36.0.8.0/21",
      "pattern": "[ipv4-addr:value = '36.0.8.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a1e685ba-6abe-5dee-92db-fa93c5cc9fe3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:36.0.128.0/17",
      "pattern": "[ipv4-addr:value = '36.0.128.0/17']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--83a5282c-11bc-580f-8828-3efc9fd2968a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:31.76.32.0/24",
      "pattern": "[ipv4-addr:value = '31.76.32.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6a559a84-792c-5903-b92e-6af4d31bf285",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:31.57.216.0/24",
      "pattern": "[ipv4-addr:value = '31.57.216.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7c538e03-d412-5548-928a-4dc5eb814433",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:31.57.184.0/24",
      "pattern": "[ipv4-addr:value = '31.57.184.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3d7faa71-9b97-5b23-8887-5a01db170380",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:31.56.52.0/23",
      "pattern": "[ipv4-addr:value = '31.56.52.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0a461649-de18-5067-a6f7-73d2bb675058",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:31.56.209.0/24",
      "pattern": "[ipv4-addr:value = '31.56.209.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a9f1b34b-8d5d-5067-ba9b-82cc3f8886a1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:31.56.19.0/24",
      "pattern": "[ipv4-addr:value = '31.56.19.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--29039058-edef-5fbd-9ffa-d53fdb6d15df",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:31.43.185.0/24",
      "pattern": "[ipv4-addr:value = '31.43.185.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4691d454-3cb1-5645-a81a-c674cbb17eea",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:31.222.236.0/24",
      "pattern": "[ipv4-addr:value = '31.222.236.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--291bdb02-4366-5fb1-ae3d-176d8a186915",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:31.217.252.0/24",
      "pattern": "[ipv4-addr:value = '31.217.252.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--73d6347c-e863-5e4c-9cc6-8b8f80edb8f6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:31.129.49.0/24",
      "pattern": "[ipv4-addr:value = '31.129.49.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5d096214-2cc4-5385-b862-39aa4db1cd98",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:27.99.128.0/17",
      "pattern": "[ipv4-addr:value = '27.99.128.0/17']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--14214763-b6b2-50fc-a77d-e7bc965ba5d7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:27.50.63.0/24",
      "pattern": "[ipv4-addr:value = '27.50.63.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1583f0b1-caf9-5bde-943d-7e7894f0d9a2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:27.146.0.0/16",
      "pattern": "[ipv4-addr:value = '27.146.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8ec1ea41-fc06-58cc-bb3c-8e8bacf758c1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:27.126.160.0/20",
      "pattern": "[ipv4-addr:value = '27.126.160.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a95ad28f-c578-5121-93b3-f1c3ed47e47c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:27.124.41.0/24",
      "pattern": "[ipv4-addr:value = '27.124.41.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--035a9bc8-15bc-5648-a54b-bb8020e21222",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:27.124.17.0/24",
      "pattern": "[ipv4-addr:value = '27.124.17.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bfbf57e6-072e-5bc2-a654-2beca2bc4943",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:27.124.0.0/18",
      "pattern": "[ipv4-addr:value = '27.124.0.0/18']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--622bb96b-3c21-55b4-b473-819ba9fe2c2e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:27.123.208.0/22",
      "pattern": "[ipv4-addr:value = '27.123.208.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f23b5f31-a530-5265-8abd-2d4891775f11",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:27.122.32.0/20",
      "pattern": "[ipv4-addr:value = '27.122.32.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d2dd5bdc-80e1-58d2-810b-e6e400240c3b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:27.112.32.0/19",
      "pattern": "[ipv4-addr:value = '27.112.32.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--575633e3-49d5-5af7-8151-640093a6901c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:27.100.28.0/22",
      "pattern": "[ipv4-addr:value = '27.100.28.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8be03d0b-749e-5ccc-8221-d4390bfc8808",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:24.236.0.0/19",
      "pattern": "[ipv4-addr:value = '24.236.0.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2460cd3f-7337-508b-ab41-52be8f8f76bf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:24.233.0.0/19",
      "pattern": "[ipv4-addr:value = '24.233.0.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ca40741f-3286-5bad-bd8e-b88c4ae52bbf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:24.170.208.0/20",
      "pattern": "[ipv4-addr:value = '24.170.208.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--947d1851-2ad0-5516-957d-964522ab25f5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:24.137.16.0/20",
      "pattern": "[ipv4-addr:value = '24.137.16.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f3c9c6c8-42dc-5bf8-a384-1cb820663a72",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:23.94.252.0/24",
      "pattern": "[ipv4-addr:value = '23.94.252.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7adb1f63-4e96-5637-add7-343149fb560b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:23.247.176.0/22",
      "pattern": "[ipv4-addr:value = '23.247.176.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d70670cb-65e2-5243-b362-d134c8c5c5d9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:23.235.128.0/19",
      "pattern": "[ipv4-addr:value = '23.235.128.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3dfae96d-8952-5c72-a1c0-38d591b5671f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:23.176.184.0/24",
      "pattern": "[ipv4-addr:value = '23.176.184.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f0b16195-b074-5bf0-ae65-9fbb483c32a0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:23.172.112.0/24",
      "pattern": "[ipv4-addr:value = '23.172.112.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7c3e8925-c523-5cc8-beb4-7444b6cd77ff",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:23.164.153.0/24",
      "pattern": "[ipv4-addr:value = '23.164.153.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3c051f26-48fe-5366-aa68-b59bbcd60c55",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:23.164.152.0/24",
      "pattern": "[ipv4-addr:value = '23.164.152.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--64e1a2eb-34e8-5a1a-9af3-071a7317e256",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:23.148.144.0/24",
      "pattern": "[ipv4-addr:value = '23.148.144.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--016551ee-96f4-5789-ba6f-cae91a7506f6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:23.147.52.0/24",
      "pattern": "[ipv4-addr:value = '23.147.52.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--773afa05-cb33-5352-a0b8-75de6866fae1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:23.147.164.0/24",
      "pattern": "[ipv4-addr:value = '23.147.164.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8f82c5da-a953-5bbf-920e-eeffd9a4b7d2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:23.147.156.0/24",
      "pattern": "[ipv4-addr:value = '23.147.156.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--66e8b4d7-5110-57ae-b44b-cb5087761051",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:23.147.148.0/24",
      "pattern": "[ipv4-addr:value = '23.147.148.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0f4c5e27-0bf3-54df-b263-e072981bf98e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:23.146.242.0/24",
      "pattern": "[ipv4-addr:value = '23.146.242.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--19e22ce9-36be-5296-8b16-81be6097f050",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:23.146.241.0/24",
      "pattern": "[ipv4-addr:value = '23.146.241.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0fee2d85-4543-555e-a782-bc03d7eb175b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:23.146.240.0/24",
      "pattern": "[ipv4-addr:value = '23.146.240.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1163c9d4-49c9-5e21-a3cc-70e4bef0d6b5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:23.143.16.0/24",
      "pattern": "[ipv4-addr:value = '23.143.16.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8c8d91e6-c08e-59e1-b1fc-ffaf6a6aac67",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:23.142.16.0/24",
      "pattern": "[ipv4-addr:value = '23.142.16.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ec717cc3-7131-53e4-9fe7-22bba79d20ce",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:23.132.164.0/24",
      "pattern": "[ipv4-addr:value = '23.132.164.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--90766f9d-bc49-5187-8ab0-1bbd30e9c997",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:23.129.252.0/23",
      "pattern": "[ipv4-addr:value = '23.129.252.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8be904d2-2af9-5836-aab5-8378d6685a82",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:23.128.48.0/24",
      "pattern": "[ipv4-addr:value = '23.128.48.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0941907c-8d91-5a75-a6b5-dedb63979ed4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:223.29.226.0/24",
      "pattern": "[ipv4-addr:value = '223.29.226.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--11be8fd6-f3d6-5e7e-be26-2099292370ff",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:223.26.48.0/20",
      "pattern": "[ipv4-addr:value = '223.26.48.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fed59f60-93f6-58d0-993d-c67bc1a00433",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:223.254.0.0/16",
      "pattern": "[ipv4-addr:value = '223.254.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cc0fc5a0-11b8-52b8-87bf-1fdf684810bb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:223.169.0.0/16",
      "pattern": "[ipv4-addr:value = '223.169.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cee1ccd9-b861-5cda-ac16-09415518b53f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:223.155.16.0/24",
      "pattern": "[ipv4-addr:value = '223.155.16.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c61b0978-3586-5820-95f1-81a2e884cd16",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:222.123.0.0/16",
      "pattern": "[ipv4-addr:value = '222.123.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--55084add-808f-5bdb-8908-c73f099a2205",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:221.128.128.0/17",
      "pattern": "[ipv4-addr:value = '221.128.128.0/17']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7b0484b8-87e0-5756-b511-a031520b7ea4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:218.99.0.0/16",
      "pattern": "[ipv4-addr:value = '218.99.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9faf7916-edb3-5227-9a3d-142f7b688868",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:217.60.77.0/24",
      "pattern": "[ipv4-addr:value = '217.60.77.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--157c2141-01d8-58e5-b7a7-ba5e4232e384",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:217.60.250.0/24",
      "pattern": "[ipv4-addr:value = '217.60.250.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c815276c-ad1a-5308-9dc0-7203071f06af",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:217.60.241.0/24",
      "pattern": "[ipv4-addr:value = '217.60.241.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1da14b3d-fa13-51c9-9b8e-c4c8bd2c4586",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:217.60.199.0/24",
      "pattern": "[ipv4-addr:value = '217.60.199.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--25458671-581f-5869-9823-f142779ff792",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:217.60.195.0/24",
      "pattern": "[ipv4-addr:value = '217.60.195.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--857a3fdc-04f4-5d91-bf53-27a7b98798c6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:217.60.103.0/24",
      "pattern": "[ipv4-addr:value = '217.60.103.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6f52661f-e582-51c5-a9c3-6ae6a0385f86",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:217.60.102.0/24",
      "pattern": "[ipv4-addr:value = '217.60.102.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a57ce562-b2fa-5a7f-a72c-41db68f284b5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:217.145.226.0/23",
      "pattern": "[ipv4-addr:value = '217.145.226.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--61bb1f6d-9ca2-556f-95db-8d5797171789",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:216.93.96.0/19",
      "pattern": "[ipv4-addr:value = '216.93.96.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eb36800d-11b5-587a-997b-91942b52e963",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:216.93.48.0/21",
      "pattern": "[ipv4-addr:value = '216.93.48.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b7e3aa2b-a403-5ef1-a000-c8554aeb2be8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:216.9.224.0/22",
      "pattern": "[ipv4-addr:value = '216.9.224.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--91abedb3-fd0f-50ff-abc3-77570a41fdc7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:216.7.96.0/20",
      "pattern": "[ipv4-addr:value = '216.7.96.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4d3efdeb-dd27-5d29-b4e1-6349eb89c778",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:216.63.240.0/22",
      "pattern": "[ipv4-addr:value = '216.63.240.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cf6d73f6-6930-5fc6-9ec0-6120d8ce9586",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:216.26.224.0/19",
      "pattern": "[ipv4-addr:value = '216.26.224.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e9cc0f4d-18c1-5a9a-9b59-c6c799f9c312",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:216.250.16.0/20",
      "pattern": "[ipv4-addr:value = '216.250.16.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7fb9837d-6f30-52a0-9bb6-91c28f87b1bb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:216.238.36.0/22",
      "pattern": "[ipv4-addr:value = '216.238.36.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1289e01c-6494-5eee-9e3e-9ed36b73c249",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:216.189.29.0/24",
      "pattern": "[ipv4-addr:value = '216.189.29.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--333b1225-cbbe-58ae-9ffb-bac01186debd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:216.179.128.0/17",
      "pattern": "[ipv4-addr:value = '216.179.128.0/17']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ef7d271d-43a2-5393-9203-5d01199ac142",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:216.137.144.0/20",
      "pattern": "[ipv4-addr:value = '216.137.144.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3a99083e-33eb-54ed-9cea-294a8c2fd4b8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:213.177.179.0/24",
      "pattern": "[ipv4-addr:value = '213.177.179.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--128b3441-00ff-534c-8b4c-bd95e05ec448",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:213.176.24.0/22",
      "pattern": "[ipv4-addr:value = '213.176.24.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6212c631-1f5d-593a-a812-91a0669cd25d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:212.68.164.0/22",
      "pattern": "[ipv4-addr:value = '212.68.164.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2070be69-e4e0-5a92-9b7e-9b51a4b9f34c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:212.237.152.0/21",
      "pattern": "[ipv4-addr:value = '212.237.152.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a8cb7927-6ce2-56f9-a1f9-069a6d58c5d1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:211.102.140.0/22",
      "pattern": "[ipv4-addr:value = '211.102.140.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--267d8e76-d32a-58d8-8e43-07900f95b816",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:211.102.136.0/22",
      "pattern": "[ipv4-addr:value = '211.102.136.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--df9f8437-d0f6-5e13-9d51-f53106c72f95",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:211.102.0.0/17",
      "pattern": "[ipv4-addr:value = '211.102.0.0/17']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--362ae4f8-9238-5c20-8171-8874477bcb1c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:210.87.69.0/24",
      "pattern": "[ipv4-addr:value = '210.87.69.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6ec6ddf4-b94f-5c95-bec0-f17a4c7497bb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:210.57.128.0/18",
      "pattern": "[ipv4-addr:value = '210.57.128.0/18']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b8cd217c-9033-5b77-8a21-fd9e8055ac5e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:210.56.48.0/21",
      "pattern": "[ipv4-addr:value = '210.56.48.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ac6e397c-d2e6-5af4-bc0e-c00954eb5a10",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:209.99.184.0/21",
      "pattern": "[ipv4-addr:value = '209.99.184.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3a079596-b0c2-513d-890a-487874731598",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:209.95.64.0/19",
      "pattern": "[ipv4-addr:value = '209.95.64.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--68eccf43-65d9-561a-ad06-87c61015fa8a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:209.95.192.0/19",
      "pattern": "[ipv4-addr:value = '209.95.192.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f50ddc7c-3f5d-58d4-aaa0-7d16a300f55e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:209.79.220.0/22",
      "pattern": "[ipv4-addr:value = '209.79.220.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--599cfe00-d988-53d8-8a6a-5c3ab43104d6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:209.66.128.0/19",
      "pattern": "[ipv4-addr:value = '209.66.128.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--612fb86d-cf14-5086-899d-09e662570343",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:209.66.0.0/18",
      "pattern": "[ipv4-addr:value = '209.66.0.0/18']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e00dc912-62ba-56a9-b02e-e84d64015ce7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:209.50.160.0/19",
      "pattern": "[ipv4-addr:value = '209.50.160.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b271cf85-d80a-5c5d-baaf-59ea7d023213",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:209.233.156.0/22",
      "pattern": "[ipv4-addr:value = '209.233.156.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6ad0f368-c004-56a9-971e-9c9d768ebaf9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:209.186.24.0/21",
      "pattern": "[ipv4-addr:value = '209.186.24.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--746fdb86-fb11-5283-91d0-cc7b86225b57",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:209.186.236.0/24",
      "pattern": "[ipv4-addr:value = '209.186.236.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--29a23581-e54d-52e9-bee2-b7df2f6e26b8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:209.186.232.0/22",
      "pattern": "[ipv4-addr:value = '209.186.232.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--06c11b18-e12e-5bed-b3e9-4ef3ac8f668e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:209.186.224.0/21",
      "pattern": "[ipv4-addr:value = '209.186.224.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6dbb96a2-0fcf-5302-bf03-72a799b8e834",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:209.186.20.0/22",
      "pattern": "[ipv4-addr:value = '209.186.20.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0a1326fa-b3c3-5a92-b599-0c880431e4cd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:209.182.64.0/19",
      "pattern": "[ipv4-addr:value = '209.182.64.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2340bda6-490a-5976-b2df-6e65eefd3823",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:209.17.192.0/19",
      "pattern": "[ipv4-addr:value = '209.17.192.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2c05fcfc-d89e-5f64-94d3-aa90267e46d4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:209.161.64.0/19",
      "pattern": "[ipv4-addr:value = '209.161.64.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0afd93cc-40cb-500b-ba61-abd93ddf8da8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:209.159.128.0/20",
      "pattern": "[ipv4-addr:value = '209.159.128.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0ea0a6d8-d1d4-53f0-9b55-567f12ec72e9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:209.148.16.0/20",
      "pattern": "[ipv4-addr:value = '209.148.16.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3ac60f31-188c-5355-97b9-7db3d5591e2a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:209.120.205.0/24",
      "pattern": "[ipv4-addr:value = '209.120.205.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--42be6351-6690-55a9-8f54-f02fb3c5532c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:208.98.64.0/18",
      "pattern": "[ipv4-addr:value = '208.98.64.0/18']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e1ba357b-eced-5311-89ad-4c49a3393504",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:208.90.32.0/21",
      "pattern": "[ipv4-addr:value = '208.90.32.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cd58acc3-2807-5639-bdfe-df9527e5609a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:208.75.88.0/22",
      "pattern": "[ipv4-addr:value = '208.75.88.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2a42d802-771b-5eca-8634-f50284b2de0d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:208.217.32.0/20",
      "pattern": "[ipv4-addr:value = '208.217.32.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7f385f8b-61b0-5cb4-ae92-8b0f69d44bd9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:208.187.240.0/22",
      "pattern": "[ipv4-addr:value = '208.187.240.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dbcfe022-7f18-5a2f-9723-1d9c47b908ea",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:207.89.18.0/24",
      "pattern": "[ipv4-addr:value = '207.89.18.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--556fa923-9dff-5dd2-b750-6529c88a1dfc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:207.70.192.0/19",
      "pattern": "[ipv4-addr:value = '207.70.192.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2bae0d2e-cbba-50fb-a12c-ceeffc5972b7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:207.45.96.0/21",
      "pattern": "[ipv4-addr:value = '207.45.96.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--43a7b129-1121-5dd7-a5a1-1ae308a5353a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:207.45.56.0/21",
      "pattern": "[ipv4-addr:value = '207.45.56.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d319d25e-5d1e-501b-a037-415ce5a29636",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:207.45.224.0/20",
      "pattern": "[ipv4-addr:value = '207.45.224.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2faad7d6-82a3-5139-937d-411119504098",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:207.45.104.0/21",
      "pattern": "[ipv4-addr:value = '207.45.104.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f291cea6-481d-55e7-86ec-e5d7d86f2a85",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:207.252.136.0/21",
      "pattern": "[ipv4-addr:value = '207.252.136.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--162f0786-c4a5-5b14-bcd5-406ec8836852",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:207.244.0.0/18",
      "pattern": "[ipv4-addr:value = '207.244.0.0/18']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--87239dee-5924-57fe-ad70-55b774fd5e51",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:207.228.200.0/22",
      "pattern": "[ipv4-addr:value = '207.228.200.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--433605a6-c5b2-5cb2-9341-91dd26bcea8d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:207.22.192.0/18",
      "pattern": "[ipv4-addr:value = '207.22.192.0/18']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1e5509a0-ed4f-5284-b797-a4e3259389f4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:207.183.96.0/20",
      "pattern": "[ipv4-addr:value = '207.183.96.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--109df056-42cd-580b-868d-0dc7d7f4a222",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:207.183.64.0/19",
      "pattern": "[ipv4-addr:value = '207.183.64.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f51b29f1-7faf-5e80-85b7-c1d678016fea",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:207.183.192.0/19",
      "pattern": "[ipv4-addr:value = '207.183.192.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c8316128-8dbc-53a3-aa04-17511af97697",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:207.180.58.0/24",
      "pattern": "[ipv4-addr:value = '207.180.58.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--50bdaccd-44c5-5b18-b9aa-d1ca203d307e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:207.110.64.0/18",
      "pattern": "[ipv4-addr:value = '207.110.64.0/18']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9756a1b3-6bc7-542b-b782-59aeaa59d834",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:207.105.108.0/22",
      "pattern": "[ipv4-addr:value = '207.105.108.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1f6dc2e3-50dc-54d2-a9b4-8dec187e5d68",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:206.83.128.0/21",
      "pattern": "[ipv4-addr:value = '206.83.128.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ca2ffdac-827f-56ea-9107-a5ad950c06d3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:206.80.224.0/21",
      "pattern": "[ipv4-addr:value = '206.80.224.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aff10238-efdd-5271-9630-72a5f644dd70",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:206.53.56.0/24",
      "pattern": "[ipv4-addr:value = '206.53.56.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3f1a16cb-a0e9-59e7-bfe5-f96bd3e44fe6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:206.51.29.0/24",
      "pattern": "[ipv4-addr:value = '206.51.29.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9d531c0f-1652-57f9-acd0-a3e35b672fd0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:206.41.160.0/19",
      "pattern": "[ipv4-addr:value = '206.41.160.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--866e8a17-28ff-5050-b066-f86e1ed4e13e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:206.41.128.0/20",
      "pattern": "[ipv4-addr:value = '206.41.128.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5fd55c1e-5e6b-5cb8-81e0-2864439e8e46",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:206.251.56.0/22",
      "pattern": "[ipv4-addr:value = '206.251.56.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2dfeb69c-910c-5e2d-b1cd-3ce056dc8ebe",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:206.251.50.0/24",
      "pattern": "[ipv4-addr:value = '206.251.50.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2c7f09e9-1357-580b-8c30-7c355a29672d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:206.226.32.0/19",
      "pattern": "[ipv4-addr:value = '206.226.32.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--68fe9259-c2bb-58af-90e3-b322a7a02eb0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:206.226.0.0/19",
      "pattern": "[ipv4-addr:value = '206.226.0.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--492c0c96-aac9-5a95-8535-5ab5fb47202d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:206.225.64.0/22",
      "pattern": "[ipv4-addr:value = '206.225.64.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3c9a3236-7a00-5af8-bff1-67882f7b4325",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:206.224.160.0/19",
      "pattern": "[ipv4-addr:value = '206.224.160.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2b63fa71-89ff-5823-8fc7-5d44ee1f6ae0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:206.221.96.0/20",
      "pattern": "[ipv4-addr:value = '206.221.96.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0b5a038c-b0f6-5376-b0bf-be04653e1dff",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:206.221.192.0/20",
      "pattern": "[ipv4-addr:value = '206.221.192.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--95ff453e-4fbc-5cdd-8018-91d63ef4516e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:206.221.0.0/20",
      "pattern": "[ipv4-addr:value = '206.221.0.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f99f371d-d45e-55ef-baa2-faeb8a5749d9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:206.209.80.0/20",
      "pattern": "[ipv4-addr:value = '206.209.80.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c20825d7-0e28-515f-869c-461d3721b0ee",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:206.209.48.0/20",
      "pattern": "[ipv4-addr:value = '206.209.48.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--69b7af18-911b-5f09-848e-a2e5d2ede7d7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:206.209.192.0/20",
      "pattern": "[ipv4-addr:value = '206.209.192.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--585947a9-2d46-5f75-9e5c-eb72ec4231d8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:206.197.77.0/24",
      "pattern": "[ipv4-addr:value = '206.197.77.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f154b073-c238-54ab-afdb-22bafd3b43c0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:206.197.226.0/24",
      "pattern": "[ipv4-addr:value = '206.197.226.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6c6465c4-0f3a-54df-a531-769ea58d9031",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:206.197.171.0/24",
      "pattern": "[ipv4-addr:value = '206.197.171.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e85a2560-ea7f-5505-a407-529ffa779f1a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:206.197.166.0/24",
      "pattern": "[ipv4-addr:value = '206.197.166.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ff33035d-31e0-59d2-a1f4-a48c37f00cd4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:206.183.160.0/21",
      "pattern": "[ipv4-addr:value = '206.183.160.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e2865f4f-6ffe-5e6e-b61c-1300606753fe",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:206.170.56.0/22",
      "pattern": "[ipv4-addr:value = '206.170.56.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--59a74198-6588-5a59-9be1-f6651f951ce3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:206.170.48.0/21",
      "pattern": "[ipv4-addr:value = '206.170.48.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4779f926-28b9-5f31-ba5f-b9bb1af804bd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:206.143.128.0/17",
      "pattern": "[ipv4-addr:value = '206.143.128.0/17']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--285cade1-7685-572a-a08a-759b87bb9476",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:206.136.208.0/20",
      "pattern": "[ipv4-addr:value = '206.136.208.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4d0b8e20-1ce5-515a-a493-eb8ad7873e0e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:206.130.240.0/24",
      "pattern": "[ipv4-addr:value = '206.130.240.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--60db2004-c3c0-5d1e-98b2-c1d1bb699a09",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:206.130.237.0/24",
      "pattern": "[ipv4-addr:value = '206.130.237.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--85b9b3d5-4a13-588c-90f1-86d6bcbbaac9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:206.130.188.0/24",
      "pattern": "[ipv4-addr:value = '206.130.188.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f71adcd5-6ce2-55b2-8c43-bd905522ceb5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:206.130.180.0/24",
      "pattern": "[ipv4-addr:value = '206.130.180.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a1295793-d6eb-5a96-b654-c2045e231a28",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:206.125.16.0/20",
      "pattern": "[ipv4-addr:value = '206.125.16.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--627e63ee-9ac9-50e1-a447-16afffc5ee8d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:206.123.156.0/24",
      "pattern": "[ipv4-addr:value = '206.123.156.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bb05b311-19f9-5cef-9e37-a0a8a8c6ba8f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:206.123.145.0/24",
      "pattern": "[ipv4-addr:value = '206.123.145.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3cd02e2a-0269-53ff-8b69-5dce29f417a9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:206.121.32.0/23",
      "pattern": "[ipv4-addr:value = '206.121.32.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e666b513-144e-502d-a555-48d62f637576",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:206.121.28.0/22",
      "pattern": "[ipv4-addr:value = '206.121.28.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eb237329-18bb-5cf0-9b06-9eb1a2e881be",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.237.8.0/24",
      "pattern": "[ipv4-addr:value = '205.237.8.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--712f095f-b4cf-538a-b051-9665dec11ebd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.237.16.0/22",
      "pattern": "[ipv4-addr:value = '205.237.16.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9d09f213-82b8-524d-8f17-36b680858e9f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.237.12.0/22",
      "pattern": "[ipv4-addr:value = '205.237.12.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e301928e-6316-5c94-b5cc-99dd2c4de882",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.237.10.0/23",
      "pattern": "[ipv4-addr:value = '205.237.10.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--12bf829e-5fe4-584d-ae9e-e514c53df081",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.236.189.0/24",
      "pattern": "[ipv4-addr:value = '205.236.189.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7a9ac631-45bc-55f7-bc73-c5c7e1431917",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.236.185.0/24",
      "pattern": "[ipv4-addr:value = '205.236.185.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f75c3585-95de-5c48-95ca-4551bfc6167a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.236.18.0/24",
      "pattern": "[ipv4-addr:value = '205.236.18.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--781b8c29-5bcc-5864-a6cb-b62ad44e3e86",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.233.224.0/20",
      "pattern": "[ipv4-addr:value = '205.233.224.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3fe24aef-d1af-52a5-aad8-be997ac2f3ae",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.233.220.0/24",
      "pattern": "[ipv4-addr:value = '205.233.220.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--72e5e8b6-b762-58d0-a910-e4934ac589fc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.233.156.0/24",
      "pattern": "[ipv4-addr:value = '205.233.156.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--be318e29-57c8-5bc7-a596-013fec54a5d3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.215.236.0/22",
      "pattern": "[ipv4-addr:value = '205.215.236.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3b4c3a13-3680-5865-8f69-455468e01305",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.214.96.0/19",
      "pattern": "[ipv4-addr:value = '205.214.96.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dc50cdf5-7b56-50b4-b473-c07a1b7b4fb4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.214.128.0/19",
      "pattern": "[ipv4-addr:value = '205.214.128.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5a85e442-e883-5f1d-ac45-55bf6063f372",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.211.179.0/24",
      "pattern": "[ipv4-addr:value = '205.211.179.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e9e90884-8988-58c9-a634-28729b1e0542",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.211.172.0/24",
      "pattern": "[ipv4-addr:value = '205.211.172.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--490a6e35-2f45-5aaa-93e1-1668959dcf5e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.210.29.0/24",
      "pattern": "[ipv4-addr:value = '205.210.29.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d8fb8534-bd09-519b-af21-ef5d30e7bc09",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.210.249.0/24",
      "pattern": "[ipv4-addr:value = '205.210.249.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7b5e8d25-e827-5485-a7ec-8a34890de290",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.210.172.0/22",
      "pattern": "[ipv4-addr:value = '205.210.172.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--434abdfb-9019-50f7-b02b-53eb12ac8882",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.210.171.0/24",
      "pattern": "[ipv4-addr:value = '205.210.171.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d8834926-9a05-529d-86a4-8bc6d6e99096",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.210.139.0/24",
      "pattern": "[ipv4-addr:value = '205.210.139.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--65e0570d-15a0-5a70-be10-411ac6b3c5ce",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.210.107.0/24",
      "pattern": "[ipv4-addr:value = '205.210.107.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5a5ef421-0a6a-5723-ba5b-c652152633c8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.207.75.0/24",
      "pattern": "[ipv4-addr:value = '205.207.75.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fb87297e-bf4a-526b-b7eb-5b8e7c92b772",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.207.134.0/24",
      "pattern": "[ipv4-addr:value = '205.207.134.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6a0f8e47-e3f3-50a5-8810-2a3f7d2b9976",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.203.224.0/19",
      "pattern": "[ipv4-addr:value = '205.203.224.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--17bfd0f9-1b4a-5697-96ad-54b8f38a72f0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.203.0.0/19",
      "pattern": "[ipv4-addr:value = '205.203.0.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1759917e-89b2-52d5-b49e-78240bacc45e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.196.99.0/24",
      "pattern": "[ipv4-addr:value = '205.196.99.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c83289a4-37e1-5c28-bf29-91b6ca16e2e5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.196.96.0/23",
      "pattern": "[ipv4-addr:value = '205.196.96.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--22b8f4b5-1bdc-593f-8adb-0128047f8bd5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.196.76.0/24",
      "pattern": "[ipv4-addr:value = '205.196.76.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9cee92b6-b0c5-5fe8-b84f-0054eeda0479",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.196.72.0/22",
      "pattern": "[ipv4-addr:value = '205.196.72.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d8cac7d7-532b-5c51-89e1-7fbafa7ee39f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.196.71.0/24",
      "pattern": "[ipv4-addr:value = '205.196.71.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d1db690e-4c5e-5831-b513-2458b366c711",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.196.68.0/23",
      "pattern": "[ipv4-addr:value = '205.196.68.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--93ff6f32-ca4e-5876-a950-c6cbce585619",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.196.67.0/24",
      "pattern": "[ipv4-addr:value = '205.196.67.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9019851b-3815-51db-b8cf-bc1ef9ae38f5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.196.62.0/24",
      "pattern": "[ipv4-addr:value = '205.196.62.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f565a63f-18d3-57ee-90b6-4ba8d2c98a75",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.196.60.0/23",
      "pattern": "[ipv4-addr:value = '205.196.60.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b9e362e5-c8dc-5b6c-91a3-5262e7dd3ca8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.196.56.0/22",
      "pattern": "[ipv4-addr:value = '205.196.56.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--624c97ad-2051-55e3-915e-dffad6803d0a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.196.55.0/24",
      "pattern": "[ipv4-addr:value = '205.196.55.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--89366ed4-208c-5846-9c94-0c73f58630e7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.196.54.0/24",
      "pattern": "[ipv4-addr:value = '205.196.54.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fecc6c12-47ee-5526-b6b2-495a3689164a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.196.53.0/24",
      "pattern": "[ipv4-addr:value = '205.196.53.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b473c111-1e67-53e3-b0de-1c3511989869",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.196.52.0/24",
      "pattern": "[ipv4-addr:value = '205.196.52.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--76b2d88d-2af3-5b2c-960a-bbe8732b40d5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.196.51.0/24",
      "pattern": "[ipv4-addr:value = '205.196.51.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--040cef8b-a6d1-5e2d-94f1-8d6580600ad4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.196.48.0/23",
      "pattern": "[ipv4-addr:value = '205.196.48.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fe97f745-cdc2-5208-aef9-7a2721e36ad8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.196.28.0/22",
      "pattern": "[ipv4-addr:value = '205.196.28.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--084c2aa7-1096-5e93-8df1-e7e2e1298355",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.196.200.0/24",
      "pattern": "[ipv4-addr:value = '205.196.200.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--df76158e-e7f2-5534-b6f8-d7a38d2b12f1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.196.192.0/21",
      "pattern": "[ipv4-addr:value = '205.196.192.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--679718bb-f2c6-513f-94ba-cdae281477d5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.196.165.0/24",
      "pattern": "[ipv4-addr:value = '205.196.165.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--61b0cce1-3069-5a39-a471-cbfedc2c3b67",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.196.164.0/24",
      "pattern": "[ipv4-addr:value = '205.196.164.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6ab312d6-e428-5cbc-9c87-fbe4ac349b6d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.196.116.0/24",
      "pattern": "[ipv4-addr:value = '205.196.116.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--38dd1c10-1911-5885-8751-5f903b56e807",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.196.112.0/22",
      "pattern": "[ipv4-addr:value = '205.196.112.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dbc21130-fb4f-59dd-a96e-3727a692226a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.196.104.0/21",
      "pattern": "[ipv4-addr:value = '205.196.104.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5c50ba53-0927-5c45-b5dd-de6730061a9f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.196.100.0/22",
      "pattern": "[ipv4-addr:value = '205.196.100.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c170fa16-0d8f-5948-b907-8d73a089899d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.189.72.0/23",
      "pattern": "[ipv4-addr:value = '205.189.72.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4516ccfc-aa2b-51ba-9c8c-68fe25e4e330",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.189.71.0/24",
      "pattern": "[ipv4-addr:value = '205.189.71.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f99cf26a-6c60-59f8-988a-278a73ebeb0b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.189.207.0/24",
      "pattern": "[ipv4-addr:value = '205.189.207.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4af95058-f901-589c-a0d4-2855da15f940",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.175.160.0/19",
      "pattern": "[ipv4-addr:value = '205.175.160.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--28592610-1d98-557f-87f9-fa241943fb9b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.172.244.0/22",
      "pattern": "[ipv4-addr:value = '205.172.244.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--add15167-005b-5198-b4fe-c06a2cde0406",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.172.140.0/22",
      "pattern": "[ipv4-addr:value = '205.172.140.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--447e9e95-1b08-563b-8d76-f73f4874f062",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.166.87.0/24",
      "pattern": "[ipv4-addr:value = '205.166.87.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f5377213-407d-5b76-bf51-47f2e8c2e7ad",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.166.84.0/24",
      "pattern": "[ipv4-addr:value = '205.166.84.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c4c254ad-080b-5575-a0fc-04e61633baaf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.166.77.0/24",
      "pattern": "[ipv4-addr:value = '205.166.77.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2c35843d-e363-5be6-b93d-312434056d01",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.166.211.0/24",
      "pattern": "[ipv4-addr:value = '205.166.211.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--212eb217-f9f1-5840-a632-ebad6f4a23df",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.166.183.0/24",
      "pattern": "[ipv4-addr:value = '205.166.183.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--616a9c45-ee41-5a0a-a812-7430bacf6035",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.166.168.0/24",
      "pattern": "[ipv4-addr:value = '205.166.168.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ea2e8fdc-d22f-5daf-9e60-6c9ae662b20c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.166.154.0/24",
      "pattern": "[ipv4-addr:value = '205.166.154.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--27c32e7d-4c51-5597-adc2-38f83936c02b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.166.130.0/24",
      "pattern": "[ipv4-addr:value = '205.166.130.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9dcad833-33dd-56cb-bcbd-6e2dde93249b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.159.26.0/24",
      "pattern": "[ipv4-addr:value = '205.159.26.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--efeffc78-ad30-5120-af79-8d3d39ce0c3c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.159.241.0/24",
      "pattern": "[ipv4-addr:value = '205.159.241.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--385d302e-7507-5895-90cb-5017478224b1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.159.201.0/24",
      "pattern": "[ipv4-addr:value = '205.159.201.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ca8e0a2f-b946-5982-9f0a-e02afe79e7e3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.159.174.0/24",
      "pattern": "[ipv4-addr:value = '205.159.174.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c6e2974b-c106-596b-b427-3e278b58dc13",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.153.160.0/22",
      "pattern": "[ipv4-addr:value = '205.153.160.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d4ac9e8b-6795-51a6-b2b1-c4dab41b5456",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.153.132.0/22",
      "pattern": "[ipv4-addr:value = '205.153.132.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d2d304fd-3a1f-57d1-adb1-1811e5830ea1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.151.216.0/24",
      "pattern": "[ipv4-addr:value = '205.151.216.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b53fa28c-b00a-5999-a62d-8df492ffe3c0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.151.128.0/19",
      "pattern": "[ipv4-addr:value = '205.151.128.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a36ce9b5-3731-52f1-8f21-02faa4ed4219",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.148.128.0/18",
      "pattern": "[ipv4-addr:value = '205.148.128.0/18']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--66eb336e-3eca-5a16-a129-d5098a3e95a8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.144.0.0/20",
      "pattern": "[ipv4-addr:value = '205.144.0.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0c6ad3d2-c611-584e-af1b-6466947cc379",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.142.40.0/22",
      "pattern": "[ipv4-addr:value = '205.142.40.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8df939eb-a906-5f3f-a13c-a7ec08bc4e99",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.142.208.0/22",
      "pattern": "[ipv4-addr:value = '205.142.208.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--22184686-5e0f-5a36-9029-b62e69893c35",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.142.136.0/22",
      "pattern": "[ipv4-addr:value = '205.142.136.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1ef1d71d-3da9-5310-b343-9e1977f16e97",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.142.104.0/22",
      "pattern": "[ipv4-addr:value = '205.142.104.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--74e1bfae-67ed-5f26-be79-13721ba2d655",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:205.137.0.0/20",
      "pattern": "[ipv4-addr:value = '205.137.0.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--78608d53-f4fa-5b23-ada9-2d1b1e681490",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.91.96.0/20",
      "pattern": "[ipv4-addr:value = '204.91.96.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--741a1b10-96f9-5394-8e31-ad154380ce3e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.89.224.0/24",
      "pattern": "[ipv4-addr:value = '204.89.224.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a4f76106-cc20-5709-b316-87f14a2da037",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.89.202.0/24",
      "pattern": "[ipv4-addr:value = '204.89.202.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--383d273b-7c1f-58aa-af13-01b4d5a2e8dd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.88.160.0/20",
      "pattern": "[ipv4-addr:value = '204.88.160.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--112ce471-b874-521c-9ce0-d36f538a6576",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.87.234.0/24",
      "pattern": "[ipv4-addr:value = '204.87.234.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2cf58c28-d210-5745-8b35-7392dd1efa53",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.87.199.0/24",
      "pattern": "[ipv4-addr:value = '204.87.199.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--35ec23f5-1805-580e-92ca-9d9d36bb47cd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.86.16.0/20",
      "pattern": "[ipv4-addr:value = '204.86.16.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--00d7edf7-71bd-530f-92e3-41a57c230708",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.80.210.0/24",
      "pattern": "[ipv4-addr:value = '204.80.210.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0c55fda4-c59a-58f0-b0e5-0371ec284b09",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.80.198.0/24",
      "pattern": "[ipv4-addr:value = '204.80.198.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--93d9e042-9d99-5958-9dc0-fdb176980a47",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.80.180.0/24",
      "pattern": "[ipv4-addr:value = '204.80.180.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--494692c9-8e41-5c55-93c6-2bc95b2f65e4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.76.28.0/24",
      "pattern": "[ipv4-addr:value = '204.76.28.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4dc1cb0b-fd8e-5093-8607-26e4654635ef",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.76.24.0/22",
      "pattern": "[ipv4-addr:value = '204.76.24.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4cdf1f97-689c-548c-a1f8-792681153a23",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.76.16.0/21",
      "pattern": "[ipv4-addr:value = '204.76.16.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9b71e3bc-f238-5af7-ab26-0b11b4c0737b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.75.228.0/24",
      "pattern": "[ipv4-addr:value = '204.75.228.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c0d08fb1-08bf-5c3d-92ce-6466a9ee6641",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.75.174.0/24",
      "pattern": "[ipv4-addr:value = '204.75.174.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f4061c84-5dd5-5bbb-b6e1-0991720e64c5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.75.147.0/24",
      "pattern": "[ipv4-addr:value = '204.75.147.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6def6ca5-cb63-5f39-be25-5bec2997c960",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.74.32.0/19",
      "pattern": "[ipv4-addr:value = '204.74.32.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c7ad960a-19df-5ca3-8351-9d7c3a56e342",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.63.64.0/18",
      "pattern": "[ipv4-addr:value = '204.63.64.0/18']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--02dec726-e007-5cfc-9380-03be2726b05e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.62.177.0/24",
      "pattern": "[ipv4-addr:value = '204.62.177.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6598e89d-49ac-5449-9b66-a395f374b93d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.61.96.0/19",
      "pattern": "[ipv4-addr:value = '204.61.96.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ab407738-cf9a-5952-9369-a6cef3c08a0c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.58.188.0/22",
      "pattern": "[ipv4-addr:value = '204.58.188.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6fc3f4c5-d7ef-5aa2-9a12-c5c3bee65cc8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.56.16.0/20",
      "pattern": "[ipv4-addr:value = '204.56.16.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--75cf9050-9c32-57c1-9391-8f12618bcece",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.52.255.0/24",
      "pattern": "[ipv4-addr:value = '204.52.255.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9871319a-123d-5c61-957a-007978d0f196",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.52.184.0/24",
      "pattern": "[ipv4-addr:value = '204.52.184.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--33924d60-b879-567d-ba2b-6d43e031a9f0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.44.32.0/20",
      "pattern": "[ipv4-addr:value = '204.44.32.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1ef2b9b4-27a5-57ba-9ef5-8e4df85f5b30",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.44.224.0/20",
      "pattern": "[ipv4-addr:value = '204.44.224.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--556a4f06-fdc5-57ed-bb9e-c25ee457ad1c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.44.208.0/20",
      "pattern": "[ipv4-addr:value = '204.44.208.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6f1e167c-fe1f-540f-946f-f717357be025",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.29.224.0/24",
      "pattern": "[ipv4-addr:value = '204.29.224.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5cfbb59f-71b0-5a6d-a5e6-956b7010cbdb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.29.220.0/22",
      "pattern": "[ipv4-addr:value = '204.29.220.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b6cf862a-1f7c-55d8-be22-2ee7eacb28f6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.29.212.0/24",
      "pattern": "[ipv4-addr:value = '204.29.212.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ce258abf-ee1b-540f-a1a7-ab2366fb61fa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.27.218.0/24",
      "pattern": "[ipv4-addr:value = '204.27.218.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9fd3e75f-66eb-5409-a129-8a6d5266009b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.27.202.0/24",
      "pattern": "[ipv4-addr:value = '204.27.202.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b31582e5-95ae-5ec4-83d6-a70dc865ea82",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.27.155.0/24",
      "pattern": "[ipv4-addr:value = '204.27.155.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--76ef01f7-d7a2-51fe-be2e-393752267792",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.239.200.0/23",
      "pattern": "[ipv4-addr:value = '204.239.200.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c48a0adc-904e-5912-bd62-054d68290843",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.239.134.0/23",
      "pattern": "[ipv4-addr:value = '204.239.134.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ffd038f4-2f10-5868-90dd-06fb02d33216",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.239.132.0/23",
      "pattern": "[ipv4-addr:value = '204.239.132.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--343b30fc-221d-5b7e-a6a7-125e52936a87",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.238.40.0/24",
      "pattern": "[ipv4-addr:value = '204.238.40.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8512b0d9-677a-504a-8886-d291dda0ef2b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.238.183.0/24",
      "pattern": "[ipv4-addr:value = '204.238.183.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6c83d77c-ca84-5e70-9419-c8876c7db7bb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.238.170.0/24",
      "pattern": "[ipv4-addr:value = '204.238.170.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d701a3d6-8a0f-5cd8-afaf-c93443dd9f93",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.238.137.0/24",
      "pattern": "[ipv4-addr:value = '204.238.137.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a93ddf15-4b17-51b1-8929-1351db1104dd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.238.121.0/24",
      "pattern": "[ipv4-addr:value = '204.238.121.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e7ba2a6a-fd70-52eb-8a8c-6036c20973d3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.235.252.0/24",
      "pattern": "[ipv4-addr:value = '204.235.252.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a454af13-b22d-58bc-9196-17d4bafe3bbe",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.235.242.0/24",
      "pattern": "[ipv4-addr:value = '204.235.242.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7e67cf54-c601-553b-bb54-589a55b2cef3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.235.240.0/24",
      "pattern": "[ipv4-addr:value = '204.235.240.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--92fb37e1-410a-53ec-a07d-c7646f2ffb68",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.235.16.0/20",
      "pattern": "[ipv4-addr:value = '204.235.16.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--488254a3-50ad-58f8-868a-893a315093ba",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.232.0.0/18",
      "pattern": "[ipv4-addr:value = '204.232.0.0/18']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1829ff6a-cb02-50a3-98d7-79caa410d250",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.227.32.0/19",
      "pattern": "[ipv4-addr:value = '204.227.32.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e8f9e400-ce38-520e-a7a7-a9e50d21f08b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.225.226.0/23",
      "pattern": "[ipv4-addr:value = '204.225.226.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b8e4d84f-c8ab-50ab-98e9-a4fbbbb77eba",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.225.153.0/24",
      "pattern": "[ipv4-addr:value = '204.225.153.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d83c4786-dcfe-5685-afea-ec84f1865ea0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.194.48.0/21",
      "pattern": "[ipv4-addr:value = '204.194.48.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--df8eaa1b-e22a-5a22-8dcc-9126558ea91a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.194.40.0/21",
      "pattern": "[ipv4-addr:value = '204.194.40.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b7c98b67-6066-5f68-bc60-c8090a707676",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.194.16.0/22",
      "pattern": "[ipv4-addr:value = '204.194.16.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--80238ce4-2f93-598b-8850-854ae3991112",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.19.38.0/23",
      "pattern": "[ipv4-addr:value = '204.19.38.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--de26f471-9bc6-5347-af5b-2bf73e48363a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.187.252.0/23",
      "pattern": "[ipv4-addr:value = '204.187.252.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9fbdce54-c758-50dc-9526-d79948310f39",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.187.248.0/22",
      "pattern": "[ipv4-addr:value = '204.187.248.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2e2c46f3-2cde-59b7-8310-c69c17fe2f1d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.187.240.0/21",
      "pattern": "[ipv4-addr:value = '204.187.240.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--599d246e-5801-5416-9f3a-7099c953161a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.187.224.0/20",
      "pattern": "[ipv4-addr:value = '204.187.224.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b7061ec2-24de-564e-bcfa-895bebfa4ef9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.187.192.0/19",
      "pattern": "[ipv4-addr:value = '204.187.192.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1fd5ff77-a557-5a08-b977-45aa92016509",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.187.160.0/19",
      "pattern": "[ipv4-addr:value = '204.187.160.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--512cd811-0932-5e2a-90cf-1b89357dbcfb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.187.156.0/22",
      "pattern": "[ipv4-addr:value = '204.187.156.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d8e48353-9938-5ab1-88ea-688f42c05f0f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.179.64.0/20",
      "pattern": "[ipv4-addr:value = '204.179.64.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--34aad755-704d-5fa6-8af8-3e2cf5e69114",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.178.16.0/20",
      "pattern": "[ipv4-addr:value = '204.178.16.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b3a020f0-cb01-553e-b9bb-4ae2d94f975a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.155.94.0/24",
      "pattern": "[ipv4-addr:value = '204.155.94.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ba96bfe3-f4fa-5015-84be-235a76610394",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.155.92.0/23",
      "pattern": "[ipv4-addr:value = '204.155.92.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9d219c10-7b2a-54be-a0a9-6217e42cbfd3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.155.88.0/22",
      "pattern": "[ipv4-addr:value = '204.155.88.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6b713339-bfbe-52c7-87ba-f4544765353c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.155.80.0/21",
      "pattern": "[ipv4-addr:value = '204.155.80.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9df66d5b-a149-5d1e-a316-82ede8e5ca6a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.153.196.0/22",
      "pattern": "[ipv4-addr:value = '204.153.196.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--788e44c7-4745-54fc-b4ef-91f46b05c38a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.153.160.0/23",
      "pattern": "[ipv4-addr:value = '204.153.160.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9c21324a-3a32-53ff-a0bc-4200ed578bed",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.153.116.0/22",
      "pattern": "[ipv4-addr:value = '204.153.116.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2263b497-760f-5207-858d-e6de25f593ed",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.147.96.0/20",
      "pattern": "[ipv4-addr:value = '204.147.96.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--439454d5-3210-5010-887e-f71535b6ecd2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.147.64.0/21",
      "pattern": "[ipv4-addr:value = '204.147.64.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--292c3d5f-ffc8-531e-ab90-d71831092d25",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.147.240.0/20",
      "pattern": "[ipv4-addr:value = '204.147.240.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--42c9b20c-a19b-5b37-a14e-04cb7d240a62",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.146.240.0/20",
      "pattern": "[ipv4-addr:value = '204.146.240.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4db2516f-3e6c-58bd-99f5-2981a0f7a590",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.140.120.0/22",
      "pattern": "[ipv4-addr:value = '204.140.120.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--613285a6-cdca-5677-b0bf-643e6eaff7c9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.140.112.0/21",
      "pattern": "[ipv4-addr:value = '204.140.112.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--457d19f1-0131-5945-95f8-cb01aea17315",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.140.104.0/21",
      "pattern": "[ipv4-addr:value = '204.140.104.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--370dbb30-816a-52ca-abd1-6855507ea41d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.14.80.0/22",
      "pattern": "[ipv4-addr:value = '204.14.80.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e36b58dd-1e04-5ec8-a984-bf0f77fc950b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.130.195.0/24",
      "pattern": "[ipv4-addr:value = '204.130.195.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f45840d8-146e-5890-a07d-7a8d0ab6d88b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.130.16.0/20",
      "pattern": "[ipv4-addr:value = '204.130.16.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2594ceaa-ed6d-52ac-925c-a9ef43996073",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.130.134.0/24",
      "pattern": "[ipv4-addr:value = '204.130.134.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ced685dd-956f-55d2-90ee-f69ab912aebd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.128.32.0/20",
      "pattern": "[ipv4-addr:value = '204.128.32.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8974c16a-2fe8-5fe3-823b-75bcb9194831",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.128.180.0/24",
      "pattern": "[ipv4-addr:value = '204.128.180.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--839b8f8c-413d-5c55-a8be-e1d0062d779b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.128.151.0/24",
      "pattern": "[ipv4-addr:value = '204.128.151.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--25b67bd9-2856-5fcf-8138-6c179e2f981f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.126.60.0/23",
      "pattern": "[ipv4-addr:value = '204.126.60.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2fb23f26-4136-5bbe-88f6-6fed7739e594",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.126.56.0/22",
      "pattern": "[ipv4-addr:value = '204.126.56.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cfc5f730-ac7c-525f-a1a2-668a82fb5b47",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.126.48.0/21",
      "pattern": "[ipv4-addr:value = '204.126.48.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b2286207-7964-5d13-9beb-c0188f3e6e76",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.126.32.0/20",
      "pattern": "[ipv4-addr:value = '204.126.32.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--936b7d69-38ab-5d2e-9ca6-47827563756f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.126.244.0/23",
      "pattern": "[ipv4-addr:value = '204.126.244.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--13c0b337-61a1-59a8-84b2-d6e974bc9f44",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.115.128.0/21",
      "pattern": "[ipv4-addr:value = '204.115.128.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6849b17e-e0bc-537d-8b8e-d40f496a8bd5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.115.116.0/24",
      "pattern": "[ipv4-addr:value = '204.115.116.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3af2b884-0ca5-53d6-8e13-90a325453150",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.115.112.0/22",
      "pattern": "[ipv4-addr:value = '204.115.112.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--810a4031-6ab8-528f-a89e-11f5a7d40979",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.110.8.0/21",
      "pattern": "[ipv4-addr:value = '204.110.8.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3c6a18f3-0014-589d-b6ad-d2a8fd77a8d0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.110.184.0/23",
      "pattern": "[ipv4-addr:value = '204.110.184.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e111345e-3383-5f91-b451-f378d522e34a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.110.176.0/21",
      "pattern": "[ipv4-addr:value = '204.110.176.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--19e1c468-6fb0-5cfa-a022-86ca064e10ee",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.110.144.0/20",
      "pattern": "[ipv4-addr:value = '204.110.144.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b6e4fada-01d9-554f-a168-c0e90ddec7ad",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.107.208.0/24",
      "pattern": "[ipv4-addr:value = '204.107.208.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d07a6a28-0a3c-5fc3-b5b3-52584c27abaa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.107.132.0/24",
      "pattern": "[ipv4-addr:value = '204.107.132.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f7105c06-e14e-5b7d-99cf-029376da6a92",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.106.192.0/19",
      "pattern": "[ipv4-addr:value = '204.106.192.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--20b0732d-c758-50f7-bdbd-07478b2025ee",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:204.106.128.0/18",
      "pattern": "[ipv4-addr:value = '204.106.128.0/18']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dcd92c8b-aaeb-5329-8c05-3a94a278c224",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:203.91.73.0/24",
      "pattern": "[ipv4-addr:value = '203.91.73.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--829caec1-33d1-56df-b540-e5add2a193d6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:203.9.0.0/19",
      "pattern": "[ipv4-addr:value = '203.9.0.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--87e4e237-4830-5670-bb2b-63020f4d3230",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:203.26.150.0/24",
      "pattern": "[ipv4-addr:value = '203.26.150.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7a6cb579-3b87-5e1e-9847-42b48fd28079",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:203.195.0.0/18",
      "pattern": "[ipv4-addr:value = '203.195.0.0/18']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c7a491d2-86b0-500d-98a9-9a6819a0dbd0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:203.191.64.0/18",
      "pattern": "[ipv4-addr:value = '203.191.64.0/18']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f1e3ffcc-67e7-5e65-841d-12b954988989",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:203.189.234.0/23",
      "pattern": "[ipv4-addr:value = '203.189.234.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c7dd76e1-133a-5cd3-b126-8634e68f2ac6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:203.188.171.0/24",
      "pattern": "[ipv4-addr:value = '203.188.171.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c0b2b213-6cc3-593b-a126-6a1316776a20",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:203.171.224.0/20",
      "pattern": "[ipv4-addr:value = '203.171.224.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c5077c4f-ac80-5cc1-a213-0c958d0d6560",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:203.160.52.0/22",
      "pattern": "[ipv4-addr:value = '203.160.52.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bac66738-8724-5117-bd65-61aac599e7c9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:203.159.90.0/24",
      "pattern": "[ipv4-addr:value = '203.159.90.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--866bf0cc-8230-5eda-9bbd-c195ad078075",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:203.132.96.0/19",
      "pattern": "[ipv4-addr:value = '203.132.96.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bce83ab4-4b6d-5115-8e05-e63d2766289f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:203.128.0.0/23",
      "pattern": "[ipv4-addr:value = '203.128.0.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9895f994-42f2-54e6-bea8-b54eaaceafab",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:202.95.8.0/21",
      "pattern": "[ipv4-addr:value = '202.95.8.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ba5b961d-36d1-54af-a3d7-a570424c409e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:202.95.7.0/24",
      "pattern": "[ipv4-addr:value = '202.95.7.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bcd7ad63-ff6e-5f3b-a574-8054dd6f57aa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:202.79.173.0/24",
      "pattern": "[ipv4-addr:value = '202.79.173.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--23ceb7b2-2fb4-5a97-b7c1-7a03d561b055",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:202.78.164.0/24",
      "pattern": "[ipv4-addr:value = '202.78.164.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fe5e8dbb-2f3d-5829-8987-22d56a6c452a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:202.69.136.0/21",
      "pattern": "[ipv4-addr:value = '202.69.136.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--456b225f-c71d-58ed-b2f5-3e6b2c1fafa0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:202.61.141.0/24",
      "pattern": "[ipv4-addr:value = '202.61.141.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d9645c5d-5a90-50a4-b6e8-bd030a1caf9e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:202.61.128.0/18",
      "pattern": "[ipv4-addr:value = '202.61.128.0/18']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fcece027-0407-5804-91ac-a0034b5247ab",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:202.59.234.0/23",
      "pattern": "[ipv4-addr:value = '202.59.234.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1177a991-9284-5465-99f1-fa46091cf93e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:202.52.38.0/24",
      "pattern": "[ipv4-addr:value = '202.52.38.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0a5215d7-a887-5cfc-bbe9-378a50457e6b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:202.46.96.0/20",
      "pattern": "[ipv4-addr:value = '202.46.96.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--35b51131-871b-5cb5-bfa2-90ca13b90ee9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:202.40.64.0/18",
      "pattern": "[ipv4-addr:value = '202.40.64.0/18']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b358fa48-50a0-5c4f-8e73-5fe1c383de4e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:202.40.32.0/19",
      "pattern": "[ipv4-addr:value = '202.40.32.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--35648158-07ac-59bc-821a-f3574a040e30",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:202.27.100.0/22",
      "pattern": "[ipv4-addr:value = '202.27.100.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ba420743-cfe7-5dfd-8c55-52d7e4fd64d5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:202.189.80.0/20",
      "pattern": "[ipv4-addr:value = '202.189.80.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--06d3a94d-ed26-5cc4-8a2a-62ad9fdf8c7c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:202.183.0.0/19",
      "pattern": "[ipv4-addr:value = '202.183.0.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--92be5c83-1f8d-5fdc-ac4a-1852a99acc7e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:202.170.75.0/24",
      "pattern": "[ipv4-addr:value = '202.170.75.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2b708bf1-dc05-5aad-9140-0c480f665c21",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:202.168.80.0/22",
      "pattern": "[ipv4-addr:value = '202.168.80.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--24cdde0b-b76a-5ed6-a3fc-e2e91c2cf5b6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:202.159.80.0/20",
      "pattern": "[ipv4-addr:value = '202.159.80.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--59c8b7d0-8c5b-5f56-9dee-f8348ea500d6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:202.152.192.0/20",
      "pattern": "[ipv4-addr:value = '202.152.192.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d7ae1559-e862-5c03-9cca-0acbeb72a09c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:202.148.32.0/20",
      "pattern": "[ipv4-addr:value = '202.148.32.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8bb82c68-532f-5963-990d-311fe778101f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:202.131.208.0/20",
      "pattern": "[ipv4-addr:value = '202.131.208.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bcc9939b-6619-5c38-a889-7e2ae15c8630",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:202.122.64.0/19",
      "pattern": "[ipv4-addr:value = '202.122.64.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1357eca8-8272-56e6-b27d-0f4b740620d9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:202.12.101.0/24",
      "pattern": "[ipv4-addr:value = '202.12.101.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--af5230a7-d1c9-5259-b65e-52f49aa7f3d8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:201.148.168.0/22",
      "pattern": "[ipv4-addr:value = '201.148.168.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c727d56f-d9fa-5661-b230-73b19d9dfefc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:200.71.124.0/22",
      "pattern": "[ipv4-addr:value = '200.71.124.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6273be3b-26e3-50ad-88bb-ba30f878f493",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:200.34.30.0/23",
      "pattern": "[ipv4-addr:value = '200.34.30.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c9077d87-5d12-57a3-97fa-8654e53fcaf8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:200.34.156.0/24",
      "pattern": "[ipv4-addr:value = '200.34.156.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--60d3df87-0210-5651-bf61-8b58d130759d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:200.34.135.0/24",
      "pattern": "[ipv4-addr:value = '200.34.135.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fbe2339e-8f0c-56bd-b9b4-0030bc00fb11",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:200.33.187.0/24",
      "pattern": "[ipv4-addr:value = '200.33.187.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f8435168-2ed9-54c1-91f2-ab14fe29c5bb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:200.33.170.0/24",
      "pattern": "[ipv4-addr:value = '200.33.170.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4421d4d4-ec67-5920-b407-8b0e3266ac40",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:200.23.165.0/24",
      "pattern": "[ipv4-addr:value = '200.23.165.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--640f4466-7272-504f-8c29-315a45e287a6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:200.23.137.0/24",
      "pattern": "[ipv4-addr:value = '200.23.137.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a6b84c4d-c7be-5796-b650-37f837e53801",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:200.22.0.0/16",
      "pattern": "[ipv4-addr:value = '200.22.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ff98f30b-174a-5184-aae7-159216ed29ee",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:200.189.44.0/22",
      "pattern": "[ipv4-addr:value = '200.189.44.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1d36d90f-99d9-5a43-841f-053cb329db5d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:200.13.64.0/20",
      "pattern": "[ipv4-addr:value = '200.13.64.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a8caf852-ca47-5534-83aa-511fbef17d57",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:200.1.4.0/23",
      "pattern": "[ipv4-addr:value = '200.1.4.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5b18abe3-cf2e-567c-9fe1-c3e318bd3a67",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:200.1.0.0/22",
      "pattern": "[ipv4-addr:value = '200.1.0.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--30d6850b-6549-53c6-b430-e541a787486a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:200.0.60.0/23",
      "pattern": "[ipv4-addr:value = '200.0.60.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c62a0cb1-f004-5e98-81f8-1a2bf3d6b900",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:2.59.153.0/24",
      "pattern": "[ipv4-addr:value = '2.59.153.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e027b9e3-1e20-5adb-a6a3-6c23628cdb20",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:2.59.152.0/24",
      "pattern": "[ipv4-addr:value = '2.59.152.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e950e201-26b0-54bd-8094-4d6abe46aa5d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:2.58.56.0/24",
      "pattern": "[ipv4-addr:value = '2.58.56.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--48577d47-dc0c-5f56-a05c-3d4888769482",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:2.57.234.0/23",
      "pattern": "[ipv4-addr:value = '2.57.234.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4397ff05-d41f-55fa-99ef-714232bf1523",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:2.57.232.0/23",
      "pattern": "[ipv4-addr:value = '2.57.232.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1182221e-fd72-5e6d-99e0-34c887964ee6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:2.57.122.0/24",
      "pattern": "[ipv4-addr:value = '2.57.122.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0ef49a02-dce2-50ca-b684-eeaf2ca91348",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:2.56.192.0/22",
      "pattern": "[ipv4-addr:value = '2.56.192.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--24e961cf-524a-5f3f-ac00-915fe3ae7ea0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:2.27.62.0/24",
      "pattern": "[ipv4-addr:value = '2.27.62.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9b5f1207-6898-536a-8415-a2edf2629289",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:2.27.5.0/24",
      "pattern": "[ipv4-addr:value = '2.27.5.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--31c689f4-0462-56e1-bab1-f2dd9f07a244",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:2.26.75.0/24",
      "pattern": "[ipv4-addr:value = '2.26.75.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--642c3981-1c43-5ec9-903e-8a0e8dbb1736",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.89.198.0/24",
      "pattern": "[ipv4-addr:value = '199.89.198.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e1634e0d-8fa9-52de-9aeb-2eebb7cf0467",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.89.16.0/20",
      "pattern": "[ipv4-addr:value = '199.89.16.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7aaa2e15-f8bf-5cdf-a1f3-8bd2342fb69f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.88.251.0/24",
      "pattern": "[ipv4-addr:value = '199.88.251.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aafd04c2-175c-5ca0-83d9-6f173eec5132",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.84.64.0/19",
      "pattern": "[ipv4-addr:value = '199.84.64.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8e6bdb86-3ae7-5394-b086-50dc50fc351b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.84.60.0/24",
      "pattern": "[ipv4-addr:value = '199.84.60.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1d7599b3-e133-55b8-b52f-6a0c88c0e321",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.84.56.0/22",
      "pattern": "[ipv4-addr:value = '199.84.56.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--669450c2-0d29-527b-971d-d6bce6033ffd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.84.55.0/24",
      "pattern": "[ipv4-addr:value = '199.84.55.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f317d6c5-2768-5bda-814a-b7879b44ecc8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.84.224.0/21",
      "pattern": "[ipv4-addr:value = '199.84.224.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6c4cca8e-3a57-547e-a22c-b56a8115534e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.84.216.0/21",
      "pattern": "[ipv4-addr:value = '199.84.216.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e54b836d-c044-5fa1-87a2-8cd80f71a5dc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.84.16.0/20",
      "pattern": "[ipv4-addr:value = '199.84.16.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1cb71e2c-fe2e-5ce3-9dcb-ce22b79eb69f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.73.64.0/20",
      "pattern": "[ipv4-addr:value = '199.73.64.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2dd34d3e-8f6b-567b-9440-a7bcf01dcac1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.71.192.0/20",
      "pattern": "[ipv4-addr:value = '199.71.192.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--76895385-e7fa-5617-818d-ca6175204f73",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.67.96.0/19",
      "pattern": "[ipv4-addr:value = '199.67.96.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1b65bf88-ad39-5b50-89b6-db4be9f40e4b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.67.8.0/21",
      "pattern": "[ipv4-addr:value = '199.67.8.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f9d71f95-4a57-5ba1-b357-b452e89becd1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.59.8.0/21",
      "pattern": "[ipv4-addr:value = '199.59.8.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5f9fa629-31ab-5c6c-9798-2a60b5f5268a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.5.24.0/23",
      "pattern": "[ipv4-addr:value = '199.5.24.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f65d5b6f-8b87-57cf-984e-01cc5a84e957",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.5.229.0/24",
      "pattern": "[ipv4-addr:value = '199.5.229.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6b998c46-c630-5682-aa3c-6602efaa193f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.5.194.0/24",
      "pattern": "[ipv4-addr:value = '199.5.194.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--772c20af-acf9-5dc4-9f02-56a9a9893ad9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.5.16.0/21",
      "pattern": "[ipv4-addr:value = '199.5.16.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f35ac633-7989-5989-bdcd-a62421359cdb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.5.152.0/23",
      "pattern": "[ipv4-addr:value = '199.5.152.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3eded806-9ab7-5ce2-8e44-85fd753495e2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.5.135.0/24",
      "pattern": "[ipv4-addr:value = '199.5.135.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eac82398-4f09-5831-8e45-e6c69346d622",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.38.252.0/22",
      "pattern": "[ipv4-addr:value = '199.38.252.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--56325847-c7f0-5c47-9a10-394849d39c84",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.38.0.0/21",
      "pattern": "[ipv4-addr:value = '199.38.0.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bd935792-6079-509d-97df-c34f3648aef5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.34.128.0/18",
      "pattern": "[ipv4-addr:value = '199.34.128.0/18']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--987da0b2-7ae9-544e-b6cc-a7b814302ba6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.33.222.0/24",
      "pattern": "[ipv4-addr:value = '199.33.222.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--58ac9e11-6cdf-5fc2-a922-d6b061a33691",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.33.146.0/24",
      "pattern": "[ipv4-addr:value = '199.33.146.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fa0e47f3-3013-58d0-b2c2-e005d0e4f152",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.26.251.0/24",
      "pattern": "[ipv4-addr:value = '199.26.251.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bf3f5a18-df75-5070-bd5a-347293a4cf03",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.26.207.0/24",
      "pattern": "[ipv4-addr:value = '199.26.207.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--64ffc7eb-b987-51b6-8582-c023f1f7848f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.26.137.0/24",
      "pattern": "[ipv4-addr:value = '199.26.137.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e1cfc845-e02b-5c15-b409-6449d28fbaea",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.254.32.0/20",
      "pattern": "[ipv4-addr:value = '199.254.32.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--64cb4085-113d-5400-8655-523d662d1b47",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.254.190.0/24",
      "pattern": "[ipv4-addr:value = '199.254.190.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dc4be807-ca3a-51de-adab-c161e45184cb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.253.48.0/21",
      "pattern": "[ipv4-addr:value = '199.253.48.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8b95c496-2ff9-5915-9217-f244deb72b87",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.253.32.0/20",
      "pattern": "[ipv4-addr:value = '199.253.32.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--30d35be4-3ab8-5cf9-98d9-4b45332aebe0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.253.224.0/20",
      "pattern": "[ipv4-addr:value = '199.253.224.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2ffd05ac-a632-5a97-af6e-a79a0e582ea8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.249.64.0/19",
      "pattern": "[ipv4-addr:value = '199.249.64.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5472d66d-be1b-50d8-ab83-8382d72cd898",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.248.60.0/23",
      "pattern": "[ipv4-addr:value = '199.248.60.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9ed21d47-4c54-5c26-a764-31439a3826a4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.248.56.0/22",
      "pattern": "[ipv4-addr:value = '199.248.56.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--259f88a2-62a4-5670-a930-f70cee4858fc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.248.48.0/21",
      "pattern": "[ipv4-addr:value = '199.248.48.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0a6a63a9-2c30-5ced-b407-a860fdce4431",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.248.32.0/20",
      "pattern": "[ipv4-addr:value = '199.248.32.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4de01ed1-1341-5a34-81fc-dc99eda56f57",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.246.215.0/24",
      "pattern": "[ipv4-addr:value = '199.246.215.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3313258d-5ae4-5e5d-9a97-32ac147fd24a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.245.138.0/24",
      "pattern": "[ipv4-addr:value = '199.245.138.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--42fd6154-fe48-5e0c-985e-c67e9d60c327",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.241.0.0/21",
      "pattern": "[ipv4-addr:value = '199.241.0.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d3b04e04-8cfa-5c82-a72b-cc01ab99b1f9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.233.96.0/24",
      "pattern": "[ipv4-addr:value = '199.233.96.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--311e4738-3c76-531c-8b35-ba7b654dc848",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.233.85.0/24",
      "pattern": "[ipv4-addr:value = '199.233.85.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dd279c07-42f9-5e3c-9868-fb65a4c834fd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.231.8.0/21",
      "pattern": "[ipv4-addr:value = '199.231.8.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4cbccfe8-dcb2-54bb-9276-caf19bf04057",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.230.64.0/19",
      "pattern": "[ipv4-addr:value = '199.230.64.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2f137bbd-a580-58e7-adc6-32c398acaa99",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.223.0.0/20",
      "pattern": "[ipv4-addr:value = '199.223.0.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--39051eee-4d47-5e6a-9d4d-112516b3aeb9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.201.239.0/24",
      "pattern": "[ipv4-addr:value = '199.201.239.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c203cbeb-a9f5-5aaf-98a0-9fd0f484dce6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.201.238.0/24",
      "pattern": "[ipv4-addr:value = '199.201.238.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1def0b23-3e72-51c5-9689-11a7b9abee2a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.198.188.0/22",
      "pattern": "[ipv4-addr:value = '199.198.188.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--91b2074c-567e-5e9b-84ec-eba687f94267",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.198.184.0/23",
      "pattern": "[ipv4-addr:value = '199.198.184.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bfe2bb81-2119-5271-8cba-f8e40fba7a07",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.198.176.0/21",
      "pattern": "[ipv4-addr:value = '199.198.176.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--01381a98-f842-593d-9c27-186ffd367edb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.198.160.0/20",
      "pattern": "[ipv4-addr:value = '199.198.160.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--15c4a51d-6539-5ea5-ba84-f770fa8984be",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.196.192.0/19",
      "pattern": "[ipv4-addr:value = '199.196.192.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eb961ba4-7d20-5545-8dda-809a58c14658",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.187.48.0/21",
      "pattern": "[ipv4-addr:value = '199.187.48.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f86bdef4-07e2-5164-8740-f9406ee59ca7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.187.32.0/20",
      "pattern": "[ipv4-addr:value = '199.187.32.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--56d398a1-3e30-59cc-b513-d754fa2a54b6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.187.24.0/22",
      "pattern": "[ipv4-addr:value = '199.187.24.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--01984a59-655f-5be1-a3c8-a4cd6d6da123",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.187.16.0/21",
      "pattern": "[ipv4-addr:value = '199.187.16.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--44bc2525-06d5-56c3-9b2d-55b3cae3bbfb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.186.26.0/23",
      "pattern": "[ipv4-addr:value = '199.186.26.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--745ba532-1957-5536-9e25-280399e3604d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.185.144.0/20",
      "pattern": "[ipv4-addr:value = '199.185.144.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dc08a101-8139-501f-97fe-bd9dd9be8c62",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.184.82.0/24",
      "pattern": "[ipv4-addr:value = '199.184.82.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0a1f6dcb-db22-51ee-bb55-79ff42d7791e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.184.8.0/22",
      "pattern": "[ipv4-addr:value = '199.184.8.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9f722870-dddc-5986-923d-7061656c8ca0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.184.248.0/24",
      "pattern": "[ipv4-addr:value = '199.184.248.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5e693d73-8f7d-53d2-b828-249e7cb231df",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.184.223.0/24",
      "pattern": "[ipv4-addr:value = '199.184.223.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--faa4dd83-da83-5345-985e-aae619a78729",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.184.12.0/23",
      "pattern": "[ipv4-addr:value = '199.184.12.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--21842804-361c-5888-9e75-53aa999dbe9a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.184.0.0/21",
      "pattern": "[ipv4-addr:value = '199.184.0.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9deea0c5-e1a6-5077-923a-c0f0e875b4f6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.180.8.0/22",
      "pattern": "[ipv4-addr:value = '199.180.8.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a2b75191-a105-566d-9478-4ef48fd2b072",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.180.14.0/24",
      "pattern": "[ipv4-addr:value = '199.180.14.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--df65b226-8136-52d4-9526-2e3d7398e62e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.180.12.0/23",
      "pattern": "[ipv4-addr:value = '199.180.12.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--53f63936-27e1-56d3-9528-9115d949cde3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.178.64.0/19",
      "pattern": "[ipv4-addr:value = '199.178.64.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--03d2c06a-3f54-5aee-99ee-ec021a1b28d4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.178.168.0/23",
      "pattern": "[ipv4-addr:value = '199.178.168.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4c10b9aa-e980-58f2-b9e0-783b45fd8837",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.178.160.0/21",
      "pattern": "[ipv4-addr:value = '199.178.160.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3fe039ce-58d4-5be0-839e-29a3f7092b3f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.178.144.0/20",
      "pattern": "[ipv4-addr:value = '199.178.144.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8859cef3-6cd7-5c2b-ac02-a52b49315527",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.175.156.0/24",
      "pattern": "[ipv4-addr:value = '199.175.156.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--733fc8e6-ed46-540d-b683-0d37730227b6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.175.152.0/22",
      "pattern": "[ipv4-addr:value = '199.175.152.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8262f272-7bac-54b3-94f7-4ea3f663d857",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.175.144.0/21",
      "pattern": "[ipv4-addr:value = '199.175.144.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cd2c63c6-45f9-5293-92ef-64eb113863cc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.175.142.0/23",
      "pattern": "[ipv4-addr:value = '199.175.142.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--51ab8026-e698-57c5-a3d3-4a7253876fa3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.166.214.0/23",
      "pattern": "[ipv4-addr:value = '199.166.214.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0f81ef1a-c59e-5342-a54e-bcd90c2cb67f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.166.200.0/22",
      "pattern": "[ipv4-addr:value = '199.166.200.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f177b9bc-4e93-52e6-9f25-50ab935c1835",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.165.32.0/19",
      "pattern": "[ipv4-addr:value = '199.165.32.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e07c415b-ce45-5dff-93b9-cba5c40ee0e6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.165.238.0/24",
      "pattern": "[ipv4-addr:value = '199.165.238.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--895d29d8-461a-5d2f-b289-cd72212d2754",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.165.237.0/24",
      "pattern": "[ipv4-addr:value = '199.165.237.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ba18d0d2-6549-5f99-a4aa-675fc1aa003b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.164.242.0/24",
      "pattern": "[ipv4-addr:value = '199.164.242.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--adf6199b-3bc1-5da1-8931-ca548abf4e3f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.120.163.0/24",
      "pattern": "[ipv4-addr:value = '199.120.163.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1cb561f5-b8b1-589e-bcaa-be1ae6bea8eb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.120.160.0/24",
      "pattern": "[ipv4-addr:value = '199.120.160.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0dbe5c79-db5f-5d20-8159-f7a952391e1e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.120.12.0/22",
      "pattern": "[ipv4-addr:value = '199.120.12.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--22b13087-50ae-5cc6-9e4a-1af7fceeb147",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.108.236.0/22",
      "pattern": "[ipv4-addr:value = '199.108.236.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--45fa5087-006d-5125-a669-8bdfefc15844",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.108.212.0/22",
      "pattern": "[ipv4-addr:value = '199.108.212.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b5c906c1-65d2-5ef4-87c0-1e8290313b84",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.107.96.0/22",
      "pattern": "[ipv4-addr:value = '199.107.96.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--027a5134-139f-5ac6-b3d6-eb8b0e7cfa28",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.107.152.0/21",
      "pattern": "[ipv4-addr:value = '199.107.152.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c78c0b73-033e-53ed-ad3f-4a5654513eda",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.106.8.0/21",
      "pattern": "[ipv4-addr:value = '199.106.8.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e4160ee4-f72d-5214-bdaa-014da0aeb328",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.103.64.0/22",
      "pattern": "[ipv4-addr:value = '199.103.64.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c19ab93f-96ec-5056-a7f6-3752f2d96877",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:199.1.24.0/21",
      "pattern": "[ipv4-addr:value = '199.1.24.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b8dcc9d1-e3e5-5179-a57c-61b452d5830b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.99.245.0/24",
      "pattern": "[ipv4-addr:value = '198.99.245.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f0378661-d44b-5ffa-8a6f-3ab65729e43a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.99.178.0/24",
      "pattern": "[ipv4-addr:value = '198.99.178.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f19c64e6-095d-5860-ad02-50ba69cc2f7b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.99.106.0/24",
      "pattern": "[ipv4-addr:value = '198.99.106.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2055862f-9255-5ea9-ac7e-1e46ab1d5063",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.97.8.0/22",
      "pattern": "[ipv4-addr:value = '198.97.8.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--93c84ef5-9f1d-57e6-a830-9253dc2640f0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.97.12.0/24",
      "pattern": "[ipv4-addr:value = '198.97.12.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--55ca7d65-4559-5e1d-acc6-572a093a31ad",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.96.224.0/20",
      "pattern": "[ipv4-addr:value = '198.96.224.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--46b53d1a-cb11-5ce0-92bf-3465b0483bb0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.96.160.0/24",
      "pattern": "[ipv4-addr:value = '198.96.160.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8f9ed0b4-a804-5781-80a7-3f13ee359399",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.62.76.0/24",
      "pattern": "[ipv4-addr:value = '198.62.76.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e9dacb17-b221-5f9f-a26f-a4a69fc4cc02",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.62.70.0/24",
      "pattern": "[ipv4-addr:value = '198.62.70.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5b252b7e-78a4-5921-87e1-42bfb3304878",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.62.16.0/20",
      "pattern": "[ipv4-addr:value = '198.62.16.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--28b9c715-8aab-5f99-883c-d15cb2940bdb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.62.119.0/24",
      "pattern": "[ipv4-addr:value = '198.62.119.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1f4fdd15-ac00-59b6-80c2-e4c494b7888f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.62.0.0/21",
      "pattern": "[ipv4-addr:value = '198.62.0.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--869d95ee-3373-5078-a722-5ff1201f5ab9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.57.64.0/20",
      "pattern": "[ipv4-addr:value = '198.57.64.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4e5833ab-7b1d-505b-977e-bcaf86688020",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.56.64.0/18",
      "pattern": "[ipv4-addr:value = '198.56.64.0/18']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5dd49931-2ef4-53dc-aefc-543beafdd6d4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.56.0.0/21",
      "pattern": "[ipv4-addr:value = '198.56.0.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8b73280f-848a-580a-a017-82a029672e58",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.54.232.0/24",
      "pattern": "[ipv4-addr:value = '198.54.232.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d54de91c-07e8-5d1a-8f3f-4f01ebd6cf68",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.51.80.0/23",
      "pattern": "[ipv4-addr:value = '198.51.80.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--81921641-3839-53cb-95ad-afe7d1098d21",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.51.78.0/23",
      "pattern": "[ipv4-addr:value = '198.51.78.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b42a4895-b726-5a26-a562-2d2f4ebe4136",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.51.77.0/24",
      "pattern": "[ipv4-addr:value = '198.51.77.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--228715e8-42af-5556-a24c-e415a4a0c3f0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.51.161.0/24",
      "pattern": "[ipv4-addr:value = '198.51.161.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--18d32c58-a0ab-58ec-a289-0ce665165ce3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.46.8.0/23",
      "pattern": "[ipv4-addr:value = '198.46.8.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e87b4776-869f-5060-90a2-161bed1328f1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.46.0.0/21",
      "pattern": "[ipv4-addr:value = '198.46.0.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0ada6e6c-ecdf-5f08-92e4-8c89f095d57a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.45.64.0/19",
      "pattern": "[ipv4-addr:value = '198.45.64.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b583bccc-09ed-588b-ba36-3ed775ed830a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.45.32.0/20",
      "pattern": "[ipv4-addr:value = '198.45.32.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ba3a022a-dd7d-5b12-a4d5-c3d214ff5df7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.41.4.0/22",
      "pattern": "[ipv4-addr:value = '198.41.4.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9a29f52a-9f2e-5d9d-b858-5943419d8a09",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.37.0.0/22",
      "pattern": "[ipv4-addr:value = '198.37.0.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a6f1a407-b9a7-54ab-855b-d51ff711047a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.252.32.0/19",
      "pattern": "[ipv4-addr:value = '198.252.32.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7ddc011c-8a4b-5f48-bcbf-a9b4bae47d3c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.252.174.0/24",
      "pattern": "[ipv4-addr:value = '198.252.174.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a6f1e9a1-b47b-59e6-9928-5500f39c2ab5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.246.162.0/24",
      "pattern": "[ipv4-addr:value = '198.246.162.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4d0fd9ad-f7a0-5e09-ba96-f5c63cc5914a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.244.46.0/24",
      "pattern": "[ipv4-addr:value = '198.244.46.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dcfa5565-5bd7-564d-b142-924d59a99369",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.244.44.0/23",
      "pattern": "[ipv4-addr:value = '198.244.44.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4ad677a0-40a2-5e2a-a69c-1409aa03b6e3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.244.40.0/22",
      "pattern": "[ipv4-addr:value = '198.244.40.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8ceb39ff-6a02-50c9-9e41-0c472a951cca",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.244.32.0/21",
      "pattern": "[ipv4-addr:value = '198.244.32.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6966721a-61c2-5437-b43f-3e08843a781f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.241.64.0/18",
      "pattern": "[ipv4-addr:value = '198.241.64.0/18']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--438863eb-861c-5c36-a94e-5bd961205aef",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.240.64.0/18",
      "pattern": "[ipv4-addr:value = '198.240.64.0/18']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9ccd692a-38a2-51dd-8a8e-57b84528fb1a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.235.160.0/20",
      "pattern": "[ipv4-addr:value = '198.235.160.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d122349d-443a-5eb4-b4d8-263010c30eb4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.212.132.0/24",
      "pattern": "[ipv4-addr:value = '198.212.132.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9922c753-37d3-532b-89c7-38182febcd03",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.206.140.0/24",
      "pattern": "[ipv4-addr:value = '198.206.140.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--26434e35-52aa-55cb-bdf4-e9c49ed41564",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.204.0.0/21",
      "pattern": "[ipv4-addr:value = '198.204.0.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fee4b503-1978-5f49-a411-bb26f7ce9b52",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.202.237.0/24",
      "pattern": "[ipv4-addr:value = '198.202.237.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--822e0682-ddef-5942-9111-04b542c7f042",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.202.223.0/24",
      "pattern": "[ipv4-addr:value = '198.202.223.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f738d535-f5a1-561a-818f-bdb2a64c356f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.200.8.0/23",
      "pattern": "[ipv4-addr:value = '198.200.8.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0a898232-b257-5643-a102-e50fb9339c8f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.200.0.0/21",
      "pattern": "[ipv4-addr:value = '198.200.0.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1af22e75-393c-5203-939a-2ce22ebb8d0c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.20.16.0/20",
      "pattern": "[ipv4-addr:value = '198.20.16.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--520c68dd-44a8-5adb-86c0-54447e573799",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.198.0.0/16",
      "pattern": "[ipv4-addr:value = '198.198.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dec7da04-d974-5717-bf70-8120cc28aa00",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.196.0.0/16",
      "pattern": "[ipv4-addr:value = '198.196.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7d9dd474-3f65-5c57-bb54-9a2018c4fc93",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.195.255.0/24",
      "pattern": "[ipv4-addr:value = '198.195.255.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4c0fd2d1-7c9b-5b0c-ae75-e622e517aaa2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.195.238.0/23",
      "pattern": "[ipv4-addr:value = '198.195.238.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fbcff46f-61f6-540b-ad00-60ad4ddbbe38",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.195.237.0/24",
      "pattern": "[ipv4-addr:value = '198.195.237.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c2ef186c-71e1-544a-acce-3969200a5b71",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.195.0.0/16",
      "pattern": "[ipv4-addr:value = '198.195.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0cc518ed-6357-5a9e-a07f-38ee34e876dc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.193.0.0/16",
      "pattern": "[ipv4-addr:value = '198.193.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--371c4f94-5dfe-50d4-9d58-d3b0bce07802",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.190.173.0/24",
      "pattern": "[ipv4-addr:value = '198.190.173.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4e375ae1-7b82-5647-8edb-50d8cc4d644c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.187.210.0/24",
      "pattern": "[ipv4-addr:value = '198.187.210.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0d99eb35-9b01-5520-b564-d425f9a2e2d0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.187.208.0/23",
      "pattern": "[ipv4-addr:value = '198.187.208.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c5445d7e-e5d4-53c6-9dca-67c41b4c44e7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.187.207.0/24",
      "pattern": "[ipv4-addr:value = '198.187.207.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0b6106a7-f9db-5755-bed1-c1e797245e76",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.187.192.0/24",
      "pattern": "[ipv4-addr:value = '198.187.192.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6030c4f9-bd41-5ec8-9256-a680f3b90ac5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.186.25.0/24",
      "pattern": "[ipv4-addr:value = '198.186.25.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2688f923-ffa3-51be-a5bf-0db083fc934a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.184.193.0/24",
      "pattern": "[ipv4-addr:value = '198.184.193.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--27b928cf-9281-5114-8a4d-d424743ed5cc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.183.32.0/19",
      "pattern": "[ipv4-addr:value = '198.183.32.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--367cacd6-cf57-544e-8e38-d4d753b9b54a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.183.238.0/24",
      "pattern": "[ipv4-addr:value = '198.183.238.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--25ac4ee6-2505-5518-a369-2c16795bbece",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.182.246.0/24",
      "pattern": "[ipv4-addr:value = '198.182.246.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--70ea3400-95c4-5033-93c4-d7b4c4106b92",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.181.0.0/22",
      "pattern": "[ipv4-addr:value = '198.181.0.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eb046f37-c4bb-5217-987d-ba1746d58c87",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.180.196.0/24",
      "pattern": "[ipv4-addr:value = '198.180.196.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f1343e21-8390-5993-8904-bf3a7d8240c2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.180.189.0/24",
      "pattern": "[ipv4-addr:value = '198.180.189.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bed7012e-b7f1-506e-88eb-fa84c0747208",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.179.22.0/24",
      "pattern": "[ipv4-addr:value = '198.179.22.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d5bb5302-858c-50e8-92cc-fd4ff6857e54",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.178.193.0/24",
      "pattern": "[ipv4-addr:value = '198.178.193.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e73cae8a-676a-5036-adbb-68f4feaf2e8d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.177.216.0/24",
      "pattern": "[ipv4-addr:value = '198.177.216.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bc9e89c9-3098-58a3-86fe-6d84c4c7c0f9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.177.214.0/24",
      "pattern": "[ipv4-addr:value = '198.177.214.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--de1f37af-163d-5bc0-9107-2881b467edef",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.177.180.0/24",
      "pattern": "[ipv4-addr:value = '198.177.180.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ca4cfe75-3578-5c9b-a752-05d31f960123",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.177.176.0/22",
      "pattern": "[ipv4-addr:value = '198.177.176.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bb9347ba-78c9-5eba-a940-0fcd103abf27",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.177.175.0/24",
      "pattern": "[ipv4-addr:value = '198.177.175.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--987db085-0835-56e7-87fc-b9c5670e5d7f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.17.78.0/24",
      "pattern": "[ipv4-addr:value = '198.17.78.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1da66fc4-8bd1-55c2-a42e-702d206203b2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.17.197.0/24",
      "pattern": "[ipv4-addr:value = '198.17.197.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--29497d6f-86ce-54f7-b941-94941baaa193",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.169.201.0/24",
      "pattern": "[ipv4-addr:value = '198.169.201.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8c033d7a-b38f-5264-aa2a-f6215759cfcf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.160.236.0/24",
      "pattern": "[ipv4-addr:value = '198.160.236.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--61bca890-753f-58bc-8951-1d27479dec35",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.160.232.0/22",
      "pattern": "[ipv4-addr:value = '198.160.232.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6a448776-fb6e-5bc5-bd79-bd6c45598226",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.160.231.0/24",
      "pattern": "[ipv4-addr:value = '198.160.231.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--46f175d6-315f-5975-922f-78bb496526f9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.160.216.0/24",
      "pattern": "[ipv4-addr:value = '198.160.216.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--de28728a-b494-5bb3-814a-48e182bfc541",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.160.212.0/22",
      "pattern": "[ipv4-addr:value = '198.160.212.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5feae2a7-005c-58a5-b588-abc754d11a05",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.160.205.0/24",
      "pattern": "[ipv4-addr:value = '198.160.205.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c64d725c-e580-5e7d-9512-4f81ecd53174",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.153.32.0/20",
      "pattern": "[ipv4-addr:value = '198.153.32.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e4c8b78d-ed1e-5731-9716-c297795ddee7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.153.0.0/21",
      "pattern": "[ipv4-addr:value = '198.153.0.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--96462e80-5729-5ba7-990e-b673c1659783",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.151.16.0/20",
      "pattern": "[ipv4-addr:value = '198.151.16.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1418d518-b9ba-5400-8c5d-1fff2cd06baa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.151.152.0/22",
      "pattern": "[ipv4-addr:value = '198.151.152.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--51036084-6eff-5223-ae37-653a465cd17f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.151.138.0/24",
      "pattern": "[ipv4-addr:value = '198.151.138.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b7a5714e-3f21-5ee8-87ed-07dc375f2675",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.148.212.0/24",
      "pattern": "[ipv4-addr:value = '198.148.212.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c15e55a8-46cc-5a7b-8152-93a9aba0bbfa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.140.157.0/24",
      "pattern": "[ipv4-addr:value = '198.140.157.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--387f0357-ef24-5a1f-a7ff-ce3f2c37a4dd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.137.160.0/24",
      "pattern": "[ipv4-addr:value = '198.137.160.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e64a6338-b388-538e-a47d-fb4dabfa4fd1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.136.189.0/24",
      "pattern": "[ipv4-addr:value = '198.136.189.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--01803530-add3-50d0-a256-a3bc92e051c7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.135.237.0/24",
      "pattern": "[ipv4-addr:value = '198.135.237.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--77bd38c6-3b3b-50bb-9908-407b8dfeab7d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.135.205.0/24",
      "pattern": "[ipv4-addr:value = '198.135.205.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6b4806d2-dcd9-5a15-8a7f-0a184687ac8b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.134.139.0/24",
      "pattern": "[ipv4-addr:value = '198.134.139.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c741e78e-466c-52de-94a4-292fe7daec5e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.133.88.0/22",
      "pattern": "[ipv4-addr:value = '198.133.88.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3cbb4b54-7ec6-5ddb-b2d0-e97c477da5d8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.133.120.0/24",
      "pattern": "[ipv4-addr:value = '198.133.120.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--566d7344-ada3-5073-a79f-438d7c0d401e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.13.72.0/23",
      "pattern": "[ipv4-addr:value = '198.13.72.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--921fbf75-e33a-5da0-bb44-e72c7236acfa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.13.64.0/21",
      "pattern": "[ipv4-addr:value = '198.13.64.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a62e89df-1344-5027-9901-5808769feca2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:198.102.222.0/24",
      "pattern": "[ipv4-addr:value = '198.102.222.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2ae7e502-dcd0-5319-8601-5aa88927df4d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:197.234.221.0/24",
      "pattern": "[ipv4-addr:value = '197.234.221.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a5a9d44e-c892-566f-bb96-c7057239fda9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:197.231.248.0/22",
      "pattern": "[ipv4-addr:value = '197.231.248.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--51e40643-c8a9-5947-99a3-a7cf25549615",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:197.11.156.0/24",
      "pattern": "[ipv4-addr:value = '197.11.156.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4c4d86c4-857d-5001-b378-86db4a2a2117",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:196.49.11.0/24",
      "pattern": "[ipv4-addr:value = '196.49.11.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b49d2dee-7af3-58e9-9e22-6e44bebbd21b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:196.251.98.0/23",
      "pattern": "[ipv4-addr:value = '196.251.98.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9d11c7be-507c-53b1-ac0d-dfbc5df748de",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:196.251.96.0/24",
      "pattern": "[ipv4-addr:value = '196.251.96.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f1b48388-892c-5a53-a514-f62aaa91769c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:196.251.92.0/24",
      "pattern": "[ipv4-addr:value = '196.251.92.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d23acb94-bf78-5d24-bb7c-1d1513cfd5d4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:196.251.92.0/22",
      "pattern": "[ipv4-addr:value = '196.251.92.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--27c7f925-d90d-5035-b259-6b0389ed31fa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:196.251.85.0/24",
      "pattern": "[ipv4-addr:value = '196.251.85.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aaaef65a-63f2-5620-97f3-3c6240aa44bf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:196.251.80.0/23",
      "pattern": "[ipv4-addr:value = '196.251.80.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b9a06347-6442-53c1-bf41-03fa0105acca",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:196.251.69.0/24",
      "pattern": "[ipv4-addr:value = '196.251.69.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eabe3ff3-7bac-5cce-b5b3-5c754ed21ad8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:196.251.66.0/23",
      "pattern": "[ipv4-addr:value = '196.251.66.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--64308f9f-a5ca-5c28-9d85-a6c3ee814907",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:196.251.65.0/24",
      "pattern": "[ipv4-addr:value = '196.251.65.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--43db0337-4354-5289-b899-68ae4ed33e96",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:196.251.122.0/24",
      "pattern": "[ipv4-addr:value = '196.251.122.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--430b6f26-0aca-5f0f-a5c7-a6d91a4824aa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:196.251.121.0/24",
      "pattern": "[ipv4-addr:value = '196.251.121.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ae0e4094-a7d2-53d8-a686-e4a6367e4f98",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:196.251.118.0/24",
      "pattern": "[ipv4-addr:value = '196.251.118.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--97009371-d676-53fa-bce5-3be3f6b26685",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:196.251.116.0/23",
      "pattern": "[ipv4-addr:value = '196.251.116.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7c61e12a-0678-507e-820a-3dd5365a2fe4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:196.251.112.0/22",
      "pattern": "[ipv4-addr:value = '196.251.112.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bf94ed0b-0524-518d-9aee-853e59443bf4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:196.251.107.0/24",
      "pattern": "[ipv4-addr:value = '196.251.107.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5fbe6e7f-0e07-57c7-b4f6-2e7e72194319",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:196.251.102.0/24",
      "pattern": "[ipv4-addr:value = '196.251.102.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5d90fe88-4517-524a-b330-561345a7f9fc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:196.251.100.0/24",
      "pattern": "[ipv4-addr:value = '196.251.100.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8595fcd7-2e79-59a3-b11d-ba28d669278c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:196.223.43.0/24",
      "pattern": "[ipv4-addr:value = '196.223.43.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--de81fef5-d9ab-5d09-a92a-5293c2cef048",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:196.216.1.0/24",
      "pattern": "[ipv4-addr:value = '196.216.1.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6ceaf9eb-b4fd-5e53-81e2-7b421a8d915b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:196.16.0.0/14",
      "pattern": "[ipv4-addr:value = '196.16.0.0/14']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--85c20fcb-e080-5b9e-a767-34fa8b459f22",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:196.15.64.0/18",
      "pattern": "[ipv4-addr:value = '196.15.64.0/18']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--833be389-7d6a-52a5-8afa-6c61049eb99c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:196.10.64.0/19",
      "pattern": "[ipv4-addr:value = '196.10.64.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4f65eeb1-2300-563c-be04-f77be1b37c2e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:196.10.62.0/23",
      "pattern": "[ipv4-addr:value = '196.10.62.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--827e8833-c2c6-524d-86cc-5ee6b6bb3b11",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:196.10.61.0/24",
      "pattern": "[ipv4-addr:value = '196.10.61.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ac68c581-cbbe-5d9b-b97a-124998ab1a07",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:195.96.32.0/19",
      "pattern": "[ipv4-addr:value = '195.96.32.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--716b5c15-c3f2-5fe7-a2c8-9c01e3e9143c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:195.24.237.0/24",
      "pattern": "[ipv4-addr:value = '195.24.237.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--04c0dab8-5fd2-5ae2-98ec-fcfdd6b2997e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:195.181.224.0/20",
      "pattern": "[ipv4-addr:value = '195.181.224.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9173bff1-2037-5258-9436-904575e96d96",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:195.178.148.0/23",
      "pattern": "[ipv4-addr:value = '195.178.148.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4bc23746-bd4e-57c3-a216-ec88823d92d1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:195.177.92.0/24",
      "pattern": "[ipv4-addr:value = '195.177.92.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--147591c4-cf9c-570b-aa41-73691345240d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:195.133.16.0/24",
      "pattern": "[ipv4-addr:value = '195.133.16.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--965c5acd-a2bb-5934-9747-b58197529425",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:194.85.250.0/24",
      "pattern": "[ipv4-addr:value = '194.85.250.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7914e11e-e9d3-52c1-b84c-564183fc70e1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:194.62.244.0/22",
      "pattern": "[ipv4-addr:value = '194.62.244.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1c67e0c7-cbc1-56de-ba9c-e795fec3d33e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:194.59.30.0/24",
      "pattern": "[ipv4-addr:value = '194.59.30.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--527f1ed6-26bf-52f9-a9a7-5d1915e584fc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:194.41.60.0/23",
      "pattern": "[ipv4-addr:value = '194.41.60.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f68c5e72-7bc0-5c57-9698-008bc1dc625f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:194.38.22.0/24",
      "pattern": "[ipv4-addr:value = '194.38.22.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--df91932e-0456-51e7-9627-1f1cba5e889d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:194.38.21.0/24",
      "pattern": "[ipv4-addr:value = '194.38.21.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d2698432-a2ca-5581-8312-0269d37c3c81",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:194.38.20.0/22",
      "pattern": "[ipv4-addr:value = '194.38.20.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dd737e62-39b2-53aa-a2cb-2d2006baadf0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:194.26.69.0/24",
      "pattern": "[ipv4-addr:value = '194.26.69.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0232667c-ff3d-5ef2-b332-269618604f06",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:194.26.29.0/24",
      "pattern": "[ipv4-addr:value = '194.26.29.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3c9ecd07-0a86-575e-ac03-9b748d5c4a48",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:194.26.192.0/24",
      "pattern": "[ipv4-addr:value = '194.26.192.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2442159c-f5c2-5279-9ac5-fbb622b70723",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:194.180.64.0/20",
      "pattern": "[ipv4-addr:value = '194.180.64.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--214ccabf-8869-5ce8-9ec7-8d2700f3b7d0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:194.11.246.0/24",
      "pattern": "[ipv4-addr:value = '194.11.246.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1824d6fb-7c96-507c-9f36-68f4adcaa36b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:194.102.227.0/24",
      "pattern": "[ipv4-addr:value = '194.102.227.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2391b400-9364-5c0d-93bb-12095eb0e61b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:194.0.234.0/24",
      "pattern": "[ipv4-addr:value = '194.0.234.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5e14a219-59a3-5994-bca6-9cd50933a14c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:193.46.255.0/24",
      "pattern": "[ipv4-addr:value = '193.46.255.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1871c73c-c23e-5518-a47e-64486a69d77b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:193.32.66.0/23",
      "pattern": "[ipv4-addr:value = '193.32.66.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e23a84c8-1223-5adc-923b-27c50359cdfa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:193.32.162.0/24",
      "pattern": "[ipv4-addr:value = '193.32.162.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8cbe079c-db15-54ea-b29c-0f38bf21ffbf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:193.30.241.0/24",
      "pattern": "[ipv4-addr:value = '193.30.241.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--38e20fc0-c340-55fa-b99a-5377a16b422b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:193.30.144.0/20",
      "pattern": "[ipv4-addr:value = '193.30.144.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bbc3ec10-30ea-5377-a46f-72f56f718bfb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:193.3.164.0/24",
      "pattern": "[ipv4-addr:value = '193.3.164.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ffa649ac-23b1-5239-8c4b-101f1a0da730",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:193.26.115.0/24",
      "pattern": "[ipv4-addr:value = '193.26.115.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0e3144db-44e8-5841-b040-83e58c3a282a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:193.243.0.0/17",
      "pattern": "[ipv4-addr:value = '193.243.0.0/17']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f2f3a975-1f57-5778-9606-a50cd7ff8803",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:193.242.153.0/24",
      "pattern": "[ipv4-addr:value = '193.242.153.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fbfdc4fb-6fe5-5940-80d0-d37901d5b969",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:193.24.123.0/24",
      "pattern": "[ipv4-addr:value = '193.24.123.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0d01c031-81cf-5bf2-a2c2-f1685835cf99",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:193.239.154.0/23",
      "pattern": "[ipv4-addr:value = '193.239.154.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--348f46d1-3fb6-509f-ae07-21a0c7187abd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:193.233.255.0/24",
      "pattern": "[ipv4-addr:value = '193.233.255.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cd1a0b2d-0220-50a9-ad78-ca01d65c5076",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:193.233.248.0/22",
      "pattern": "[ipv4-addr:value = '193.233.248.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c41abe9b-c0b8-57a1-b02c-d9fc32cc0475",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:193.233.200.0/24",
      "pattern": "[ipv4-addr:value = '193.233.200.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--60314f2e-3b4b-556c-bfb1-ccd9c9b86891",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:193.226.76.0/24",
      "pattern": "[ipv4-addr:value = '193.226.76.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--79d59987-5410-5012-81ab-802a0769d812",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:193.221.200.0/23",
      "pattern": "[ipv4-addr:value = '193.221.200.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e4d2bf0a-04ec-5b1f-b3d8-a39dd507bbf3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:193.202.82.0/23",
      "pattern": "[ipv4-addr:value = '193.202.82.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--73c4d084-7f43-5e39-9aff-e2516e16cd78",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:193.178.158.0/24",
      "pattern": "[ipv4-addr:value = '193.178.158.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3d902703-f647-5e5b-bcbe-25b8a97887ce",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:193.169.194.0/23",
      "pattern": "[ipv4-addr:value = '193.169.194.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--575ddc38-4b41-5457-9a09-b4b4f658675c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:193.143.1.0/24",
      "pattern": "[ipv4-addr:value = '193.143.1.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--14d06aa4-ae30-50a9-b64c-d47c782eb1c9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:193.142.146.0/23",
      "pattern": "[ipv4-addr:value = '193.142.146.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--80a29618-6663-597e-ad73-5da11c4816be",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:193.139.0.0/16",
      "pattern": "[ipv4-addr:value = '193.139.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2e91075f-0926-58d3-8958-e841b785d1a2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.96.87.0/24",
      "pattern": "[ipv4-addr:value = '192.96.87.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--978f1e40-7bf9-5a42-a9b0-7d5b13beaa2f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.96.146.0/24",
      "pattern": "[ipv4-addr:value = '192.96.146.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8aabf2cb-301e-5b7f-a0cd-a1e36e13c67f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.94.240.0/24",
      "pattern": "[ipv4-addr:value = '192.94.240.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c2445921-2b6b-5568-9943-36d06deaeaf1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.94.211.0/24",
      "pattern": "[ipv4-addr:value = '192.94.211.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--08fc643f-4a41-532f-81cf-6254d82989ec",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.88.133.0/24",
      "pattern": "[ipv4-addr:value = '192.88.133.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--89d9813d-8f79-5916-a843-e4d56c733d52",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.88.131.0/24",
      "pattern": "[ipv4-addr:value = '192.88.131.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--645d972c-fbc1-5647-9c29-421137b076ad",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.88.130.0/24",
      "pattern": "[ipv4-addr:value = '192.88.130.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--20a65dc4-028b-5d29-909e-da88f6174d0f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.88.129.0/24",
      "pattern": "[ipv4-addr:value = '192.88.129.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ff4cfb66-4ae9-535c-b69b-e9d3126b86a2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.88.128.0/24",
      "pattern": "[ipv4-addr:value = '192.88.128.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b56886c2-0fe2-5e92-bde1-f91d20cc55b6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.88.122.0/24",
      "pattern": "[ipv4-addr:value = '192.88.122.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e9dd7925-1e60-51a1-8689-abf77e5e1eb9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.88.120.0/24",
      "pattern": "[ipv4-addr:value = '192.88.120.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8e52dac3-aa1a-5e86-9b70-a622f4fc8e87",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.88.118.0/24",
      "pattern": "[ipv4-addr:value = '192.88.118.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1592c902-4114-53cd-af26-fc564ef3265e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.88.117.0/24",
      "pattern": "[ipv4-addr:value = '192.88.117.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d57452d7-cb7e-5023-a40b-ff301dec92c2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.88.104.0/24",
      "pattern": "[ipv4-addr:value = '192.88.104.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--97c566e9-c263-59cd-b469-bc50d90e5d19",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.80.44.0/24",
      "pattern": "[ipv4-addr:value = '192.80.44.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2581dbe6-972a-52f5-9acc-361adac87687",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.73.17.0/24",
      "pattern": "[ipv4-addr:value = '192.73.17.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1b2cea3a-dba9-5864-86b0-c1c0b5a46b06",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.65.202.0/24",
      "pattern": "[ipv4-addr:value = '192.65.202.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0d919116-f680-5f48-b14a-0f16939bdc69",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.54.110.0/24",
      "pattern": "[ipv4-addr:value = '192.54.110.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6880c5e5-9e4f-5576-a7f5-363693ac5fc5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.5.56.0/24",
      "pattern": "[ipv4-addr:value = '192.5.56.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5347d303-9965-5147-8c49-71592566f4e2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.5.103.0/24",
      "pattern": "[ipv4-addr:value = '192.5.103.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ee72b589-267a-5abf-bc0a-cffea91df5c6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.42.146.0/24",
      "pattern": "[ipv4-addr:value = '192.42.146.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b29651b5-9d31-5316-855f-0167f7d5a35a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.40.29.0/24",
      "pattern": "[ipv4-addr:value = '192.40.29.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cf365d6e-4066-5ac2-ae7b-d1f085002bb7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.35.54.0/24",
      "pattern": "[ipv4-addr:value = '192.35.54.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cb68271f-3aaa-5c8d-bc65-6c785b535464",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.35.52.0/23",
      "pattern": "[ipv4-addr:value = '192.35.52.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a09875c7-350e-5edf-9f23-ad2867b4c200",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.34.90.0/24",
      "pattern": "[ipv4-addr:value = '192.34.90.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2c14e0ae-3f4c-5df0-b9b3-3a55f5754de0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.253.248.0/24",
      "pattern": "[ipv4-addr:value = '192.253.248.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--30517612-e32c-5402-ab32-977ab20cd803",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.252.176.0/20",
      "pattern": "[ipv4-addr:value = '192.252.176.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--62e6cd33-7c8e-5360-9759-bf4fdfd0b9ba",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.252.16.0/20",
      "pattern": "[ipv4-addr:value = '192.252.16.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--895e6ba3-1a57-510a-8b67-f6841e2df62e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.251.231.0/24",
      "pattern": "[ipv4-addr:value = '192.251.231.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f673f1a9-8431-549b-8da8-fca1f0d0d5b8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.245.188.0/24",
      "pattern": "[ipv4-addr:value = '192.245.188.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--68d18f3c-e28d-587b-a91d-ee861ecf4ac1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.245.101.0/24",
      "pattern": "[ipv4-addr:value = '192.245.101.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d992c02d-a205-5c4a-96c3-2ea103a3df86",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.234.55.0/24",
      "pattern": "[ipv4-addr:value = '192.234.55.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--20c9730e-9f50-5d95-b9bd-05b6f5cb9d35",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.234.220.0/24",
      "pattern": "[ipv4-addr:value = '192.234.220.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c20cb31a-9e95-5ad7-bd58-85c27b9fd214",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.234.189.0/24",
      "pattern": "[ipv4-addr:value = '192.234.189.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1eea53d4-9f07-5601-aeff-016d8ee538e2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.234.156.0/24",
      "pattern": "[ipv4-addr:value = '192.234.156.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ed2c968e-2da7-5842-b26d-5bdb2526a353",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.231.66.0/24",
      "pattern": "[ipv4-addr:value = '192.231.66.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--73b01677-0e5c-52b8-bade-919e00ba36f8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.231.165.0/24",
      "pattern": "[ipv4-addr:value = '192.231.165.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fa24ebba-ffc5-5b6c-b469-f19248b3a045",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.231.100.0/24",
      "pattern": "[ipv4-addr:value = '192.231.100.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--86c2e89e-85cc-5e66-90bb-95aa437158b2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.229.32.0/19",
      "pattern": "[ipv4-addr:value = '192.229.32.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--535c530e-4a39-563f-add3-7f72e5d92579",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.226.16.0/20",
      "pattern": "[ipv4-addr:value = '192.226.16.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--02aaa2d5-4a59-5e35-98f2-02fa5f94bc2d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.207.169.0/24",
      "pattern": "[ipv4-addr:value = '192.207.169.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b02cc451-bf09-5bfd-b271-ebde802c95fe",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.206.114.0/24",
      "pattern": "[ipv4-addr:value = '192.206.114.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--51be85d7-2aa9-55ce-9015-ef4422c8f083",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.203.252.0/24",
      "pattern": "[ipv4-addr:value = '192.203.252.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a61cd641-4335-5bcc-869e-1b6db1fffb14",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.203.188.0/24",
      "pattern": "[ipv4-addr:value = '192.203.188.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9b15e85e-0f40-56c9-b580-c56f537ea4af",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.195.187.0/24",
      "pattern": "[ipv4-addr:value = '192.195.187.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ffbc637b-a097-52b9-b29a-2f6b17c5b0b3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.195.150.0/24",
      "pattern": "[ipv4-addr:value = '192.195.150.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d3251318-6179-5f5f-9436-6a2c3210160a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.190.97.0/24",
      "pattern": "[ipv4-addr:value = '192.190.97.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--90e4c712-87c0-541f-be6c-16aafc18771d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.162.199.0/24",
      "pattern": "[ipv4-addr:value = '192.162.199.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5738de19-cb8b-5132-94ec-33d1b4eea6c8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.160.44.0/24",
      "pattern": "[ipv4-addr:value = '192.160.44.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ae40d700-c615-5ea1-a9cf-3b00652d9609",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.159.99.0/24",
      "pattern": "[ipv4-addr:value = '192.159.99.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d4602137-a392-5212-bf24-6c543d2aff73",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.154.11.0/24",
      "pattern": "[ipv4-addr:value = '192.154.11.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9c71ac87-eb2f-598c-b079-06e5702dda40",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.153.55.0/24",
      "pattern": "[ipv4-addr:value = '192.153.55.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0a9f9f78-8077-5e5d-8f44-f34ec6e3ea84",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.152.194.0/24",
      "pattern": "[ipv4-addr:value = '192.152.194.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cc874d53-bdbd-5203-9952-de6ccbfaa950",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.150.239.0/24",
      "pattern": "[ipv4-addr:value = '192.150.239.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--492b0aa6-9a7c-5eca-99dd-b4d510f86c4c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.147.254.0/24",
      "pattern": "[ipv4-addr:value = '192.147.254.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c2469135-0cee-507f-a27b-22a7edd91e01",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.139.74.0/24",
      "pattern": "[ipv4-addr:value = '192.139.74.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--34eb6efb-05bb-545d-8611-72a7cef36f1e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.133.3.0/24",
      "pattern": "[ipv4-addr:value = '192.133.3.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--199909e9-d08f-57c8-9eca-d3d50d2f1763",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.132.100.0/24",
      "pattern": "[ipv4-addr:value = '192.132.100.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1b18f545-47ea-5a0c-9fb4-3dd75360bfe6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.124.123.0/24",
      "pattern": "[ipv4-addr:value = '192.124.123.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b74bea20-d4ee-5085-bddf-e0523708e512",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.119.173.0/24",
      "pattern": "[ipv4-addr:value = '192.119.173.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--78313f3c-5fc1-5c72-9aa4-16fbc8580200",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.119.167.0/24",
      "pattern": "[ipv4-addr:value = '192.119.167.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fe960dce-8002-5480-949c-065448bb1c54",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.111.228.0/24",
      "pattern": "[ipv4-addr:value = '192.111.228.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aae92315-aa9f-5270-bebb-ff3729c29749",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.109.200.0/24",
      "pattern": "[ipv4-addr:value = '192.109.200.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4664a212-15c9-5baf-8180-3e7b0b4c60b7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.109.138.0/24",
      "pattern": "[ipv4-addr:value = '192.109.138.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--52d28709-774f-532c-bd39-26ebc71d03c9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.108.0.0/24",
      "pattern": "[ipv4-addr:value = '192.108.0.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f59491e3-6e9a-5480-9097-f3453d39bbb1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.104.73.0/24",
      "pattern": "[ipv4-addr:value = '192.104.73.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--15b0bdca-3ae8-5fe3-8f8a-29f5217f98a6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.101.44.0/24",
      "pattern": "[ipv4-addr:value = '192.101.44.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a2764542-9a7c-5716-9082-c28d85f6b13f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.101.248.0/23",
      "pattern": "[ipv4-addr:value = '192.101.248.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--913176cf-e998-5f2e-afad-d980ab58252e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.101.240.0/21",
      "pattern": "[ipv4-addr:value = '192.101.240.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dee75450-20ca-5a95-adf3-2ee02a4f644c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.101.224.0/20",
      "pattern": "[ipv4-addr:value = '192.101.224.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--344a88db-7e59-552a-b98e-f997a72c9f48",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.101.208.0/20",
      "pattern": "[ipv4-addr:value = '192.101.208.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dec030fa-8372-5c34-81ab-1969ff22ab20",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.101.187.0/24",
      "pattern": "[ipv4-addr:value = '192.101.187.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7d3cb4f5-6aac-5116-a8b7-822f105b9c3f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.101.181.0/24",
      "pattern": "[ipv4-addr:value = '192.101.181.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e8c51fb3-2ccc-5569-b313-4d88ea6e17cd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:192.100.88.0/24",
      "pattern": "[ipv4-addr:value = '192.100.88.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c2daf799-5717-5a8c-9d2d-46047ab15df7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:191.101.31.0/24",
      "pattern": "[ipv4-addr:value = '191.101.31.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f69ca342-24af-51b6-9075-56c0bd093703",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:190.196.253.0/24",
      "pattern": "[ipv4-addr:value = '190.196.253.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2eecf92b-9dbe-557f-95d0-4d87532cc981",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:190.185.108.0/22",
      "pattern": "[ipv4-addr:value = '190.185.108.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--847e5bd6-4982-5c8e-afbc-35648c842d66",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:190.168.192.0/18",
      "pattern": "[ipv4-addr:value = '190.168.192.0/18']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3c5530a1-002d-57ec-8a40-a36ce409eeda",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:190.168.128.0/18",
      "pattern": "[ipv4-addr:value = '190.168.128.0/18']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f58375af-7123-5517-931d-9ddb7e291689",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:19.200.0.0/16",
      "pattern": "[ipv4-addr:value = '19.200.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3ffdd8d4-0381-5f9c-8642-b7cc0555d37d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:188.247.230.0/24",
      "pattern": "[ipv4-addr:value = '188.247.230.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--838bcd53-dd89-5c32-97e9-653f68bc287b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:188.241.177.0/24",
      "pattern": "[ipv4-addr:value = '188.241.177.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ca7d3a2a-c298-5080-b94b-2b03071045aa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:188.240.14.0/24",
      "pattern": "[ipv4-addr:value = '188.240.14.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5e3c6509-c7f8-54f2-a206-1a03e4242d9a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:188.215.72.0/23",
      "pattern": "[ipv4-addr:value = '188.215.72.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8b75521f-4c3d-54f7-b12d-d36a5ba7907c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:188.214.193.0/24",
      "pattern": "[ipv4-addr:value = '188.214.193.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--32be0de9-00a0-5fd7-ac56-cfae709c45d4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:188.214.155.0/24",
      "pattern": "[ipv4-addr:value = '188.214.155.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b63777f7-38b9-54cb-922a-8255d85f6a2a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:188.214.140.0/24",
      "pattern": "[ipv4-addr:value = '188.214.140.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--23800d13-aeac-5a7e-b149-6743455008e8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:188.213.252.0/22",
      "pattern": "[ipv4-addr:value = '188.213.252.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4cfdebd6-ff94-53fe-95b8-932c235d575f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:188.213.248.0/22",
      "pattern": "[ipv4-addr:value = '188.213.248.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c3ecfec3-ae65-52d0-a350-9eef3003b750",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:188.213.23.0/24",
      "pattern": "[ipv4-addr:value = '188.213.23.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b926c9dc-fa4b-5cbe-874e-6ff59faec9f0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:188.213.214.0/23",
      "pattern": "[ipv4-addr:value = '188.213.214.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f7a0ec85-d43d-508a-88e3-07fc483418c5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:188.213.206.0/23",
      "pattern": "[ipv4-addr:value = '188.213.206.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--10fbbc6b-1dcb-507c-8f91-dad354a22c72",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:188.208.52.0/22",
      "pattern": "[ipv4-addr:value = '188.208.52.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9c23060a-9023-5ddd-aef6-d4699ac2d4f7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:188.208.48.0/22",
      "pattern": "[ipv4-addr:value = '188.208.48.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--799c1b8e-4e23-5619-8ccd-cb32abcaf17d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:188.172.160.0/20",
      "pattern": "[ipv4-addr:value = '188.172.160.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8c371128-357b-5a62-a271-cbead58919cc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:188.124.50.0/24",
      "pattern": "[ipv4-addr:value = '188.124.50.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c24be4ab-261d-5fd5-b776-382f01fc33fd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:187.19.64.0/20",
      "pattern": "[ipv4-addr:value = '187.19.64.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3b8d5301-716d-5d75-8343-8b69b5426089",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:186.65.112.0/20",
      "pattern": "[ipv4-addr:value = '186.65.112.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7ab750bc-b0b8-5938-949a-22e68d66b3e5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:186.179.0.0/18",
      "pattern": "[ipv4-addr:value = '186.179.0.0/18']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2f2a7d15-26c4-58eb-9aa6-6a8ef2065d81",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.99.98.0/24",
      "pattern": "[ipv4-addr:value = '185.99.98.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cf08c0c5-7081-5722-8c5b-254ccc21e5c1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.93.89.0/24",
      "pattern": "[ipv4-addr:value = '185.93.89.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e84ba4a5-f818-56fc-92ff-819154aca9c5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.84.157.0/24",
      "pattern": "[ipv4-addr:value = '185.84.157.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e74e6ff1-ed2a-5df7-a76d-ce25e43606e1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.81.68.0/24",
      "pattern": "[ipv4-addr:value = '185.81.68.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--96effefc-e267-5956-b733-3fadb1699d36",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.7.215.0/24",
      "pattern": "[ipv4-addr:value = '185.7.215.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--02871ef4-671c-5aaf-a76e-3d28563181c4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.7.214.0/24",
      "pattern": "[ipv4-addr:value = '185.7.214.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a62ebc47-9412-5d90-8294-19f870291781",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.68.152.0/22",
      "pattern": "[ipv4-addr:value = '185.68.152.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d1e84ec3-3d21-5ce8-8375-781252074552",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.64.23.0/24",
      "pattern": "[ipv4-addr:value = '185.64.23.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--edda02df-b478-5900-b413-6cdc69ae1fc2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.56.83.0/24",
      "pattern": "[ipv4-addr:value = '185.56.83.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--90059dd9-5f35-5047-b2f6-f27e63248c73",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.42.164.0/24",
      "pattern": "[ipv4-addr:value = '185.42.164.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fede770c-b098-5c1d-b1df-b6b3f5f92ce2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.37.195.0/24",
      "pattern": "[ipv4-addr:value = '185.37.195.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d8ebebcf-ae6e-55bc-8f77-3e365f550a80",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.36.82.0/23",
      "pattern": "[ipv4-addr:value = '185.36.82.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--68c788f6-ab9c-53d8-acea-e9725ac0096f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.36.81.0/24",
      "pattern": "[ipv4-addr:value = '185.36.81.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--736f2eff-6063-59aa-84c8-824fed48042c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.36.80.0/24",
      "pattern": "[ipv4-addr:value = '185.36.80.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f89ecf90-bc08-5b9e-a534-9566989468fd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.34.147.0/24",
      "pattern": "[ipv4-addr:value = '185.34.147.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e3a77332-a558-567f-a220-fbd75151b838",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.30.168.0/22",
      "pattern": "[ipv4-addr:value = '185.30.168.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--343df00d-a37b-5659-883a-c0dc326a4bc2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.30.160.0/23",
      "pattern": "[ipv4-addr:value = '185.30.160.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fe317f5f-e2f9-57a3-8c2f-6c0f09f37352",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.255.20.0/22",
      "pattern": "[ipv4-addr:value = '185.255.20.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6b0a5073-7a92-5abe-b98d-7e50bb32f97a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.255.192.0/22",
      "pattern": "[ipv4-addr:value = '185.255.192.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--94954f6e-e748-5d4f-8c7b-1be2c93694e3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.245.62.0/23",
      "pattern": "[ipv4-addr:value = '185.245.62.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--02f647c7-e2d9-5a7b-bc5f-fd0f93b7b8e4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.244.249.0/24",
      "pattern": "[ipv4-addr:value = '185.244.249.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b8ccc472-86ab-52eb-9555-8df1474fa631",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.243.96.0/24",
      "pattern": "[ipv4-addr:value = '185.243.96.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7d81bbc1-a0f6-594c-9a1f-a20b05f2eff4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.242.3.0/24",
      "pattern": "[ipv4-addr:value = '185.242.3.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dc167b4d-fd39-54e8-bd54-abfb9dad8d46",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.241.211.0/24",
      "pattern": "[ipv4-addr:value = '185.241.211.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d669d046-086e-5751-bae6-ad9743573591",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.241.208.0/24",
      "pattern": "[ipv4-addr:value = '185.241.208.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--78a0b5ca-d504-5b92-b166-988cf7de741e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.239.84.0/22",
      "pattern": "[ipv4-addr:value = '185.239.84.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--114615a3-1535-5c47-94b3-a64eca7127d4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.239.44.0/22",
      "pattern": "[ipv4-addr:value = '185.239.44.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--41046187-f14a-5c46-b94b-893b6753774d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.238.176.0/22",
      "pattern": "[ipv4-addr:value = '185.238.176.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--347133d0-9e37-5b28-b15b-03c91fab0d40",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.237.104.0/24",
      "pattern": "[ipv4-addr:value = '185.237.104.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e1e28bb3-0206-5fed-9b13-a8ee0075364a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.232.45.0/24",
      "pattern": "[ipv4-addr:value = '185.232.45.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--31ed106e-0db9-5bb4-ba7d-ed3143e8e4ae",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.230.14.0/24",
      "pattern": "[ipv4-addr:value = '185.230.14.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2f6af63e-8654-598c-b87f-cbcce472f0e6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.218.16.0/24",
      "pattern": "[ipv4-addr:value = '185.218.16.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b3d01af5-f0e0-5cf9-8daf-d33624794883",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.215.247.0/24",
      "pattern": "[ipv4-addr:value = '185.215.247.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--be0ced48-3ed7-5ad7-821d-f23af378e3d2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.215.132.0/22",
      "pattern": "[ipv4-addr:value = '185.215.132.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9e3a3faa-8dc7-5200-9ade-9653c2840f77",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.212.240.0/22",
      "pattern": "[ipv4-addr:value = '185.212.240.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--51372b03-c190-5fa6-879f-423305e1125f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.192.36.0/22",
      "pattern": "[ipv4-addr:value = '185.192.36.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f64d94fb-58b9-53f1-b047-3acaa9abe416",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.192.103.0/24",
      "pattern": "[ipv4-addr:value = '185.192.103.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9efe8687-c85e-542b-95ca-1a2f6fd5d10a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.192.100.0/23",
      "pattern": "[ipv4-addr:value = '185.192.100.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c18dddc0-adfd-588d-b5f0-78fee464b295",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.19.40.0/24",
      "pattern": "[ipv4-addr:value = '185.19.40.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--662d76e8-fd7a-5f81-a0c6-fe40e201e164",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.189.73.0/24",
      "pattern": "[ipv4-addr:value = '185.189.73.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--14c4aabf-86ea-5f7d-a043-2fb40c2800b6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.177.239.0/24",
      "pattern": "[ipv4-addr:value = '185.177.239.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cdb0f351-2915-52b5-bab4-759ad912ec7f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.169.4.0/24",
      "pattern": "[ipv4-addr:value = '185.169.4.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8fe3f0af-3667-5f60-80d6-cf88bbb12212",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.166.92.0/24",
      "pattern": "[ipv4-addr:value = '185.166.92.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f62b30cf-d555-5686-b198-944fd9b5e69c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.161.148.0/22",
      "pattern": "[ipv4-addr:value = '185.161.148.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--10809bad-5f88-547a-ac93-43b71d5c7a44",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.148.240.0/22",
      "pattern": "[ipv4-addr:value = '185.148.240.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--91ea2bb6-62ab-5996-89dd-de8c794ee3cf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.144.180.0/22",
      "pattern": "[ipv4-addr:value = '185.144.180.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--08a2f2c5-fbe1-5988-ba62-afb2900ddf4e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.14.192.0/24",
      "pattern": "[ipv4-addr:value = '185.14.192.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--34227cb7-e02a-5d37-8e71-19ff149d063e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.137.98.0/24",
      "pattern": "[ipv4-addr:value = '185.137.98.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b4c3bd67-12bc-511b-a748-c4f041da5b42",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.134.48.0/22",
      "pattern": "[ipv4-addr:value = '185.134.48.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f30c4af8-b945-582b-bb34-5b38379b774d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.132.8.0/22",
      "pattern": "[ipv4-addr:value = '185.132.8.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--191f7aee-3d84-569d-bdba-d454ddaf4f06",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.132.53.0/24",
      "pattern": "[ipv4-addr:value = '185.132.53.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--07cd5f0a-7739-5e6a-ab35-2599dfd6bac2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.130.36.0/22",
      "pattern": "[ipv4-addr:value = '185.130.36.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7566eaa0-c746-5bd3-a4eb-aa18eb3169d5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.129.8.0/22",
      "pattern": "[ipv4-addr:value = '185.129.8.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a875dc3b-c823-59e1-84e4-bcb5fdddbab0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.129.208.0/22",
      "pattern": "[ipv4-addr:value = '185.129.208.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a76e61bd-272d-51cf-99b0-384cdc1ed769",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.127.76.0/22",
      "pattern": "[ipv4-addr:value = '185.127.76.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--29538c43-1dcb-5f6b-9ada-d55cbcb14209",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.127.68.0/22",
      "pattern": "[ipv4-addr:value = '185.127.68.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--70187e18-0ca2-5bbe-afdb-fa1229ec5ff1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.127.56.0/22",
      "pattern": "[ipv4-addr:value = '185.127.56.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--926d94cc-e220-51db-8da2-0f4e66052154",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.127.44.0/22",
      "pattern": "[ipv4-addr:value = '185.127.44.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bde190ef-78fb-59fa-8305-3910deb30ce7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.122.128.0/22",
      "pattern": "[ipv4-addr:value = '185.122.128.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--71874d41-da67-536b-b926-51970ddcca7b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.120.8.0/22",
      "pattern": "[ipv4-addr:value = '185.120.8.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bd4822d3-f2bd-5f0c-8453-f4eca79b660f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.116.175.0/24",
      "pattern": "[ipv4-addr:value = '185.116.175.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9fa35f00-ed7c-5094-a56e-8c2249ce9bc7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.116.172.0/23",
      "pattern": "[ipv4-addr:value = '185.116.172.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8b70a5ea-441c-5b7b-828c-458aeea6f991",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.110.0.0/22",
      "pattern": "[ipv4-addr:value = '185.110.0.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--14d8405f-865e-58fe-a1e2-de56fab24869",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.11.61.0/24",
      "pattern": "[ipv4-addr:value = '185.11.61.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a7e32c3a-ed67-5141-a79f-cc8f1e7109ea",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.102.115.0/24",
      "pattern": "[ipv4-addr:value = '185.102.115.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b648670d-db80-5ebf-b708-911a274690b4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.100.157.0/24",
      "pattern": "[ipv4-addr:value = '185.100.157.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c38106be-2991-502a-acff-443af2321767",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:185.100.120.0/22",
      "pattern": "[ipv4-addr:value = '185.100.120.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c1c434b9-87ab-5a3f-ae14-72cb5780ce92",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:182.237.0.0/22",
      "pattern": "[ipv4-addr:value = '182.237.0.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ebec4ef2-e35f-5f63-a8de-75211d02bb7d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:181.232.172.0/23",
      "pattern": "[ipv4-addr:value = '181.232.172.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1a829ff2-0db6-53e0-8122-d8abc910d110",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:181.214.147.0/24",
      "pattern": "[ipv4-addr:value = '181.214.147.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ec7a6adc-377e-5d5d-9c9b-d7567e344fa4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:181.177.64.0/18",
      "pattern": "[ipv4-addr:value = '181.177.64.0/18']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4def767f-9165-58ae-a2e8-4fcf158e8c21",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:180.235.124.0/22",
      "pattern": "[ipv4-addr:value = '180.235.124.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--40b1f4cd-0d72-5fd0-a929-131ea89905fb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:180.222.32.0/19",
      "pattern": "[ipv4-addr:value = '180.222.32.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cc3afd26-b93e-52da-b5d5-93e8bc7badc4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:180.178.192.0/18",
      "pattern": "[ipv4-addr:value = '180.178.192.0/18']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--57745c03-5bea-561c-b776-cc3b24ee4ddb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:180.178.180.0/24",
      "pattern": "[ipv4-addr:value = '180.178.180.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--328056cd-2076-55ee-9d2d-0527a4fb10c2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:179.43.175.0/24",
      "pattern": "[ipv4-addr:value = '179.43.175.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--77bb6400-2a42-5088-a9bd-4468e1713c6c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:178.236.252.0/24",
      "pattern": "[ipv4-addr:value = '178.236.252.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2fa4920e-e4bf-557f-be95-a0f5367b4192",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:178.16.52.0/22",
      "pattern": "[ipv4-addr:value = '178.16.52.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--00ceb3b5-c4e8-51b7-8066-7bb56bd14c21",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:177.234.136.0/21",
      "pattern": "[ipv4-addr:value = '177.234.136.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--45bdb1e0-d062-57f0-aad9-23c736ac9edc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:176.98.187.0/24",
      "pattern": "[ipv4-addr:value = '176.98.187.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ac7b4fdb-499b-550c-9b32-181751ce53f2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:176.65.149.0/24",
      "pattern": "[ipv4-addr:value = '176.65.149.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--574a36e8-4458-5c3c-8d23-f3a781bc750c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:176.65.148.0/22",
      "pattern": "[ipv4-addr:value = '176.65.148.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0e8ceab0-577b-5636-84db-da460e01cc43",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:176.65.139.0/24",
      "pattern": "[ipv4-addr:value = '176.65.139.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--41e71253-268a-5023-b43f-0b78c508b535",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:176.65.134.0/24",
      "pattern": "[ipv4-addr:value = '176.65.134.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8cc5ee0a-aea7-515a-9b43-79e4286ce1b0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:176.65.132.0/24",
      "pattern": "[ipv4-addr:value = '176.65.132.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f4ca53ed-d941-5587-b058-599f6d0f7108",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:176.223.118.0/24",
      "pattern": "[ipv4-addr:value = '176.223.118.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1c27b17a-8dde-568a-bc6d-1d443f864f7b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:176.223.116.0/23",
      "pattern": "[ipv4-addr:value = '176.223.116.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6e0f3308-088f-5d5c-99f5-8322ce10e862",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:176.126.194.0/24",
      "pattern": "[ipv4-addr:value = '176.126.194.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--83250d79-1245-5c28-8379-e23ffb71f38e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:176.126.192.0/23",
      "pattern": "[ipv4-addr:value = '176.126.192.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fb8bf38d-61d8-58c2-9a7e-3708649092bf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:176.120.22.0/24",
      "pattern": "[ipv4-addr:value = '176.120.22.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1c0fb019-480a-524c-8db1-9731de4dd796",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:175.103.64.0/18",
      "pattern": "[ipv4-addr:value = '175.103.64.0/18']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9b65d2fe-8fcb-5e67-b63c-aa8e6f805368",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:173.44.0.0/19",
      "pattern": "[ipv4-addr:value = '173.44.0.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0eedc4cd-af8d-55e8-8e58-410c46a08502",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:173.244.55.0/24",
      "pattern": "[ipv4-addr:value = '173.244.55.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f3c8baaa-98b4-5f68-9c9a-d4684c10b4f2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:173.239.224.0/24",
      "pattern": "[ipv4-addr:value = '173.239.224.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--68be048d-f9fe-5ea9-9289-158c43ad1d58",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:173.239.214.0/24",
      "pattern": "[ipv4-addr:value = '173.239.214.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5f4f1c42-e816-500f-9dbf-93b226a839dd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:172.94.9.0/24",
      "pattern": "[ipv4-addr:value = '172.94.9.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9af03719-87cb-5100-853d-175165aab995",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:172.247.38.0/24",
      "pattern": "[ipv4-addr:value = '172.247.38.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9589a13c-86ab-5b13-8c89-d9f2eeaac4db",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:172.111.128.0/17",
      "pattern": "[ipv4-addr:value = '172.111.128.0/17']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f9b5e84d-ab32-5a6f-a1b9-a70b2cb4a383",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:171.26.0.0/16",
      "pattern": "[ipv4-addr:value = '171.26.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d0140ab3-bb8c-500c-87da-6fa80ce01498",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:170.83.232.0/22",
      "pattern": "[ipv4-addr:value = '170.83.232.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b0bed120-5d91-5878-9e99-7d04af75d990",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:170.67.0.0/16",
      "pattern": "[ipv4-addr:value = '170.67.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aec991f1-b41d-5a5e-9825-07712590f3bd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:170.247.220.0/22",
      "pattern": "[ipv4-addr:value = '170.247.220.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2f2b5f5c-d479-598e-b6d4-97797a72ff45",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:170.179.0.0/16",
      "pattern": "[ipv4-addr:value = '170.179.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--929f8a69-3378-555e-8dc1-ca9cc0ae9964",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:170.130.43.0/24",
      "pattern": "[ipv4-addr:value = '170.130.43.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1baf5f46-8672-52bb-b29b-c1d12a52e541",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:170.130.10.0/23",
      "pattern": "[ipv4-addr:value = '170.130.10.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--43ee5c4b-5bfd-5f42-be9c-b22a5c65111a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:170.113.0.0/16",
      "pattern": "[ipv4-addr:value = '170.113.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--23b80c1b-5646-5749-8227-3b1856d6181b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:169.40.135.0/24",
      "pattern": "[ipv4-addr:value = '169.40.135.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--796c6999-b5dc-5579-b613-f0ffaed9b955",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:169.136.224.0/19",
      "pattern": "[ipv4-addr:value = '169.136.224.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--caa14fa9-fa56-5f92-9430-289bf87b93c4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:169.129.0.0/16",
      "pattern": "[ipv4-addr:value = '169.129.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fe34996b-94ea-5869-805d-e31318a79fa1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:168.80.0.0/15",
      "pattern": "[ipv4-addr:value = '168.80.0.0/15']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--82ad843e-48f9-5541-9815-b4fd6d34a769",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:168.64.0.0/16",
      "pattern": "[ipv4-addr:value = '168.64.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--76679230-a1be-5160-a008-b6904c5f65d5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:168.227.140.0/22",
      "pattern": "[ipv4-addr:value = '168.227.140.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--54fab0a9-8f0e-548b-8f00-650c2d6569b8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:168.206.0.0/16",
      "pattern": "[ipv4-addr:value = '168.206.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3d6e416a-bd62-57a7-8299-740989c37dd5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:168.198.0.0/16",
      "pattern": "[ipv4-addr:value = '168.198.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--98ec5d9d-c653-507d-976c-75d19372dbb0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:168.196.240.0/22",
      "pattern": "[ipv4-addr:value = '168.196.240.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0520cdfa-d9d9-58ac-a571-62b2056f9ac0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:168.196.236.0/22",
      "pattern": "[ipv4-addr:value = '168.196.236.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--634191cf-161f-5c82-8aca-1f24556cf5fd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:168.195.76.0/22",
      "pattern": "[ipv4-addr:value = '168.195.76.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--90dc6db3-67eb-579c-b32f-e59fe4e7a8df",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:168.181.52.0/22",
      "pattern": "[ipv4-addr:value = '168.181.52.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9e3fedaf-ad56-5a79-83f7-2465a6cce688",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:168.151.96.0/19",
      "pattern": "[ipv4-addr:value = '168.151.96.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a0d0b6ed-fe65-5fc2-b5eb-ae0b54336e82",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:168.151.80.0/20",
      "pattern": "[ipv4-addr:value = '168.151.80.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9cf5ab62-d731-5759-b312-79c6aa264d2e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:168.151.72.0/21",
      "pattern": "[ipv4-addr:value = '168.151.72.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--699b6101-31cc-5d0e-8313-8a51c840acb0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:168.151.68.0/23",
      "pattern": "[ipv4-addr:value = '168.151.68.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1de1d5c9-c0c9-54c6-a6e0-176bac2879be",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:168.151.64.0/22",
      "pattern": "[ipv4-addr:value = '168.151.64.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--30f9169a-d335-5ad8-81c9-23fb06d2b127",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:168.151.56.0/21",
      "pattern": "[ipv4-addr:value = '168.151.56.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--281b947b-8660-5b66-a745-29114e1056ca",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:168.151.52.0/23",
      "pattern": "[ipv4-addr:value = '168.151.52.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8a601c76-7731-5300-8d4f-da3d3412d5b5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:168.151.48.0/22",
      "pattern": "[ipv4-addr:value = '168.151.48.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d7e8ffaa-08e0-5c21-9535-b2946891d1e7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:168.151.44.0/22",
      "pattern": "[ipv4-addr:value = '168.151.44.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0628c99e-1df7-56ec-a7d0-0413914debc4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:168.151.4.0/23",
      "pattern": "[ipv4-addr:value = '168.151.4.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5f6ba401-af87-5939-9b67-22b96bb1ab43",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:168.151.32.0/21",
      "pattern": "[ipv4-addr:value = '168.151.32.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--28fc9869-f077-5e2b-b125-7eb4f117b9ad",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:168.151.252.0/23",
      "pattern": "[ipv4-addr:value = '168.151.252.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--83cb008c-f0ea-519b-aab9-3f2627faf443",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:168.151.248.0/22",
      "pattern": "[ipv4-addr:value = '168.151.248.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4f566eb7-853f-5826-bb06-91815f852407",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:168.151.228.0/23",
      "pattern": "[ipv4-addr:value = '168.151.228.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b8b26142-d32b-53a6-a5f6-b87a05b6662f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:168.151.224.0/22",
      "pattern": "[ipv4-addr:value = '168.151.224.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--632c4a3a-9f88-578e-b4c2-fbbc3e404327",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:168.151.220.0/23",
      "pattern": "[ipv4-addr:value = '168.151.220.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--136f5b56-f2e7-557b-99d3-33b61d3e5bd6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:168.151.216.0/22",
      "pattern": "[ipv4-addr:value = '168.151.216.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--14bffb45-155b-59e3-8719-b309d6b38228",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:168.151.21.0/24",
      "pattern": "[ipv4-addr:value = '168.151.21.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--99d52e46-0500-592a-915c-b811d49dfdf8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:168.151.208.0/21",
      "pattern": "[ipv4-addr:value = '168.151.208.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2079baa6-1b41-528d-af41-049314a747fb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:168.151.192.0/20",
      "pattern": "[ipv4-addr:value = '168.151.192.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8e26ac34-9b40-5ac6-a5fe-873ab7969fc8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:168.151.184.0/22",
      "pattern": "[ipv4-addr:value = '168.151.184.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--83ab97bc-c3fe-5ec4-bd6e-a07e27b9bd60",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:168.151.176.0/21",
      "pattern": "[ipv4-addr:value = '168.151.176.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c142d619-bc42-56cd-b380-bdb738f67f4a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:168.151.160.0/20",
      "pattern": "[ipv4-addr:value = '168.151.160.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--67d86dea-4e15-5b1d-8734-6706b76ecf1b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:168.151.158.0/23",
      "pattern": "[ipv4-addr:value = '168.151.158.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--46a6a9f8-82ed-5f98-9699-9ed866d22044",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:168.151.157.0/24",
      "pattern": "[ipv4-addr:value = '168.151.157.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2b2958db-553b-5f23-ba51-c02c9bcf98b5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:168.151.152.0/22",
      "pattern": "[ipv4-addr:value = '168.151.152.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cd958181-e83c-543d-876e-566a7feac069",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:168.151.148.0/22",
      "pattern": "[ipv4-addr:value = '168.151.148.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d6036694-d894-5a96-99b2-52bca7532afa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:168.151.146.0/23",
      "pattern": "[ipv4-addr:value = '168.151.146.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a1e0d8b8-6fd9-5bb3-984d-3afabe5b96d9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:168.151.145.0/24",
      "pattern": "[ipv4-addr:value = '168.151.145.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2ad31f2a-52c7-587b-8254-52327aefb1ef",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:168.151.128.0/20",
      "pattern": "[ipv4-addr:value = '168.151.128.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c4fe5b28-0892-5f75-ac95-6c037079f938",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:168.0.212.0/22",
      "pattern": "[ipv4-addr:value = '168.0.212.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2e9bf0b9-5d3c-5df0-8fe4-f585138250ea",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:167.74.0.0/18",
      "pattern": "[ipv4-addr:value = '167.74.0.0/18']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--27707e53-1725-5b1a-bfc8-28d028db1784",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:167.31.0.0/16",
      "pattern": "[ipv4-addr:value = '167.31.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fc22c538-75ff-587e-8a92-8e3435ea75d9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:167.253.48.0/22",
      "pattern": "[ipv4-addr:value = '167.253.48.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--40803537-9851-5c75-8915-a1bb66ab83a9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:167.249.200.0/22",
      "pattern": "[ipv4-addr:value = '167.249.200.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c3ea6749-04cf-50fa-a00c-f7fb55bb88c8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:167.224.48.0/21",
      "pattern": "[ipv4-addr:value = '167.224.48.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--419aa0cd-2bbd-5b26-aa41-fc2fa8e44b59",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:167.185.0.0/16",
      "pattern": "[ipv4-addr:value = '167.185.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--73fdd818-0316-556c-8d67-bcfdae9dadd1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:167.158.0.0/16",
      "pattern": "[ipv4-addr:value = '167.158.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--651d70b1-c8d5-5321-8dee-d67464cbd783",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:167.148.201.0/24",
      "pattern": "[ipv4-addr:value = '167.148.201.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1dae4bcc-dd82-57d8-a85a-91e01d324c28",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:165.3.0.0/16",
      "pattern": "[ipv4-addr:value = '165.3.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8d65eba6-84d3-575f-a2f3-d193ea5bce8d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:165.102.0.0/16",
      "pattern": "[ipv4-addr:value = '165.102.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--46ae118a-1d8c-576b-8462-5e8a1b021861",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:164.88.0.0/16",
      "pattern": "[ipv4-addr:value = '164.88.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bcba480e-4123-5567-ad91-770c4e126790",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:164.79.0.0/16",
      "pattern": "[ipv4-addr:value = '164.79.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e4272142-1dde-54ac-9c57-2bcd0812709b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:164.6.0.0/16",
      "pattern": "[ipv4-addr:value = '164.6.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--556f903d-ecaa-5f63-b6dc-59463e1fbf5f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:164.215.103.0/24",
      "pattern": "[ipv4-addr:value = '164.215.103.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--23240f09-f4dc-5d12-b29b-672f74f9ebdf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:164.155.0.0/16",
      "pattern": "[ipv4-addr:value = '164.155.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ae3e2dca-f73a-579b-833a-9eddc6797dae",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:163.61.216.0/24",
      "pattern": "[ipv4-addr:value = '163.61.216.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5841c6de-73c8-5f80-8d2f-0e8d1856964c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:163.61.188.0/23",
      "pattern": "[ipv4-addr:value = '163.61.188.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8346464f-7e5a-5f4f-8ad5-3dac7b94b714",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:163.50.0.0/16",
      "pattern": "[ipv4-addr:value = '163.50.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4718dc75-229d-5ee6-8f75-99248c830b38",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:163.5.102.0/24",
      "pattern": "[ipv4-addr:value = '163.5.102.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3f662c01-91d7-5282-b1aa-f4a1281ee25d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:163.47.19.0/24",
      "pattern": "[ipv4-addr:value = '163.47.19.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--94bfcce1-c8a7-5040-8536-8ae2bdf71e34",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:163.254.0.0/16",
      "pattern": "[ipv4-addr:value = '163.254.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--93070553-bdfe-57ff-9374-26ee5728508b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:163.250.0.0/16",
      "pattern": "[ipv4-addr:value = '163.250.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8b673344-a48e-53b0-ab06-82d22be68aac",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:163.198.0.0/16",
      "pattern": "[ipv4-addr:value = '163.198.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--63757b51-825a-5b1e-b693-71e412b6f821",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:162.71.0.0/19",
      "pattern": "[ipv4-addr:value = '162.71.0.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f1e1139a-3731-58c5-88e8-0d548c8d65b3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:162.249.20.0/22",
      "pattern": "[ipv4-addr:value = '162.249.20.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--79791056-f397-5737-9066-947a28851135",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:162.217.160.0/21",
      "pattern": "[ipv4-addr:value = '162.217.160.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5adf082a-0e1f-5464-a498-c51b3f78072f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:161.60.0.0/16",
      "pattern": "[ipv4-addr:value = '161.60.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dd6bbfb9-426e-5dc6-b483-3c124acc1ee9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:161.248.6.0/23",
      "pattern": "[ipv4-addr:value = '161.248.6.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a09c0f4a-5c6d-5c71-a687-7393b1b0ae1e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:161.248.178.0/23",
      "pattern": "[ipv4-addr:value = '161.248.178.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--51fa1721-b571-5cd7-8bc1-4d0801f6da08",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:161.1.0.0/16",
      "pattern": "[ipv4-addr:value = '161.1.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3342cc2e-f87f-5fca-8fbc-9fa6e270f40d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:161.0.68.0/22",
      "pattern": "[ipv4-addr:value = '161.0.68.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e75a8ad7-9f12-5677-a280-63971c9e8f7b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:161.0.0.0/19",
      "pattern": "[ipv4-addr:value = '161.0.0.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a07551a9-6bda-566d-84a2-13d1318bddd8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:160.65.0.0/16",
      "pattern": "[ipv4-addr:value = '160.65.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--14c35525-2bc3-59d2-bba1-4a4613d7379c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:160.240.0.0/16",
      "pattern": "[ipv4-addr:value = '160.240.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--371d09f8-d10b-539b-8983-1845fc6ea5e9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:160.188.0.0/16",
      "pattern": "[ipv4-addr:value = '160.188.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1a6e612b-3e83-50f0-a167-95fb396c833b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:160.180.0.0/16",
      "pattern": "[ipv4-addr:value = '160.180.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5ab38840-51a7-5d33-8f11-ffe2a01f33db",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:160.14.0.0/16",
      "pattern": "[ipv4-addr:value = '160.14.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--afb5dd02-e87e-5188-9427-c9431f6acf5f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:160.122.0.0/16",
      "pattern": "[ipv4-addr:value = '160.122.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3b6f204b-05ff-52cd-ae75-17cf7e2ea255",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:160.121.0.0/16",
      "pattern": "[ipv4-addr:value = '160.121.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5d567413-49f6-51f1-8c71-9f43ba591c26",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:160.117.0.0/16",
      "pattern": "[ipv4-addr:value = '160.117.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--421f132c-cd67-5ca5-8e8f-ed933076b77e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:160.116.0.0/16",
      "pattern": "[ipv4-addr:value = '160.116.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--95c46c90-4c7d-5768-bf19-285097acfa34",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:160.104.0.0/16",
      "pattern": "[ipv4-addr:value = '160.104.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f8ee8c67-9382-50d2-b776-4297fcf65530",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:159.80.0.0/16",
      "pattern": "[ipv4-addr:value = '159.80.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e3c965d8-1780-5d04-be4d-49f7bbf41811",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:159.219.0.0/16",
      "pattern": "[ipv4-addr:value = '159.219.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--73cddabf-8cf7-56f1-be15-6e4c35b4fee6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:158.94.208.0/22",
      "pattern": "[ipv4-addr:value = '158.94.208.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--99907163-ca87-55d0-b5d0-762d57471217",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:158.249.0.0/16",
      "pattern": "[ipv4-addr:value = '158.249.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4fc2f323-ca75-528e-860c-72fb3999fe25",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:158.173.51.0/24",
      "pattern": "[ipv4-addr:value = '158.173.51.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fde93a9a-d557-523e-9f14-4e219359d050",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:157.20.182.0/23",
      "pattern": "[ipv4-addr:value = '157.20.182.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c4cfff70-bae0-5655-90bf-f99fb3b7d92a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:157.186.0.0/16",
      "pattern": "[ipv4-addr:value = '157.186.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5e4f5243-9417-5980-8e02-544900062c3f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:157.162.0.0/16",
      "pattern": "[ipv4-addr:value = '157.162.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--98fb3327-5760-5d7b-8fed-293237114930",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:157.148.116.0/24",
      "pattern": "[ipv4-addr:value = '157.148.116.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6c567ec1-5bf5-5388-ae90-f79f363159a4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:157.119.64.0/22",
      "pattern": "[ipv4-addr:value = '157.119.64.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--95c810ad-4fe5-5496-a9c7-72547175cd67",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:157.115.0.0/16",
      "pattern": "[ipv4-addr:value = '157.115.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c5b2308a-cd01-5f5d-952c-f5d8e951f8c9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:156.247.54.0/24",
      "pattern": "[ipv4-addr:value = '156.247.54.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b4b1fde1-1498-5c87-9f60-706bd4979511",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:156.247.40.0/24",
      "pattern": "[ipv4-addr:value = '156.247.40.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--da25cd31-5757-504e-83f9-cf38c760133b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:156.234.43.0/24",
      "pattern": "[ipv4-addr:value = '156.234.43.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7954b041-c38d-5173-91d5-e2f0eb929b95",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:155.94.203.0/24",
      "pattern": "[ipv4-addr:value = '155.94.203.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bc838a4b-c737-5b3e-bc50-e41a9be1ff07",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:155.73.0.0/16",
      "pattern": "[ipv4-addr:value = '155.73.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a2a382e7-7e77-551f-85c8-f9de654bf4d3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:155.71.0.0/16",
      "pattern": "[ipv4-addr:value = '155.71.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4f52f6dd-f680-5be0-b956-341efd1a47df",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:155.66.0.0/16",
      "pattern": "[ipv4-addr:value = '155.66.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7f6d2bc1-5ae9-52fd-be60-a3ef1b0b5dbe",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:155.249.0.0/16",
      "pattern": "[ipv4-addr:value = '155.249.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e7f179c8-d75a-5c9b-b097-6b773e721d2a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:155.233.0.0/16",
      "pattern": "[ipv4-addr:value = '155.233.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7b94b22e-a06a-5485-b092-9d7732acb860",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:155.212.238.0/24",
      "pattern": "[ipv4-addr:value = '155.212.238.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dbe0dad9-d872-5065-81cf-644242bada83",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:155.212.236.0/24",
      "pattern": "[ipv4-addr:value = '155.212.236.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9eb9d518-6b63-5766-8580-173ae5e29213",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:155.159.0.0/16",
      "pattern": "[ipv4-addr:value = '155.159.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--34d20603-4d00-5e20-8bfb-5df75f5e2911",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:155.103.68.0/22",
      "pattern": "[ipv4-addr:value = '155.103.68.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2d6a5ddf-6425-500d-a214-32f1aea81fd6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:154.85.48.0/21",
      "pattern": "[ipv4-addr:value = '154.85.48.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--27dcc780-310f-56d3-9919-b1fb278c6f15",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:154.23.189.0/24",
      "pattern": "[ipv4-addr:value = '154.23.189.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f23af8de-0c34-5a65-9b60-53a247e9f817",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:154.220.66.0/24",
      "pattern": "[ipv4-addr:value = '154.220.66.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ee848260-bb64-56da-9553-3fc624c38672",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:154.216.188.0/24",
      "pattern": "[ipv4-addr:value = '154.216.188.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--df060272-ff1f-539d-9ec6-a83082e28dd0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:154.211.12.0/24",
      "pattern": "[ipv4-addr:value = '154.211.12.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8608c5b7-ae47-5d68-9a7b-1bdaec6c17f8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:154.209.190.0/24",
      "pattern": "[ipv4-addr:value = '154.209.190.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a42b9e5f-e348-5292-8ecf-4d61aa875202",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:153.93.0.0/16",
      "pattern": "[ipv4-addr:value = '153.93.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bd327206-407b-5f1c-b1d0-f38381f20aec",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:153.51.160.0/22",
      "pattern": "[ipv4-addr:value = '153.51.160.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8c59b199-6dc1-5a5d-b95c-6d8fea3d6579",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:153.14.0.0/16",
      "pattern": "[ipv4-addr:value = '153.14.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--41cfd4ba-973c-55cf-865a-0148a410cf55",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:152.109.0.0/16",
      "pattern": "[ipv4-addr:value = '152.109.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0e4574d1-f4e0-5446-9d89-0e5f9929ca56",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:151.243.109.0/24",
      "pattern": "[ipv4-addr:value = '151.243.109.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4d9ebae8-e1c9-5d30-88d5-8341fab2aeb9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:151.131.0.0/16",
      "pattern": "[ipv4-addr:value = '151.131.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--35c887af-54b6-54be-805a-0ed55ebb87ef",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:150.25.0.0/16",
      "pattern": "[ipv4-addr:value = '150.25.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5fcecbbd-ff21-5228-a8bd-fd2075ffa58a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:150.242.120.0/22",
      "pattern": "[ipv4-addr:value = '150.242.120.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6456596b-d0b1-5150-a19f-08817264bc90",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:150.22.128.0/17",
      "pattern": "[ipv4-addr:value = '150.22.128.0/17']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2802f5e5-9f5d-53f9-b572-dca9c92ab2bf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:150.129.212.0/22",
      "pattern": "[ipv4-addr:value = '150.129.212.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0260799a-7774-5dd3-a784-0d655275f7ca",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:150.10.0.0/16",
      "pattern": "[ipv4-addr:value = '150.10.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4cef9e9c-55e4-5f4c-ae7c-2097be1b3246",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:149.57.16.0/24",
      "pattern": "[ipv4-addr:value = '149.57.16.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a4d7efea-bb3b-5a94-8db7-9407c7ff6b4f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:149.57.11.0/24",
      "pattern": "[ipv4-addr:value = '149.57.11.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ac49b248-f819-599e-b80c-36f4468a0a59",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:149.18.83.0/24",
      "pattern": "[ipv4-addr:value = '149.18.83.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e07b3b92-8e6e-5c5c-85da-fb19d4558a50",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:148.248.0.0/16",
      "pattern": "[ipv4-addr:value = '148.248.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f796ccb2-80f9-5fb1-83b3-0ffbd7767b79",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:148.185.0.0/16",
      "pattern": "[ipv4-addr:value = '148.185.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--134e6d40-0762-540d-ad90-dbb9bb6cfad0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:148.178.0.0/16",
      "pattern": "[ipv4-addr:value = '148.178.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d8e2f1bf-8e8e-5abb-9b1a-2f9ff43fe0f9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:148.148.0.0/16",
      "pattern": "[ipv4-addr:value = '148.148.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ce675600-b8c0-5981-8d1b-bf12cee6ae86",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:147.90.182.0/24",
      "pattern": "[ipv4-addr:value = '147.90.182.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--093189b0-a936-53eb-bfa7-6254c919bccb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:147.78.224.0/22",
      "pattern": "[ipv4-addr:value = '147.78.224.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--331d5eee-08c3-5189-b89d-51639458fe01",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:147.7.0.0/16",
      "pattern": "[ipv4-addr:value = '147.7.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fa909df0-511f-54e2-89f0-6b4c72c85f0d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:147.45.47.0/24",
      "pattern": "[ipv4-addr:value = '147.45.47.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--559ed401-935b-5f19-a4e2-3fe4ade10f78",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:147.45.45.0/24",
      "pattern": "[ipv4-addr:value = '147.45.45.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b882472d-70a3-54ed-a371-5a5179663987",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:147.45.222.0/24",
      "pattern": "[ipv4-addr:value = '147.45.222.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d8fe50c6-6f0c-5e8d-ab1b-635f08cbdf58",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:147.45.124.0/23",
      "pattern": "[ipv4-addr:value = '147.45.124.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a03635bb-70d9-5467-a74b-89a62bd4b7b2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:147.16.0.0/14",
      "pattern": "[ipv4-addr:value = '147.16.0.0/14']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--86a01603-6636-5edb-8e7f-5c19f65beae8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:147.119.0.0/16",
      "pattern": "[ipv4-addr:value = '147.119.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--70e03038-fc44-5085-a6ea-d16ce96a2c56",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:146.51.0.0/16",
      "pattern": "[ipv4-addr:value = '146.51.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ce5191a1-5d4a-506d-a3ef-ae6ca83f00a1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:146.47.0.0/16",
      "pattern": "[ipv4-addr:value = '146.47.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--37b68f33-5d84-51e9-983d-b0365bbfe231",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:146.3.0.0/16",
      "pattern": "[ipv4-addr:value = '146.3.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--307118bc-b2d5-5d96-9635-2735be27ac8e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:146.252.0.0/16",
      "pattern": "[ipv4-addr:value = '146.252.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f3901f0e-59d4-5730-bfe8-0566a2ce0b81",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:146.19.5.0/24",
      "pattern": "[ipv4-addr:value = '146.19.5.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9542ee72-7278-5c69-aeb7-53555c0e93ce",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:146.19.125.0/24",
      "pattern": "[ipv4-addr:value = '146.19.125.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--19773bdf-66a6-54f2-ac42-66ece9bd7d96",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:146.185.222.0/24",
      "pattern": "[ipv4-addr:value = '146.185.222.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7f01c259-dd8d-5dec-88d6-b6b2e1025981",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:146.106.0.0/16",
      "pattern": "[ipv4-addr:value = '146.106.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--31b7be2b-7e6a-5a43-8fe3-949d6b19ebad",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:145.231.0.0/16",
      "pattern": "[ipv4-addr:value = '145.231.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--98a8bf07-5ff3-5ee6-ac95-5bf3a940f3be",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:144.215.0.0/16",
      "pattern": "[ipv4-addr:value = '144.215.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--29bbf37c-7a78-5df9-935e-6ce9168b5454",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:144.172.65.0/24",
      "pattern": "[ipv4-addr:value = '144.172.65.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--df6cea58-4622-5904-8751-6adc604be2e7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:143.92.48.0/20",
      "pattern": "[ipv4-addr:value = '143.92.48.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c4e3969c-ae9a-5374-a796-31237884b707",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:143.92.43.0/24",
      "pattern": "[ipv4-addr:value = '143.92.43.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7651bab9-b3e6-548a-9837-f8130abf06a7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:143.92.32.0/20",
      "pattern": "[ipv4-addr:value = '143.92.32.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7a67955d-d7e2-543c-9aef-2c52edd64683",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:143.222.0.0/16",
      "pattern": "[ipv4-addr:value = '143.222.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6446f0ff-9512-56a6-9c64-83f077c16ab6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:142.102.0.0/16",
      "pattern": "[ipv4-addr:value = '142.102.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bc2e7f0c-1fe4-57ea-b17a-c44718ba1877",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:141.98.9.0/24",
      "pattern": "[ipv4-addr:value = '141.98.9.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6209806a-976e-54b1-bb6c-6e365134e2b8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:141.98.8.0/24",
      "pattern": "[ipv4-addr:value = '141.98.8.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--df8e42ec-9505-5bce-b7d4-cf68bb04a3e6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:141.98.11.0/24",
      "pattern": "[ipv4-addr:value = '141.98.11.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5765979e-f87f-54cf-a891-d79310ca4224",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:141.98.10.0/24",
      "pattern": "[ipv4-addr:value = '141.98.10.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ad8a391b-e141-5779-ba61-9db679f662f2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:141.206.128.0/20",
      "pattern": "[ipv4-addr:value = '141.206.128.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--168ec02b-66ff-5407-bc58-5b8c2e6853a0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:141.178.0.0/16",
      "pattern": "[ipv4-addr:value = '141.178.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ebbb88f2-17a7-5c2e-a94a-2c74dc0d0d74",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:140.82.96.0/20",
      "pattern": "[ipv4-addr:value = '140.82.96.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d2d7cb53-e2c4-5213-b8ec-7c9cdfb78235",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:140.82.64.0/19",
      "pattern": "[ipv4-addr:value = '140.82.64.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5784b07a-4ef6-5f45-88a1-39493e017bd7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:140.222.0.0/16",
      "pattern": "[ipv4-addr:value = '140.222.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--22051cbd-35be-5f58-a474-d9feecef4da2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:14.152.94.0/24",
      "pattern": "[ipv4-addr:value = '14.152.94.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--846cc8e0-0aae-5769-99fd-1189ade83e18",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:14.128.48.0/21",
      "pattern": "[ipv4-addr:value = '14.128.48.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6d09f2e4-80cb-50a9-97dd-35a291827349",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:14.128.32.0/20",
      "pattern": "[ipv4-addr:value = '14.128.32.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1a5ce69b-221c-58ed-a029-e3e4c4b14f5b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:139.183.192.0/18",
      "pattern": "[ipv4-addr:value = '139.183.192.0/18']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9e220b88-092b-566f-8b7a-a056dccf7ad1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:138.99.36.0/22",
      "pattern": "[ipv4-addr:value = '138.99.36.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--54ea7b75-7f98-5d81-87e4-4540d8c4b028",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:138.97.156.0/22",
      "pattern": "[ipv4-addr:value = '138.97.156.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--58ade3af-9d4f-5162-8ed2-1672e3452b6c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:138.94.216.0/22",
      "pattern": "[ipv4-addr:value = '138.94.216.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e45cff87-0699-563b-b07a-fa469f1d126a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:138.59.4.0/22",
      "pattern": "[ipv4-addr:value = '138.59.4.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e3bd952b-a10b-5534-b24f-f1d083aad251",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:138.59.204.0/22",
      "pattern": "[ipv4-addr:value = '138.59.204.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7944a9db-f68b-5a7a-ac02-17b142ed3f6b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:138.36.92.0/22",
      "pattern": "[ipv4-addr:value = '138.36.92.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--72ae748d-450a-5858-a354-96f3d9b211a9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:138.36.136.0/22",
      "pattern": "[ipv4-addr:value = '138.36.136.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--955cc97e-359b-5e45-8279-fa2d38f590d6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:138.241.0.0/16",
      "pattern": "[ipv4-addr:value = '138.241.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--08f8d5f0-a019-56a0-baaa-c12c06f131df",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:138.226.236.0/23",
      "pattern": "[ipv4-addr:value = '138.226.236.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--51716b15-308e-5b66-8c99-0bdd99da39c4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:138.219.172.0/22",
      "pattern": "[ipv4-addr:value = '138.219.172.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--96ee8f60-c7e5-5832-82af-db0f0458cc35",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:138.185.116.0/22",
      "pattern": "[ipv4-addr:value = '138.185.116.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dc536354-66ae-5dea-af1f-f43d02fa2a37",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:138.125.0.0/16",
      "pattern": "[ipv4-addr:value = '138.125.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4f61b4b2-2585-5ddb-ba9b-7699c699374b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:137.72.0.0/16",
      "pattern": "[ipv4-addr:value = '137.72.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b54c2ac9-f697-5833-9124-5628ceeeee6e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:137.59.60.0/22",
      "pattern": "[ipv4-addr:value = '137.59.60.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--76aeca3d-d1fe-5b75-9db4-5dc8eb890189",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:137.59.232.0/22",
      "pattern": "[ipv4-addr:value = '137.59.232.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6d2d5c95-3337-565f-ac09-13b999aacfe5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:137.42.0.0/16",
      "pattern": "[ipv4-addr:value = '137.42.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--472709ed-58e8-5da7-922a-f1474dacc0ad",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:137.220.128.0/17",
      "pattern": "[ipv4-addr:value = '137.220.128.0/17']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--59f96dca-6ce3-5cc0-8b6d-df427ba092f8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:137.218.0.0/16",
      "pattern": "[ipv4-addr:value = '137.218.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d01a04eb-f375-57d4-8ecd-020378cd6018",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:137.105.0.0/16",
      "pattern": "[ipv4-addr:value = '137.105.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b3921e95-0d9c-54b4-8952-8eabf08bcc7c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:136.230.0.0/16",
      "pattern": "[ipv4-addr:value = '136.230.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--266e6973-d222-5d3c-9e0b-b7116223e675",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:136.175.100.0/22",
      "pattern": "[ipv4-addr:value = '136.175.100.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1356156d-36a0-5e0d-90bc-1eedca118fde",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:134.195.104.0/22",
      "pattern": "[ipv4-addr:value = '134.195.104.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--61e76123-f0e2-5ace-ac95-a9d7a64b9eeb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:134.18.0.0/16",
      "pattern": "[ipv4-addr:value = '134.18.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--12703807-21bf-5990-87e4-1a15853e1bcc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:134.122.189.0/24",
      "pattern": "[ipv4-addr:value = '134.122.189.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--51581a73-7563-545d-af91-39233804c1be",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:134.122.188.0/24",
      "pattern": "[ipv4-addr:value = '134.122.188.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--af0af242-fef9-5786-afac-93b7d971537f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:134.122.168.0/24",
      "pattern": "[ipv4-addr:value = '134.122.168.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--796229de-fba0-5c4e-9324-241b9380784b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:134.122.128.0/17",
      "pattern": "[ipv4-addr:value = '134.122.128.0/17']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cea042bf-88f8-56e3-b46b-0e557e9123de",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:131.108.16.0/22",
      "pattern": "[ipv4-addr:value = '131.108.16.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6cccde55-76c4-584f-8e1d-3414c2111691",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:130.222.0.0/16",
      "pattern": "[ipv4-addr:value = '130.222.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0c43ae67-0001-5643-acd7-b3e241707929",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:130.196.0.0/16",
      "pattern": "[ipv4-addr:value = '130.196.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--20829e53-9bf7-589c-8189-4a19a302d69b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:130.148.0.0/16",
      "pattern": "[ipv4-addr:value = '130.148.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d91d1fa0-a717-5a02-99b1-f063a2ea1dc0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:130.12.44.0/22",
      "pattern": "[ipv4-addr:value = '130.12.44.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e7450884-b506-5dfa-ba54-36338e7af861",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:130.12.180.0/22",
      "pattern": "[ipv4-addr:value = '130.12.180.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c1230352-d899-5c8a-a01a-f8c4ca11694d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:129.56.0.0/16",
      "pattern": "[ipv4-addr:value = '129.56.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6f275891-0809-5b5a-b4e9-3f388f9254bf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:125.58.0.0/18",
      "pattern": "[ipv4-addr:value = '125.58.0.0/18']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--097d4b1b-6a9e-5b3d-b214-d69588d71212",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:125.31.192.0/18",
      "pattern": "[ipv4-addr:value = '125.31.192.0/18']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0c1fb070-dda3-5532-b664-7737fe358d55",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:124.68.0.0/16",
      "pattern": "[ipv4-addr:value = '124.68.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6fff182d-b3bd-5ed2-a414-ab53979deeef",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:124.242.0.0/16",
      "pattern": "[ipv4-addr:value = '124.242.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--56a634f9-dddc-55f2-b4a0-ef2549795321",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:124.21.0.0/16",
      "pattern": "[ipv4-addr:value = '124.21.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--00ac4a1c-6ec1-57fb-8716-2a62f90f6119",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:124.20.0.0/16",
      "pattern": "[ipv4-addr:value = '124.20.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--02b42d51-ffd0-5908-aefd-723e497c0b4f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:124.198.132.0/24",
      "pattern": "[ipv4-addr:value = '124.198.132.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4c8cd2cd-febf-5615-8d93-c3e2e8cc4cac",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:124.198.131.0/24",
      "pattern": "[ipv4-addr:value = '124.198.131.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dfb095f4-2a90-56c3-a651-3320a8a05e4d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:124.175.224.0/19",
      "pattern": "[ipv4-addr:value = '124.175.224.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ef72b59f-373d-5ca1-ad01-e227b5985533",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:124.157.0.0/18",
      "pattern": "[ipv4-addr:value = '124.157.0.0/18']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8ac17a6d-2862-5f27-8153-8a61683ea19d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:124.147.128.0/17",
      "pattern": "[ipv4-addr:value = '124.147.128.0/17']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--044c0e7b-1be1-5145-a36b-1202d006d928",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:123.254.104.0/21",
      "pattern": "[ipv4-addr:value = '123.254.104.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--49aacbb6-0779-503b-a477-97b691db6f2d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:123.253.204.0/22",
      "pattern": "[ipv4-addr:value = '123.253.204.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7f166fcf-9fdc-59b3-a0a3-e098e406bfab",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:123.242.0.0/17",
      "pattern": "[ipv4-addr:value = '123.242.0.0/17']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--59ed7ea8-2aa5-58bf-ae3b-f6168ef6caa7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:123.136.92.0/22",
      "pattern": "[ipv4-addr:value = '123.136.92.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3adebbf0-85e7-589a-b4e8-beb8af21d811",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:123.136.80.0/20",
      "pattern": "[ipv4-addr:value = '123.136.80.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9c58022b-0295-5e8c-84cb-a89f2f42d6e1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:123.108.108.0/22",
      "pattern": "[ipv4-addr:value = '123.108.108.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--70e6eef9-7827-5f41-9eac-df86896c414e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:122.129.0.0/18",
      "pattern": "[ipv4-addr:value = '122.129.0.0/18']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--74b30763-fa10-5c66-a593-2e9181626fa0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:122.10.112.0/21",
      "pattern": "[ipv4-addr:value = '122.10.112.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--93c03e04-1295-5227-aa59-9e92a187e4f2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:122.0.244.0/22",
      "pattern": "[ipv4-addr:value = '122.0.244.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--45eb9a2a-38f7-5b83-9ba6-a9584897ce1d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:122.0.240.0/22",
      "pattern": "[ipv4-addr:value = '122.0.240.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f3c5f105-7faa-5093-86ad-59afca81c88e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:122.0.216.0/22",
      "pattern": "[ipv4-addr:value = '122.0.216.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c63dbccd-0be6-5260-a325-1458c1395134",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:122.0.196.0/22",
      "pattern": "[ipv4-addr:value = '122.0.196.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f148043a-27bc-54cf-a81b-0a4bc376ba51",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:121.234.236.0/24",
      "pattern": "[ipv4-addr:value = '121.234.236.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4b178694-9634-5547-b572-67e5d96104de",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:121.14.35.0/24",
      "pattern": "[ipv4-addr:value = '121.14.35.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3f3022dd-416f-569a-b52f-ac15978dc0be",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:121.127.233.0/24",
      "pattern": "[ipv4-addr:value = '121.127.233.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4e61ad86-1fa6-5d3b-a6cc-8b4a0e7f3fde",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:120.67.0.0/16",
      "pattern": "[ipv4-addr:value = '120.67.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c10ecbd9-dc8d-5c50-9ca9-c75e24789541",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:120.64.0.0/16",
      "pattern": "[ipv4-addr:value = '120.64.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a62d8dc2-db60-58de-ae39-0841ceb86a56",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:120.30.64.0/18",
      "pattern": "[ipv4-addr:value = '120.30.64.0/18']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--17b7f9e7-6607-5320-a33f-5e8716333b45",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:120.30.0.0/16",
      "pattern": "[ipv4-addr:value = '120.30.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f1f920a2-cc8e-5427-8821-04dc45878c80",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:120.233.59.0/24",
      "pattern": "[ipv4-addr:value = '120.233.59.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e7fd217c-7bc8-54ab-9717-9fc1dc1a00e0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:120.130.128.0/18",
      "pattern": "[ipv4-addr:value = '120.130.128.0/18']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aeb0df44-4e34-5d37-9c57-243dd0d17e18",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:120.130.0.0/16",
      "pattern": "[ipv4-addr:value = '120.130.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--14c2e98c-fb38-5251-a299-c5f1d44b8da3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:120.129.128.0/17",
      "pattern": "[ipv4-addr:value = '120.129.128.0/17']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--443b9d85-93de-5c89-b3d7-bd1322c1a8d9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:120.129.0.0/17",
      "pattern": "[ipv4-addr:value = '120.129.0.0/17']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f8344a46-b10c-5d52-aa10-2c6adade4b95",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:120.128.192.0/18",
      "pattern": "[ipv4-addr:value = '120.128.192.0/18']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--201cb914-9431-5675-a803-d35fc58a43b2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:120.128.128.0/17",
      "pattern": "[ipv4-addr:value = '120.128.128.0/17']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--26a93718-9d39-5353-9f46-34a517cf0254",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:119.82.8.0/21",
      "pattern": "[ipv4-addr:value = '119.82.8.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--26d94aa0-b3f4-576f-92a6-48d77a8efddf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:119.58.0.0/16",
      "pattern": "[ipv4-addr:value = '119.58.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d17b1889-5c7d-5eb3-a0ce-b0bfbb96f773",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:119.27.192.0/18",
      "pattern": "[ipv4-addr:value = '119.27.192.0/18']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--822d6c23-45c0-584e-bb51-b3efbe2b6575",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:119.232.0.0/16",
      "pattern": "[ipv4-addr:value = '119.232.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1ea26187-05b0-5e53-a2d2-1f5e90dbb732",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:119.227.224.0/19",
      "pattern": "[ipv4-addr:value = '119.227.224.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--97216c6d-944a-53b6-900f-4d0b4d8c4dd2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:119.161.252.0/22",
      "pattern": "[ipv4-addr:value = '119.161.252.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c6af8fa8-edfb-596e-8e0a-a5c11498a3e5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:119.161.248.0/22",
      "pattern": "[ipv4-addr:value = '119.161.248.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4fd51720-3cc9-5e75-99c2-bb410b5eac03",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:119.161.184.0/21",
      "pattern": "[ipv4-addr:value = '119.161.184.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--de776259-6140-53fd-82d1-3ab7c8e872e5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:119.13.179.0/24",
      "pattern": "[ipv4-addr:value = '119.13.179.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d13e34c2-ba0e-52ab-aa93-108ba82fba07",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:118.107.16.0/20",
      "pattern": "[ipv4-addr:value = '118.107.16.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ccbc80f6-1dce-5e0a-83f6-8af45e16aeff",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:118.107.0.0/18",
      "pattern": "[ipv4-addr:value = '118.107.0.0/18']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--db3ee541-e50b-589d-9569-abd5664c8eae",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:117.60.11.0/24",
      "pattern": "[ipv4-addr:value = '117.60.11.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ff0221ad-4313-582a-b1a5-1e2423604569",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:117.18.0.0/24",
      "pattern": "[ipv4-addr:value = '117.18.0.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8ffffe35-c0b6-5968-81c8-719679e154fa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:117.120.136.0/22",
      "pattern": "[ipv4-addr:value = '117.120.136.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--da00a325-3100-5d60-bb21-42d3c9204e08",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:115.167.64.0/24",
      "pattern": "[ipv4-addr:value = '115.167.64.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--71440e00-0cde-5e9e-8547-05096f112c09",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:115.167.3.0/24",
      "pattern": "[ipv4-addr:value = '115.167.3.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bd7d1167-e35b-5c7f-90ae-7570c33fa700",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:115.144.69.0/24",
      "pattern": "[ipv4-addr:value = '115.144.69.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1cbea652-90a5-5aee-87fa-2a2ba769bb28",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:114.239.188.0/24",
      "pattern": "[ipv4-addr:value = '114.239.188.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--780346fe-e6de-5adf-97fb-5b4473c4b454",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:114.231.216.0/22",
      "pattern": "[ipv4-addr:value = '114.231.216.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a7076205-9b72-5a34-b7b0-8b3174847929",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:114.134.28.0/22",
      "pattern": "[ipv4-addr:value = '114.134.28.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1ee5eff9-04aa-5ba1-bf4c-02a8cadcd9a6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:113.213.128.0/18",
      "pattern": "[ipv4-addr:value = '113.213.128.0/18']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4c71f848-b21e-5dd6-bc34-7e4b8f37e9f8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:113.212.128.0/19",
      "pattern": "[ipv4-addr:value = '113.212.128.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--52ac60e3-a0cf-5766-b763-8ec98070e85b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:113.203.208.0/20",
      "pattern": "[ipv4-addr:value = '113.203.208.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--58fe8f77-4341-56c1-895c-2288ee15d3b4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:112.90.143.0/24",
      "pattern": "[ipv4-addr:value = '112.90.143.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--35e80be5-d3f5-5875-a115-7552019b632f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:112.213.96.0/19",
      "pattern": "[ipv4-addr:value = '112.213.96.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fa75b56a-6dd0-5f1e-b3ac-38d7d5590b47",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:112.143.0.0/19",
      "pattern": "[ipv4-addr:value = '112.143.0.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f7bb6b3c-f647-59ff-852e-4694ce53dfa4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:112.142.0.0/15",
      "pattern": "[ipv4-addr:value = '112.142.0.0/15']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4dcdabde-4882-5ec1-9f84-42e218aeef8f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:111.90.158.0/23",
      "pattern": "[ipv4-addr:value = '111.90.158.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--857fb696-2e07-5c2a-8bd9-8ae8ae661e33",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:111.90.157.0/24",
      "pattern": "[ipv4-addr:value = '111.90.157.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5936f8ba-7ca7-5a98-a2a1-0bbecdaab04a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:111.90.156.0/24",
      "pattern": "[ipv4-addr:value = '111.90.156.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4d6225d5-09d5-5da6-8c0b-02e36abff71b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:111.90.152.0/22",
      "pattern": "[ipv4-addr:value = '111.90.152.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7f9a95bc-8837-5650-9fa6-42423a3cd58b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:111.90.147.0/24",
      "pattern": "[ipv4-addr:value = '111.90.147.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a34fdb87-2b29-5660-bc92-4ff4296d5a43",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:111.90.142.0/23",
      "pattern": "[ipv4-addr:value = '111.90.142.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e8e43911-b6c7-55de-b53c-bff7b9de7478",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:111.90.140.0/23",
      "pattern": "[ipv4-addr:value = '111.90.140.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e57fde96-4ebe-5e08-9e7c-e92251cc3367",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:111.68.64.0/19",
      "pattern": "[ipv4-addr:value = '111.68.64.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--623786bf-c3a3-5cbd-9f3f-84c89860310f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:111.66.64.0/18",
      "pattern": "[ipv4-addr:value = '111.66.64.0/18']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d28b7913-b391-5061-ab2e-a502084698e1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:111.223.244.0/24",
      "pattern": "[ipv4-addr:value = '111.223.244.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1876a107-434d-5de7-89ac-09d641ad9715",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:110.48.192.0/18",
      "pattern": "[ipv4-addr:value = '110.48.192.0/18']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1f3895c7-7f3d-5c31-a2d8-63ea01e3b0c0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:110.48.148.0/22",
      "pattern": "[ipv4-addr:value = '110.48.148.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--82f34983-95c6-5c88-abc1-3dbc26139ebe",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:110.48.136.0/22",
      "pattern": "[ipv4-addr:value = '110.48.136.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3ea9248f-0fce-5035-a83f-79aceabcc5cf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:110.48.0.0/18",
      "pattern": "[ipv4-addr:value = '110.48.0.0/18']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ef6a4c1f-d6cb-515e-9c15-620db4db4ae7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:110.48.0.0/16",
      "pattern": "[ipv4-addr:value = '110.48.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1f288397-3bd8-5409-86cb-0f7b3b918c44",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:110.44.144.0/20",
      "pattern": "[ipv4-addr:value = '110.44.144.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--45cd9140-fe81-5989-b5a0-83192ee6e8a0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:110.34.48.0/22",
      "pattern": "[ipv4-addr:value = '110.34.48.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e23f43cc-0525-551e-95df-0b64c8b86a18",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:110.172.192.0/20",
      "pattern": "[ipv4-addr:value = '110.172.192.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a1cc65d0-e9fa-594e-af24-cadc53564187",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:109.238.86.0/23",
      "pattern": "[ipv4-addr:value = '109.238.86.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--743b2a4c-e268-5310-9804-9501b4d9c53f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:109.206.244.0/22",
      "pattern": "[ipv4-addr:value = '109.206.244.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9fdd5f9b-2900-5c60-a7ee-16912832bec1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:109.202.104.0/24",
      "pattern": "[ipv4-addr:value = '109.202.104.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f5378840-d506-56d3-a5f6-6a6e0013bc19",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:109.160.32.0/24",
      "pattern": "[ipv4-addr:value = '109.160.32.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8e3ef18e-e0ef-5d00-8b0d-ccdfd8dc83c7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:108.164.128.0/17",
      "pattern": "[ipv4-addr:value = '108.164.128.0/17']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c9ef9da1-53d5-5938-a9d6-774ea269e5ec",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:108.164.0.0/20",
      "pattern": "[ipv4-addr:value = '108.164.0.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7b619bb7-158b-53a9-9673-a78b46e67ad4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:107.182.240.0/20",
      "pattern": "[ipv4-addr:value = '107.182.240.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5c52ac36-ae32-59e6-aa7e-914a3542781b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:107.155.224.0/22",
      "pattern": "[ipv4-addr:value = '107.155.224.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7af8cbbc-9205-5703-a643-38c13b255c7c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:107.150.72.0/24",
      "pattern": "[ipv4-addr:value = '107.150.72.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f0ab1858-789e-549f-b3dd-cd2e7f092f49",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:106.95.0.0/16",
      "pattern": "[ipv4-addr:value = '106.95.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f7a2521e-4ab2-59b6-b8b4-39aa7024aa96",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:106.48.64.0/18",
      "pattern": "[ipv4-addr:value = '106.48.64.0/18']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d3e877bd-245c-5e4c-8142-f5eace53eec9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:104.251.180.0/22",
      "pattern": "[ipv4-addr:value = '104.251.180.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--41c0b001-798c-5c86-980b-0e0a9c16dc88",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:104.250.184.0/24",
      "pattern": "[ipv4-addr:value = '104.250.184.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--28606e2a-f352-52fc-b6f0-6055e9ac4f1e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:104.250.165.0/24",
      "pattern": "[ipv4-addr:value = '104.250.165.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9f9f6f71-e41c-5aeb-b0f1-0e930f1db33d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:104.250.164.0/24",
      "pattern": "[ipv4-addr:value = '104.250.164.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ae22f02e-cf21-5997-84f5-5c48e9f19825",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:104.250.163.0/24",
      "pattern": "[ipv4-addr:value = '104.250.163.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fb26b4c3-ae11-53af-80ed-5cc73cb696d2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:104.249.10.0/24",
      "pattern": "[ipv4-addr:value = '104.249.10.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a32adf37-d156-5e2a-a206-21b410e04ea5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:104.244.80.0/22",
      "pattern": "[ipv4-addr:value = '104.244.80.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0326a752-2501-5c33-a7d1-651c7fd72ba9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:104.244.56.0/21",
      "pattern": "[ipv4-addr:value = '104.244.56.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--342d8782-6317-5b9c-9249-9930a70b9af5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:104.232.96.0/20",
      "pattern": "[ipv4-addr:value = '104.232.96.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1b128979-17ef-5679-8f17-cafe46c17f67",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:104.193.228.0/22",
      "pattern": "[ipv4-addr:value = '104.193.228.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--45bdaf2c-4f90-598c-b482-dd2d36d6ef4a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:104.167.25.0/24",
      "pattern": "[ipv4-addr:value = '104.167.25.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--92a09f27-2469-5cdd-90b4-bc77a9b54607",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:104.167.19.0/24",
      "pattern": "[ipv4-addr:value = '104.167.19.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--64326c67-aff4-5dbe-8ed3-c6c2e05dffc1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:104.152.52.0/24",
      "pattern": "[ipv4-addr:value = '104.152.52.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--db048187-bf65-50a2-b41f-81c4efb44137",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.95.180.0/22",
      "pattern": "[ipv4-addr:value = '103.95.180.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--231cfa62-f2fa-5a93-8ea2-71913075ee70",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.84.196.0/23",
      "pattern": "[ipv4-addr:value = '103.84.196.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b0fd4132-58e2-5558-be05-0e45e2008ca7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.84.170.0/23",
      "pattern": "[ipv4-addr:value = '103.84.170.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c769ae0e-17ce-5fcb-abef-04542582d2ff",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.83.86.0/23",
      "pattern": "[ipv4-addr:value = '103.83.86.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ad48a20c-e0c1-5c9f-9b32-91e7fd685423",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.81.44.0/22",
      "pattern": "[ipv4-addr:value = '103.81.44.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--efac2469-8b10-541b-a7be-1ca7d5f49941",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.80.132.0/22",
      "pattern": "[ipv4-addr:value = '103.80.132.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5c394589-2e60-5c06-b75b-2dd8e400a15d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.76.84.0/22",
      "pattern": "[ipv4-addr:value = '103.76.84.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fc39e022-5100-5a8d-b16a-241e0c27b5ca",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.72.200.0/24",
      "pattern": "[ipv4-addr:value = '103.72.200.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--efb17d5e-eadf-528c-817d-09662b4b2c0d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.7.198.0/23",
      "pattern": "[ipv4-addr:value = '103.7.198.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1b225f88-5d23-5ecd-bbc8-5151e2600186",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.67.252.0/22",
      "pattern": "[ipv4-addr:value = '103.67.252.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7838a98e-9317-5f88-a93c-d870d5543578",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.6.36.0/22",
      "pattern": "[ipv4-addr:value = '103.6.36.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8b6bd1fd-e602-580b-a937-2659bca997a3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.58.68.0/22",
      "pattern": "[ipv4-addr:value = '103.58.68.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--271d5212-a99a-56a3-80df-8772b5eb9d9f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.56.112.0/22",
      "pattern": "[ipv4-addr:value = '103.56.112.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c88bb3c5-b97d-5fb9-82f0-4b44d07d5eeb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.55.84.0/22",
      "pattern": "[ipv4-addr:value = '103.55.84.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4fcf7110-9db8-5904-aac3-eb68886a923f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.54.164.0/22",
      "pattern": "[ipv4-addr:value = '103.54.164.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0ebdc2ab-2d09-5363-920f-ad5b24127b99",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.52.48.0/22",
      "pattern": "[ipv4-addr:value = '103.52.48.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1edf8ed5-3b0f-57e8-acf0-7b4d759bf4f4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.5.116.0/22",
      "pattern": "[ipv4-addr:value = '103.5.116.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--72b9356f-e9ae-5d54-b4ae-db5c9cc87ea9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.48.36.0/22",
      "pattern": "[ipv4-addr:value = '103.48.36.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6605e51e-a5e2-5ac6-9918-9a891c60d95f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.48.136.0/22",
      "pattern": "[ipv4-addr:value = '103.48.136.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dc304a2d-3ee3-5a64-b283-f3b687e26d1c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.44.208.0/22",
      "pattern": "[ipv4-addr:value = '103.44.208.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a2adf65c-acd2-56e3-97aa-752ee01d7768",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.43.140.0/22",
      "pattern": "[ipv4-addr:value = '103.43.140.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8ae5cb11-5604-5a50-8718-d386a61a0f97",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.40.96.0/22",
      "pattern": "[ipv4-addr:value = '103.40.96.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b96325f8-cf7f-5be8-b9f4-59e91e5428eb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.40.8.0/24",
      "pattern": "[ipv4-addr:value = '103.40.8.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--161ca5e2-6141-5127-b456-a63ec061111c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.40.52.0/23",
      "pattern": "[ipv4-addr:value = '103.40.52.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--53a75063-d0c3-5e95-bcb2-d4f710ee27c1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.4.32.0/22",
      "pattern": "[ipv4-addr:value = '103.4.32.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bec10fd8-7ac1-5b12-93f5-e8380b4496e0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.39.108.0/22",
      "pattern": "[ipv4-addr:value = '103.39.108.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ab98ac58-f8fd-5a27-bf9f-d1a66da1c2c3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.37.118.0/24",
      "pattern": "[ipv4-addr:value = '103.37.118.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aa047ae5-007e-53f0-bd49-c75753760868",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.36.64.0/22",
      "pattern": "[ipv4-addr:value = '103.36.64.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f80c5378-2e4a-5e6f-8945-7fc4800c744b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.34.0.0/16",
      "pattern": "[ipv4-addr:value = '103.34.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4dc083f7-3655-5cd3-b4c8-4f9c2fd8f1eb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.32.132.0/22",
      "pattern": "[ipv4-addr:value = '103.32.132.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--032b8cec-3cde-51b2-b620-65435fa641c2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.32.0.0/16",
      "pattern": "[ipv4-addr:value = '103.32.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--73958a8f-5832-5971-a6a0-d8935ca799f2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.30.40.0/22",
      "pattern": "[ipv4-addr:value = '103.30.40.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5b2a0409-12b4-5ba2-b014-dcbd97f8b360",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.30.12.0/22",
      "pattern": "[ipv4-addr:value = '103.30.12.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f9f96e83-3806-5bae-b543-c9e245755016",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.3.212.0/22",
      "pattern": "[ipv4-addr:value = '103.3.212.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9af2e04c-100f-5f28-b022-5f03b768c3b2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.29.120.0/22",
      "pattern": "[ipv4-addr:value = '103.29.120.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--85ff1c6b-5094-56e9-a80e-1c5a1ee26ccf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.27.248.0/22",
      "pattern": "[ipv4-addr:value = '103.27.248.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b61692d4-20e0-51bd-a5ba-eaf129bd78f4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.254.108.0/22",
      "pattern": "[ipv4-addr:value = '103.254.108.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--94f580b9-ebf9-570a-ac6b-27233c593c99",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.253.216.0/22",
      "pattern": "[ipv4-addr:value = '103.253.216.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dfdbfa61-91d7-530d-aec7-9725f80bb019",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.250.224.0/22",
      "pattern": "[ipv4-addr:value = '103.250.224.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--841772ab-9395-54f1-baf3-c1ee4dcdca0e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.25.88.0/22",
      "pattern": "[ipv4-addr:value = '103.25.88.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--86af7ed9-7aca-5518-85ec-a453bc381820",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.249.72.0/22",
      "pattern": "[ipv4-addr:value = '103.249.72.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--75809207-e12b-50e9-af11-a021cb387285",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.248.76.0/22",
      "pattern": "[ipv4-addr:value = '103.248.76.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--63dc63e9-457e-5ee1-b58c-f2dc3dddee37",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.248.68.0/22",
      "pattern": "[ipv4-addr:value = '103.248.68.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cbf438fc-301b-5ef1-9590-9c53d4d49f1e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.246.244.0/22",
      "pattern": "[ipv4-addr:value = '103.246.244.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ea9c1c6d-207e-5754-a193-56c7e43cc20f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.243.240.0/22",
      "pattern": "[ipv4-addr:value = '103.243.240.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--01470673-fdf9-5394-be36-21fe08cfb525",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.243.152.0/22",
      "pattern": "[ipv4-addr:value = '103.243.152.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4636bf75-274c-5a18-99be-addc97a4af15",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.240.252.0/22",
      "pattern": "[ipv4-addr:value = '103.240.252.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fdb0d081-c3d1-5922-896c-0ff8f99e56c0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.240.116.0/22",
      "pattern": "[ipv4-addr:value = '103.240.116.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9ce0e799-3c47-562d-a06b-a3d6dac99c53",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.24.0.0/22",
      "pattern": "[ipv4-addr:value = '103.24.0.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3e373b60-8107-51fa-a5f4-50def44abec2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.237.86.0/23",
      "pattern": "[ipv4-addr:value = '103.237.86.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--641e4890-15d6-5e18-8322-5f421c2a3b77",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.236.32.0/22",
      "pattern": "[ipv4-addr:value = '103.236.32.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7b09ede1-45e8-555b-b27b-b0b20b9ad4f0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.232.36.0/22",
      "pattern": "[ipv4-addr:value = '103.232.36.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aea102ab-fcfc-52cf-b07e-f084e471c246",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.232.200.0/22",
      "pattern": "[ipv4-addr:value = '103.232.200.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2d2feb96-8ceb-5598-a9af-ff49edfe501e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.231.12.0/22",
      "pattern": "[ipv4-addr:value = '103.231.12.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cb82eb9c-eadb-5144-998c-0bec5a82eb05",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.230.24.0/22",
      "pattern": "[ipv4-addr:value = '103.230.24.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--36593d5f-c803-5dc2-87c9-aad88efd35e7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.23.12.0/22",
      "pattern": "[ipv4-addr:value = '103.23.12.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bdd5cf7c-0296-5d0e-a88e-fe66ac3712a5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.229.124.0/22",
      "pattern": "[ipv4-addr:value = '103.229.124.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--42aae532-8465-55fd-805c-c3f3239c3fa0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.228.60.0/22",
      "pattern": "[ipv4-addr:value = '103.228.60.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4647369a-779e-53ef-bb2b-200e2112ee50",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.228.196.0/22",
      "pattern": "[ipv4-addr:value = '103.228.196.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fc10930c-4ddc-5b57-aeae-f7524389cba1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.225.144.0/22",
      "pattern": "[ipv4-addr:value = '103.225.144.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--93c1122b-c020-50e6-b7ff-ba50cce6b63d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.215.80.0/22",
      "pattern": "[ipv4-addr:value = '103.215.80.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d74e5ced-5c19-5fec-b8fe-abe1259fc2f3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.212.32.0/22",
      "pattern": "[ipv4-addr:value = '103.212.32.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--32c09a4a-9587-5ef2-ac7a-d0a6e4b04077",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.209.192.0/22",
      "pattern": "[ipv4-addr:value = '103.209.192.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e00a5650-e388-5f47-a469-d1f084eef242",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.200.28.0/22",
      "pattern": "[ipv4-addr:value = '103.200.28.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c41df1f7-e948-53b3-980a-0b0fbf163755",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.20.72.0/22",
      "pattern": "[ipv4-addr:value = '103.20.72.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--43438e4d-70ee-52dc-8690-e320a41c33ed",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.20.156.0/22",
      "pattern": "[ipv4-addr:value = '103.20.156.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d0d00e37-9fdd-58f9-974a-f436168b6cd4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.198.36.0/22",
      "pattern": "[ipv4-addr:value = '103.198.36.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--864eb432-03cf-5c49-9cf6-7810f371d8c4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.195.144.0/22",
      "pattern": "[ipv4-addr:value = '103.195.144.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--52528eff-11fc-58d7-8c2a-a5e1e0181000",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.193.184.0/22",
      "pattern": "[ipv4-addr:value = '103.193.184.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2a8ec07c-757a-5b53-83ef-d04f4d8bcf21",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.193.150.0/24",
      "pattern": "[ipv4-addr:value = '103.193.150.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ffbeb5d0-dc75-5bb4-a6ed-82393b5f9132",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.193.148.0/24",
      "pattern": "[ipv4-addr:value = '103.193.148.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--781abe47-cdac-5423-abc7-06499ce8b00f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.192.228.0/22",
      "pattern": "[ipv4-addr:value = '103.192.228.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a6d1d324-0c23-56b5-adb1-a68ea63316a4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.19.188.0/22",
      "pattern": "[ipv4-addr:value = '103.19.188.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ce86f418-36be-59b1-ae5d-5eff82ad7fba",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.19.116.0/22",
      "pattern": "[ipv4-addr:value = '103.19.116.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--db2323e1-dd16-5d1f-8be5-6040ab03b9a8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.185.162.0/23",
      "pattern": "[ipv4-addr:value = '103.185.162.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--200deca6-aa74-5290-8d1e-599a90a13b9f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.185.134.0/23",
      "pattern": "[ipv4-addr:value = '103.185.134.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--67f2ce19-894c-5c1f-a512-319b1f50e577",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.184.162.0/23",
      "pattern": "[ipv4-addr:value = '103.184.162.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b51542fe-413b-50b3-bba3-dbcfd26abdeb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.180.180.0/23",
      "pattern": "[ipv4-addr:value = '103.180.180.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dc9adf22-5ad4-5f71-9a3c-0194c94af7e2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.179.148.0/24",
      "pattern": "[ipv4-addr:value = '103.179.148.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7a5e5751-8fc3-5e45-a44b-aa1970eba842",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.177.238.0/23",
      "pattern": "[ipv4-addr:value = '103.177.238.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9d2b1257-e18b-55ed-89bc-276cdf872aa6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.177.228.0/23",
      "pattern": "[ipv4-addr:value = '103.177.228.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2098a5ac-e506-533a-a158-e039c2e7875b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.176.192.0/23",
      "pattern": "[ipv4-addr:value = '103.176.192.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--97bc655f-dbef-5622-be6a-5779c4ed9a9a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.174.130.0/23",
      "pattern": "[ipv4-addr:value = '103.174.130.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--50f9dc7e-d34c-5d93-91d3-57d238c1c8bf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.173.40.0/24",
      "pattern": "[ipv4-addr:value = '103.173.40.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9dff6e6b-b37f-5f41-bfdd-a39ad29855be",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.171.86.0/24",
      "pattern": "[ipv4-addr:value = '103.171.86.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--85631be4-59ae-5aa2-aabc-e849114b43ee",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.171.236.0/23",
      "pattern": "[ipv4-addr:value = '103.171.236.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--87bd02ed-8e9b-5456-baae-6606ae9f5ac2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.163.50.0/23",
      "pattern": "[ipv4-addr:value = '103.163.50.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--232f4040-3abd-57b2-b91d-3843661afa46",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.157.75.0/24",
      "pattern": "[ipv4-addr:value = '103.157.75.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1c3f1aea-7dc5-5ac1-a096-da490a68f1f1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.155.92.0/23",
      "pattern": "[ipv4-addr:value = '103.155.92.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aa52125a-7876-5a73-b545-ec63fc7e8c60",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.155.236.0/24",
      "pattern": "[ipv4-addr:value = '103.155.236.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--66539104-a848-56d8-a3b2-6e19c4d52627",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.148.42.0/24",
      "pattern": "[ipv4-addr:value = '103.148.42.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eb494028-d888-523a-859c-8538a8c4e25c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.146.208.0/23",
      "pattern": "[ipv4-addr:value = '103.146.208.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2bc2770e-64e7-5b1c-acb9-99e52b0f2523",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.133.136.0/23",
      "pattern": "[ipv4-addr:value = '103.133.136.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bffb2aea-30de-54fd-b7d2-a9ce012c7b04",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.13.140.0/22",
      "pattern": "[ipv4-addr:value = '103.13.140.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3f8dd972-738e-576a-9ffb-a5b56db1eb58",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.122.223.0/24",
      "pattern": "[ipv4-addr:value = '103.122.223.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ece54416-2416-5602-bf20-5ef09958595b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.12.220.0/22",
      "pattern": "[ipv4-addr:value = '103.12.220.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--684f023f-4d74-5577-bde6-83a1b1ca6812",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.119.0.0/22",
      "pattern": "[ipv4-addr:value = '103.119.0.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4f0aa90b-49f0-5235-93e4-7b85fe13d2ea",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.118.246.0/24",
      "pattern": "[ipv4-addr:value = '103.118.246.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d85d9338-d294-5a39-985d-3bb6c12970bc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.118.244.0/22",
      "pattern": "[ipv4-addr:value = '103.118.244.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5395375e-2040-5481-9395-f701812af7d0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.118.241.0/24",
      "pattern": "[ipv4-addr:value = '103.118.241.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3cc34591-a96a-53b1-9cdf-d23aa558549d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.118.196.0/22",
      "pattern": "[ipv4-addr:value = '103.118.196.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bdab2ab4-c6b1-5394-9fa2-edda200bb3e7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.115.56.0/22",
      "pattern": "[ipv4-addr:value = '103.115.56.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ce76df0b-cd5a-5fc5-afa1-cdc344f92fa6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.115.48.0/22",
      "pattern": "[ipv4-addr:value = '103.115.48.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0d2b9d04-bb7c-515d-ae76-a6778b4326ce",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.113.144.0/22",
      "pattern": "[ipv4-addr:value = '103.113.144.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e0877906-b3dd-5306-83aa-54af6f36f3d2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.112.184.0/22",
      "pattern": "[ipv4-addr:value = '103.112.184.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fd6741ce-285e-5686-8069-64355f3d5969",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.112.172.0/22",
      "pattern": "[ipv4-addr:value = '103.112.172.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f99c1a45-3e1e-596b-ad00-a7f3563c4979",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.110.104.0/22",
      "pattern": "[ipv4-addr:value = '103.110.104.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2df680e2-aab5-5ebc-a992-a4502f59cce3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.109.28.0/22",
      "pattern": "[ipv4-addr:value = '103.109.28.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f403089b-87f1-566a-9d53-f9cebc61ecfa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.109.107.0/24",
      "pattern": "[ipv4-addr:value = '103.109.107.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aa1dc729-fc64-5ee0-8000-c365bf9472a5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.107.20.0/22",
      "pattern": "[ipv4-addr:value = '103.107.20.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--01d0825a-d5a8-5609-84d1-c211a0ae5014",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.106.160.0/22",
      "pattern": "[ipv4-addr:value = '103.106.160.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5cd839d3-bbdd-5274-942d-b2315d1cfb2a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.104.0.0/21",
      "pattern": "[ipv4-addr:value = '103.104.0.0/21']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1021b85e-d838-5a66-9a8f-49ee3ada822c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.102.236.0/22",
      "pattern": "[ipv4-addr:value = '103.102.236.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1ced72aa-4977-5a31-876c-3603d1730c27",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.100.156.0/22",
      "pattern": "[ipv4-addr:value = '103.100.156.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a406665b-99b9-5ca8-8222-212551d6cc83",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:103.1.43.0/24",
      "pattern": "[ipv4-addr:value = '103.1.43.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--89c64e2e-ac9b-58f1-a540-dd57580c39df",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:102.240.1.0/24",
      "pattern": "[ipv4-addr:value = '102.240.1.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b6ce6891-554a-5214-b701-7232b8d69766",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:102.220.160.0/22",
      "pattern": "[ipv4-addr:value = '102.220.160.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9db22f3c-0184-5c32-a1ae-0875e7ee10a2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:102.220.112.0/22",
      "pattern": "[ipv4-addr:value = '102.220.112.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--44c16104-3d92-5f80-bef8-23d3f883a5af",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:102.135.106.0/24",
      "pattern": "[ipv4-addr:value = '102.135.106.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6c2253d6-4dc8-569b-a5ea-a8f55fe8207d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:102.135.105.0/24",
      "pattern": "[ipv4-addr:value = '102.135.105.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8dae3d6e-ee30-5683-9160-e7e7937feaaf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:102.134.32.0/19",
      "pattern": "[ipv4-addr:value = '102.134.32.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--05e12446-a943-59d5-8633-e0354489a802",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:102.129.152.0/24",
      "pattern": "[ipv4-addr:value = '102.129.152.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f9eecf83-26f3-5843-8271-45159c057342",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:101.99.95.0/24",
      "pattern": "[ipv4-addr:value = '101.99.95.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--65bd73a5-90f4-56d3-a730-318c742ae502",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:101.99.94.0/24",
      "pattern": "[ipv4-addr:value = '101.99.94.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b9b19228-a6a0-522e-bc16-7fdf1e2ff522",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:101.99.93.0/24",
      "pattern": "[ipv4-addr:value = '101.99.93.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--40d6d56d-1080-5655-9ed3-0e6de2d1aca5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:101.99.92.0/24",
      "pattern": "[ipv4-addr:value = '101.99.92.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--30003494-a4a8-58a8-a03d-8814f8be989b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:101.99.90.0/23",
      "pattern": "[ipv4-addr:value = '101.99.90.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--82c02cec-0d81-5301-b430-4673bb7ae608",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:101.99.88.0/23",
      "pattern": "[ipv4-addr:value = '101.99.88.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--144497df-609a-5a5e-8986-0e8ad2b8073b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:101.99.85.0/24",
      "pattern": "[ipv4-addr:value = '101.99.85.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1cea4224-9b22-5a38-bcaf-79ba9007e439",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:101.99.82.0/23",
      "pattern": "[ipv4-addr:value = '101.99.82.0/23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aa58e37d-3afa-5267-9bbe-f94540d8d340",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:101.99.76.0/24",
      "pattern": "[ipv4-addr:value = '101.99.76.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8c83e6c6-5bd6-5b4a-a183-89c332b10aa6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:101.99.75.0/24",
      "pattern": "[ipv4-addr:value = '101.99.75.0/24']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--01e9738d-c53b-547f-a83e-90284c65d823",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:101.36.96.0/19",
      "pattern": "[ipv4-addr:value = '101.36.96.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4aeea63f-4b07-591b-b206-0a0b751b1136",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:101.203.128.0/19",
      "pattern": "[ipv4-addr:value = '101.203.128.0/19']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5331630e-3f81-5dd9-8890-f9a5228af96b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:101.193.116.0/22",
      "pattern": "[ipv4-addr:value = '101.193.116.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--740a36b1-dc48-57b9-8ced-476a8fdf697b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:101.193.104.0/22",
      "pattern": "[ipv4-addr:value = '101.193.104.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3b504581-54a7-55b7-84a7-d8c4c731c31f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:101.192.84.0/22",
      "pattern": "[ipv4-addr:value = '101.192.84.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--32285ca5-0ed6-55c5-b581-62561129dd64",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:101.192.72.0/22",
      "pattern": "[ipv4-addr:value = '101.192.72.0/22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8f87b066-bb08-55c1-b323-ea021a7e81e5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:101.134.0.0/15",
      "pattern": "[ipv4-addr:value = '101.134.0.0/15']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fb788f57-9790-5477-a8cb-1d177f32a0c0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:101.0.16.0/20",
      "pattern": "[ipv4-addr:value = '101.0.16.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--539446e2-5f1d-5f5f-8067-7fbdf8faea06",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:1.32.128.0/18",
      "pattern": "[ipv4-addr:value = '1.32.128.0/18']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--48631649-661d-5ed5-9b3b-f2acf6fd06bc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:1.19.0.0/16",
      "pattern": "[ipv4-addr:value = '1.19.0.0/16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--65fea979-94a4-5c5b-8d5e-c7a83295b724",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4_cidr:1.10.16.0/20",
      "pattern": "[ipv4-addr:value = '1.10.16.0/20']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:16:22Z",
      "confidence": 80,
      "labels": [
        "drop",
        "spamhaus"
      ],
      "x_swiftioc_source": "spamhaus_drop",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://www.spamhaus.org/blocklists/do-not-route-or-peer/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--31446aaf-1229-52cc-a441-f6aa71ffeb82",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:loseweightandlookyounger[.]com",
      "pattern": "[domain-name:value = 'loseweightandlookyounger.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:15:55Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f02fa471-2202-54a7-8f37-435cdd494293",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:d1f88784810e77e7ec513a41b21919266c0b91ae27e2cf80813a31d5e5d4057f",
      "pattern": "[file:hashes.'SHA-256' = 'd1f88784810e77e7ec513a41b21919266c0b91ae27e2cf80813a31d5e5d4057f']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:13:52Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "macOS",
        "nova",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0621e06e-af7e-5568-a0c0-dad6f695bcbe",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:impaq[.]us",
      "pattern": "[domain-name:value = 'impaq.us']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:11:35Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5be746b0-4189-502b-b1c9-d0c366608aa1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:dee4287440f166c97141fc4709289dd5effd65b2f64a55eda3c24a60515bc7aa",
      "pattern": "[file:hashes.'SHA-256' = 'dee4287440f166c97141fc4709289dd5effd65b2f64a55eda3c24a60515bc7aa']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:11:06Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "haven",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e0aa8a7b-c2d1-5228-a860-cb144d72c359",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:58ba3bffc382666a6b5fe0c52066e69282fb11cdaf93eb54c5e7f5b373b4e891",
      "pattern": "[file:hashes.'SHA-256' = '58ba3bffc382666a6b5fe0c52066e69282fb11cdaf93eb54c5e7f5b373b4e891']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:08:18Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "chant",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--081d379c-397d-5d74-84ab-9b3f68c6d742",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:42[.]192[.]106[.]170",
      "pattern": "[ipv4-addr:value = '42.192.106.170']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:05:04Z",
      "confidence": 80,
      "labels": [
        "Vshell",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f4918676-b27a-599e-8242-196f8bd2d1d6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://182[.]118[.]243[.]66:52235/i",
      "pattern": "[url:value = 'http://182.118.243.66:52235/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:02:07Z",
      "confidence": 80,
      "labels": [
        "None",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b1806257-9ce1-5701-ac8f-71d108bf9603",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://42[.]86[.]115[.]62:59754/i",
      "pattern": "[url:value = 'http://42.86.115.62:59754/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T15:02:05Z",
      "confidence": 80,
      "labels": [
        "None",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3fc700a2-70cb-52f2-ab8a-4dcdcb1fb2ea",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:kfzgutachterputzke[.]de",
      "pattern": "[domain-name:value = 'kfzgutachterputzke.de']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:52:01Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1a525793-3751-5abf-be1e-9be82f4dddff",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:kidden[.]com[.]mx",
      "pattern": "[domain-name:value = 'kidden.com.mx']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:49:18Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2cd3a80b-f970-5c47-9ce0-a349429b1776",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://113[.]53[.]69[.]133:35531/bin[.]sh",
      "pattern": "[url:value = 'http://113.53.69.133:35531/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:47:05Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "mirai"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f6f6ef28-c40f-5ab5-935f-b359b722dd59",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:691700cf605aab9ea038f916297067d921ef9a4d9ee7e78fc15c1d31cb1a026f",
      "pattern": "[file:hashes.'SHA-256' = '691700cf605aab9ea038f916297067d921ef9a4d9ee7e78fc15c1d31cb1a026f']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:44:59Z",
      "confidence": 80,
      "labels": [
        "Mirai",
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f199b774-76d7-5d42-9817-2e62f01eb67e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:4d4b4e09d271be91c5682672f9b3a1133aa8500e838d5746e87ea67e67b6132b",
      "pattern": "[file:hashes.'SHA-256' = '4d4b4e09d271be91c5682672f9b3a1133aa8500e838d5746e87ea67e67b6132b']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:44:56Z",
      "confidence": 80,
      "labels": [
        "Mirai",
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--513abd1d-df09-5906-8a5c-0666ed30e049",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:a4044b5ab155251a77edaab65750953b9587073d0351478d71e8da1591472e80",
      "pattern": "[file:hashes.'SHA-256' = 'a4044b5ab155251a77edaab65750953b9587073d0351478d71e8da1591472e80']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:44:44Z",
      "confidence": 80,
      "labels": [
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b8c01330-29c0-5f64-91ac-a09959f371b1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:094d2147548839ba5ed36d884983aaf14bd7ae650095dec96a1cf537d3b23b48",
      "pattern": "[file:hashes.'SHA-256' = '094d2147548839ba5ed36d884983aaf14bd7ae650095dec96a1cf537d3b23b48']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:43:51Z",
      "confidence": 80,
      "labels": [
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dbf26ec7-c089-54d7-8f8a-0c353410edf7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:92b5e29d2b71a6e4a18dc244ff3ed68d363d101a5e7409f872bb1ecd6360123e",
      "pattern": "[file:hashes.'SHA-256' = '92b5e29d2b71a6e4a18dc244ff3ed68d363d101a5e7409f872bb1ecd6360123e']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:43:29Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "macOS",
        "quill",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--edc17b23-1d73-5cbb-b791-31a39695399b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:35dcbbd2c5315df0e276733792bf49c0aa44ba1a4f38e12db96662ae86c9af68",
      "pattern": "[file:hashes.'SHA-256' = '35dcbbd2c5315df0e276733792bf49c0aa44ba1a4f38e12db96662ae86c9af68']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:42:59Z",
      "confidence": 80,
      "labels": [
        "Mirai",
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b6d04d85-9670-56e9-bd1d-8b967cb3140d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:e9dab84cf82a215f7e236c924f270e175bf32d0ce025eed1a7207fc07d4c3245",
      "pattern": "[file:hashes.'SHA-256' = 'e9dab84cf82a215f7e236c924f270e175bf32d0ce025eed1a7207fc07d4c3245']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:42:57Z",
      "confidence": 80,
      "labels": [
        "Mirai",
        "elf",
        "malware",
        "threatfox"
      ],
      "x_swiftioc_source": "malwarebazaar_recent,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f3f0c5ea-ac35-54b2-9f9c-ca555b558e25",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:c8409ce0adbe507cccbb23ada6c7cea302cdb1a4249e412de9bfd7749af60246",
      "pattern": "[file:hashes.'SHA-256' = 'c8409ce0adbe507cccbb23ada6c7cea302cdb1a4249e412de9bfd7749af60246']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:38:21Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "forge",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f9aee95b-8ccd-58e9-9f79-21e55cafef28",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:1410abc50a5418e35c04da75a38fb47192e5725a3425ade11e04bc60ce8e5d9f",
      "pattern": "[file:hashes.'SHA-256' = '1410abc50a5418e35c04da75a38fb47192e5725a3425ade11e04bc60ce8e5d9f']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:35:32Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "boost",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d444bd56-12de-5deb-bb18-4962ac5740e5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:e27e963b2b49cc758ddd65456d335d0183ca9ddc54349494d6a9f49d7c0603f4",
      "pattern": "[file:hashes.'SHA-256' = 'e27e963b2b49cc758ddd65456d335d0183ca9ddc54349494d6a9f49d7c0603f4']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:35:03Z",
      "confidence": 80,
      "labels": [
        "Mirai",
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1f0b9481-52c9-5808-b702-351d332b2fa0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:5108df9e7c1bd7e2e252c1ea7b11d6e1e2159f70a0d8d56b0cbc1cad5a351151",
      "pattern": "[file:hashes.'SHA-256' = '5108df9e7c1bd7e2e252c1ea7b11d6e1e2159f70a0d8d56b0cbc1cad5a351151']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:35:00Z",
      "confidence": 80,
      "labels": [
        "Mirai",
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--142eb4d9-903a-5dd2-96c3-67c89f4a527e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://213[.]232[.]114[.]14/watchdogd",
      "pattern": "[url:value = 'http://213.232.114.14/watchdogd']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:34:20Z",
      "confidence": 80,
      "labels": [
        "Gafgyt",
        "elf",
        "handshake",
        "honeypot",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--78843776-01ce-5b08-9000-ba15f668f5a2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://213[.]232[.]114[.]14/telnetd",
      "pattern": "[url:value = 'http://213.232.114.14/telnetd']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:34:20Z",
      "confidence": 80,
      "labels": [
        "Gafgyt",
        "elf",
        "handshake",
        "honeypot",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c817d9d3-f1a7-566b-8d3b-06c8c8290dce",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://213[.]232[.]114[.]14/telnet",
      "pattern": "[url:value = 'http://213.232.114.14/telnet']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:34:20Z",
      "confidence": 80,
      "labels": [
        "Gafgyt",
        "elf",
        "handshake",
        "honeypot",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dbf7bf61-143d-5a42-b9be-55a8123f7bba",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://213[.]232[.]114[.]14/systemd",
      "pattern": "[url:value = 'http://213.232.114.14/systemd']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:34:20Z",
      "confidence": 80,
      "labels": [
        "Gafgyt",
        "elf",
        "handshake",
        "honeypot",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--04d51b47-3dbd-52b9-ad31-4d64666c9354",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://213[.]232[.]114[.]14/sshd",
      "pattern": "[url:value = 'http://213.232.114.14/sshd']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:34:20Z",
      "confidence": 80,
      "labels": [
        "Gafgyt",
        "elf",
        "handshake",
        "honeypot",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--905f77c0-ac8b-57e3-b143-1f81b72d3559",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://213[.]232[.]114[.]14/ntpd",
      "pattern": "[url:value = 'http://213.232.114.14/ntpd']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:34:20Z",
      "confidence": 80,
      "labels": [
        "Gafgyt",
        "elf",
        "handshake",
        "honeypot",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5d07098f-288e-5183-b93e-ddac99d38ebd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://213[.]232[.]114[.]14/nokillbins/watchdogd",
      "pattern": "[url:value = 'http://213.232.114.14/nokillbins/watchdogd']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:34:20Z",
      "confidence": 80,
      "labels": [
        "Gafgyt",
        "elf",
        "handshake",
        "honeypot",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0628dfda-e9ca-5864-9dbb-38349917e165",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://213[.]232[.]114[.]14/nokillbins/telnetd",
      "pattern": "[url:value = 'http://213.232.114.14/nokillbins/telnetd']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:34:20Z",
      "confidence": 80,
      "labels": [
        "Gafgyt",
        "elf",
        "handshake",
        "honeypot",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--013b33b9-0129-58b2-8f32-da465912eb8a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://213[.]232[.]114[.]14/nokillbins/telnet",
      "pattern": "[url:value = 'http://213.232.114.14/nokillbins/telnet']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:34:20Z",
      "confidence": 80,
      "labels": [
        "Gafgyt",
        "elf",
        "handshake",
        "honeypot",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--149d4360-d881-54bc-b438-8dfd94c7eaba",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://213[.]232[.]114[.]14/nokillbins/systemd",
      "pattern": "[url:value = 'http://213.232.114.14/nokillbins/systemd']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:34:20Z",
      "confidence": 80,
      "labels": [
        "Gafgyt",
        "elf",
        "handshake",
        "honeypot",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--781065fb-9e2a-55e9-b201-ff0717a8f57b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://213[.]232[.]114[.]14/nokillbins/sshd",
      "pattern": "[url:value = 'http://213.232.114.14/nokillbins/sshd']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:34:20Z",
      "confidence": 80,
      "labels": [
        "Gafgyt",
        "elf",
        "handshake",
        "honeypot",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2ad0ed32-4f30-585b-ab73-8ff6efd2133f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://213[.]232[.]114[.]14/nokillbins/ntpd",
      "pattern": "[url:value = 'http://213.232.114.14/nokillbins/ntpd']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:34:20Z",
      "confidence": 80,
      "labels": [
        "Gafgyt",
        "elf",
        "handshake",
        "honeypot",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--26a60916-7b4d-5f65-a4cf-b70e7accb9da",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://213[.]232[.]114[.]14/nokillbins/ntp",
      "pattern": "[url:value = 'http://213.232.114.14/nokillbins/ntp']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:34:20Z",
      "confidence": 80,
      "labels": [
        "Gafgyt",
        "elf",
        "handshake",
        "honeypot",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--39aeaf2c-8d4a-59f5-888d-76541801c90a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://213[.]232[.]114[.]14/nokillbins/kworker",
      "pattern": "[url:value = 'http://213.232.114.14/nokillbins/kworker']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:34:20Z",
      "confidence": 80,
      "labels": [
        "Gafgyt",
        "elf",
        "handshake",
        "honeypot",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--95d3c9f1-26f6-519d-b441-9aa0a5974d4a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://213[.]232[.]114[.]14/nokillbins/kernal",
      "pattern": "[url:value = 'http://213.232.114.14/nokillbins/kernal']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:34:20Z",
      "confidence": 80,
      "labels": [
        "Gafgyt",
        "elf",
        "handshake",
        "honeypot",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3792405a-746b-51be-a937-e9ced183b0fd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://213[.]232[.]114[.]14/nokillbins/gnome",
      "pattern": "[url:value = 'http://213.232.114.14/nokillbins/gnome']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:34:20Z",
      "confidence": 80,
      "labels": [
        "Gafgyt",
        "elf",
        "handshake",
        "honeypot",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3f62a0a9-cbc0-5f1c-aee3-a1a030bf7029",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://213[.]232[.]114[.]14/nokillbins/getty",
      "pattern": "[url:value = 'http://213.232.114.14/nokillbins/getty']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:34:20Z",
      "confidence": 80,
      "labels": [
        "Gafgyt",
        "elf",
        "handshake",
        "honeypot",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--158969a3-30b3-580a-93e2-f6357e9bd589",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://213[.]232[.]114[.]14/nokillbins/ext4",
      "pattern": "[url:value = 'http://213.232.114.14/nokillbins/ext4']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:34:20Z",
      "confidence": 80,
      "labels": [
        "Gafgyt",
        "elf",
        "handshake",
        "honeypot",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6defadbb-b600-5b0c-b5ec-6a8fbe54d45c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://213[.]232[.]114[.]14/nokillbins/bash",
      "pattern": "[url:value = 'http://213.232.114.14/nokillbins/bash']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:34:20Z",
      "confidence": 80,
      "labels": [
        "Gafgyt",
        "elf",
        "handshake",
        "honeypot",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c62669f1-c890-5985-b17e-9486db1777cb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://213[.]232[.]114[.]14/ntp",
      "pattern": "[url:value = 'http://213.232.114.14/ntp']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:34:19Z",
      "confidence": 80,
      "labels": [
        "Gafgyt",
        "elf",
        "handshake",
        "honeypot",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--79274fac-2a07-58c6-839c-2b4720793471",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://213[.]232[.]114[.]14/kworker",
      "pattern": "[url:value = 'http://213.232.114.14/kworker']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:34:19Z",
      "confidence": 80,
      "labels": [
        "Gafgyt",
        "elf",
        "handshake",
        "honeypot",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ebf714ea-4b6b-5d7d-a722-444f35844ac2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://213[.]232[.]114[.]14/kernal",
      "pattern": "[url:value = 'http://213.232.114.14/kernal']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:34:19Z",
      "confidence": 80,
      "labels": [
        "Gafgyt",
        "elf",
        "handshake",
        "honeypot",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d66f3078-9b1b-531d-9b98-dfc3011bfbd5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://213[.]232[.]114[.]14/gnome",
      "pattern": "[url:value = 'http://213.232.114.14/gnome']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:34:19Z",
      "confidence": 80,
      "labels": [
        "Gafgyt",
        "elf",
        "handshake",
        "honeypot",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--14ab1bcf-bdc6-549b-966a-cad4e9a20430",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://213[.]232[.]114[.]14/getty",
      "pattern": "[url:value = 'http://213.232.114.14/getty']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:34:19Z",
      "confidence": 80,
      "labels": [
        "Gafgyt",
        "elf",
        "handshake",
        "honeypot",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--726c7a31-7ed9-5285-bc32-0b4b957f5fbe",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://213[.]232[.]114[.]14/ext4",
      "pattern": "[url:value = 'http://213.232.114.14/ext4']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:34:19Z",
      "confidence": 80,
      "labels": [
        "Gafgyt",
        "elf",
        "handshake",
        "honeypot",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--27dc9f1a-bf19-569b-bf74-31bbbba349ce",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://213[.]232[.]114[.]14/bash",
      "pattern": "[url:value = 'http://213.232.114.14/bash']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:34:19Z",
      "confidence": 80,
      "labels": [
        "Gafgyt",
        "elf",
        "handshake",
        "honeypot",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3385f520-ac8e-5404-b0f5-311aa9f2d7bb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:6390edad0acff5a15abcfea8786213b045b92f9c558ca45488dab9a7b9f343d7",
      "pattern": "[file:hashes.'SHA-256' = '6390edad0acff5a15abcfea8786213b045b92f9c558ca45488dab9a7b9f343d7']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:32:35Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "macOS",
        "stratos",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8b482043-fca5-58bb-aded-dc1423c0918a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://124[.]95[.]26[.]253:37062/i",
      "pattern": "[url:value = 'http://124.95.26.253:37062/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:32:07Z",
      "confidence": 80,
      "labels": [
        "None",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--94516d07-dac9-5e15-a639-bcbbab919865",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://220[.]198[.]113[.]45:49761/i",
      "pattern": "[url:value = 'http://220.198.113.45:49761/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:32:06Z",
      "confidence": 80,
      "labels": [
        "None",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--734fdae8-a624-5f1e-9698-0d8d1af74d0c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://123[.]11[.]99[.]175:37931/i",
      "pattern": "[url:value = 'http://123.11.99.175:37931/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:32:06Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "mirai"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7afe1ca4-40c6-5fc4-b7a5-18b37b811571",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://160[.]119[.]66[.]206/bins/net[.]x86_64",
      "pattern": "[url:value = 'http://160.119.66.206/bins/net.x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:32:01Z",
      "confidence": 80,
      "labels": [
        "Mirai",
        "elf",
        "honeypot",
        "kla",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8fea4d15-8686-57ca-ac1f-d0c06f170d41",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://160[.]119[.]66[.]206/bins/net[.]x86",
      "pattern": "[url:value = 'http://160.119.66.206/bins/net.x86']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:32:01Z",
      "confidence": 80,
      "labels": [
        "Mirai",
        "elf",
        "honeypot",
        "kla",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--79ff81fb-aa77-5c9b-9847-4833de866988",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://160[.]119[.]66[.]206/bins/net[.]sh4",
      "pattern": "[url:value = 'http://160.119.66.206/bins/net.sh4']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:32:01Z",
      "confidence": 80,
      "labels": [
        "Mirai",
        "elf",
        "honeypot",
        "kla",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--de2459ba-e9dd-5b13-9f89-2c018f4304cb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://160[.]119[.]66[.]206/bins/net[.]ppc",
      "pattern": "[url:value = 'http://160.119.66.206/bins/net.ppc']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:32:01Z",
      "confidence": 80,
      "labels": [
        "Mirai",
        "elf",
        "honeypot",
        "kla",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e02ba7fb-f168-504a-9ab3-4a1939274a3e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://160[.]119[.]66[.]206/bins/net[.]mpsl",
      "pattern": "[url:value = 'http://160.119.66.206/bins/net.mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:32:01Z",
      "confidence": 80,
      "labels": [
        "Mirai",
        "elf",
        "honeypot",
        "kla",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--120f6ed1-29de-5eed-b075-0056ffa6561e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://160[.]119[.]66[.]206/bins/net[.]mips",
      "pattern": "[url:value = 'http://160.119.66.206/bins/net.mips']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:32:00Z",
      "confidence": 80,
      "labels": [
        "Mirai",
        "elf",
        "honeypot",
        "kla",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4c3de730-40f5-5ce2-b837-74d36acc952a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://160[.]119[.]66[.]206/bins/net[.]m68k",
      "pattern": "[url:value = 'http://160.119.66.206/bins/net.m68k']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:32:00Z",
      "confidence": 80,
      "labels": [
        "Mirai",
        "elf",
        "honeypot",
        "kla",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--57a900d4-d405-5309-aa74-93481de00bac",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://160[.]119[.]66[.]206/bins/net[.]i686",
      "pattern": "[url:value = 'http://160.119.66.206/bins/net.i686']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:32:00Z",
      "confidence": 80,
      "labels": [
        "Mirai",
        "elf",
        "honeypot",
        "kla",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4267a898-623a-58d8-888e-cbf5a6077d2f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://160[.]119[.]66[.]206/bins/net[.]i486",
      "pattern": "[url:value = 'http://160.119.66.206/bins/net.i486']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:32:00Z",
      "confidence": 80,
      "labels": [
        "Mirai",
        "elf",
        "honeypot",
        "kla",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--142235f4-4f8f-55d2-892a-b76c25beaf12",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://160[.]119[.]66[.]206/bins/net[.]arm7",
      "pattern": "[url:value = 'http://160.119.66.206/bins/net.arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:32:00Z",
      "confidence": 80,
      "labels": [
        "Mirai",
        "elf",
        "honeypot",
        "kla",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--00d69b05-9da1-58a5-b3c4-8ad2dca363ce",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://160[.]119[.]66[.]206/bins/net[.]arm6",
      "pattern": "[url:value = 'http://160.119.66.206/bins/net.arm6']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:32:00Z",
      "confidence": 80,
      "labels": [
        "Mirai",
        "elf",
        "honeypot",
        "kla",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d4ed2e64-2531-565b-8b8e-f4a59b7f15ea",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://160[.]119[.]66[.]206/bins/net[.]arm5",
      "pattern": "[url:value = 'http://160.119.66.206/bins/net.arm5']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:32:00Z",
      "confidence": 80,
      "labels": [
        "Mirai",
        "elf",
        "honeypot",
        "kla",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1544dd54-8696-53b9-9742-cfaab39d3373",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://160[.]119[.]66[.]206/bins/net[.]arm",
      "pattern": "[url:value = 'http://160.119.66.206/bins/net.arm']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:32:00Z",
      "confidence": 80,
      "labels": [
        "Mirai",
        "elf",
        "honeypot",
        "kla",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a47b9ca5-10d1-5eb3-a05d-a46bc61c061e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://160[.]119[.]66[.]206/bins/net[.]arc",
      "pattern": "[url:value = 'http://160.119.66.206/bins/net.arc']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:32:00Z",
      "confidence": 80,
      "labels": [
        "Mirai",
        "elf",
        "honeypot",
        "kla",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e0f81a36-49a5-57f4-a328-9142685322ea",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://91[.]92[.]43[.]221/iranbot-ultimate[.]x86_32",
      "pattern": "[url:value = 'http://91.92.43.221/iranbot-ultimate.x86_32']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:30:19Z",
      "confidence": 80,
      "labels": [
        "IranBot",
        "Mirai",
        "elf",
        "honeypot",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--79a940a1-15f3-5ed1-ae78-1083e7eed4b7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://91[.]92[.]43[.]221/iranbot-ultimate[.]mipsel",
      "pattern": "[url:value = 'http://91.92.43.221/iranbot-ultimate.mipsel']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:30:19Z",
      "confidence": 80,
      "labels": [
        "IranBot",
        "Mirai",
        "elf",
        "honeypot",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--87541c98-7c72-59ba-9899-eda176065dbc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://91[.]92[.]43[.]221/iranbot-ultimate[.]mips",
      "pattern": "[url:value = 'http://91.92.43.221/iranbot-ultimate.mips']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:30:19Z",
      "confidence": 80,
      "labels": [
        "IranBot",
        "Mirai",
        "elf",
        "honeypot",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a7c9c877-14f6-5a0c-9048-0c120b7c831d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://91[.]92[.]43[.]221/iranbot-ultimate[.]armv4l",
      "pattern": "[url:value = 'http://91.92.43.221/iranbot-ultimate.armv4l']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:30:19Z",
      "confidence": 80,
      "labels": [
        "IranBot",
        "Mirai",
        "elf",
        "honeypot",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2cdeb1aa-90e2-537d-bef0-400bf4c86618",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://91[.]92[.]43[.]221/iranbot-ultimate[.]aarch64",
      "pattern": "[url:value = 'http://91.92.43.221/iranbot-ultimate.aarch64']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:30:19Z",
      "confidence": 80,
      "labels": [
        "IranBot",
        "Mirai",
        "elf",
        "honeypot",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b2b80c8a-d05e-5bb5-9b8f-4e6253b0e2b0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:3ca600304ed3255459adac6bb246e2690722700a24f50e4e3471d6ab6d02a8ac",
      "pattern": "[file:hashes.'SHA-256' = '3ca600304ed3255459adac6bb246e2690722700a24f50e4e3471d6ab6d02a8ac']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:29:46Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "grove",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--15b4d091-d637-5e24-a692-70493339f9a6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://31[.]56[.]209[.]86/x86_64",
      "pattern": "[url:value = 'http://31.56.209.86/x86_64']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:28:59Z",
      "confidence": 80,
      "labels": [
        "elf",
        "guardian",
        "honeypot",
        "proxy",
        "threatfox",
        "x86-64"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7e4f4e95-9d2e-5dfe-9649-ba04961946ff",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:loopsdigi[.]com",
      "pattern": "[domain-name:value = 'loopsdigi.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:28:33Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8b9ad7c7-409c-5050-8e9e-87dca3ea21ea",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:64[.]89[.]161[.]96",
      "pattern": "[ipv4-addr:value = '64.89.161.96']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:27:34Z",
      "confidence": 80,
      "labels": [
        "Gafgyt",
        "elf",
        "handshake",
        "honeypot",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--49180b05-f5f4-53dd-a52a-43732d30e0a4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:d4271f0fd617f941f5f5c3577780cabfb3e798d8bcda886efaa59289d62764d0",
      "pattern": "[file:hashes.'SHA-256' = 'd4271f0fd617f941f5f5c3577780cabfb3e798d8bcda886efaa59289d62764d0']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:27:00Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "frame97",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--49b62c10-2af7-5bf7-af4f-4104beebd515",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:176[.]65[.]139[.]201",
      "pattern": "[ipv4-addr:value = '176.65.139.201']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:25:37Z",
      "confidence": 80,
      "labels": [
        "DDoS",
        "golang",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3569a2a8-de39-5302-a08a-b81992194314",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:a602941cc76110852bad1ccfd5ec3053041e50c34bf0e53b4711595293d43425",
      "pattern": "[file:hashes.'SHA-256' = 'a602941cc76110852bad1ccfd5ec3053041e50c34bf0e53b4711595293d43425']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:24:13Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "frame",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--edc6204e-d0b9-5c39-b655-2174db61ccaf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:loja[.]panan[.]com[.]br",
      "pattern": "[domain-name:value = 'loja.panan.com.br']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:23:05Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--205aac71-2936-5b3f-a5f2-a4db1d60957c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:764a55eabf980717bb74b5ed59ea778961848bd00578801247ef48a9e1d38a38",
      "pattern": "[file:hashes.'SHA-256' = '764a55eabf980717bb74b5ed59ea778961848bd00578801247ef48a9e1d38a38']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:21:21Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "macOS",
        "nova",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--614385ae-9174-5ced-b0e2-a53ae981f453",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:f71dc6ed741cc4394455ea523e06e7913d22b6c197fb4817274201c9e0765cf6",
      "pattern": "[file:hashes.'SHA-256' = 'f71dc6ed741cc4394455ea523e06e7913d22b6c197fb4817274201c9e0765cf6']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:18:27Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "haven",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--57ba8675-99b4-5324-9efc-7382d3644b64",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://186[.]149[.]204[.]12:57174/i",
      "pattern": "[url:value = 'http://186.149.204.12:57174/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:17:08Z",
      "confidence": 80,
      "labels": [
        "None",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9d7b5866-f272-58f5-8232-1f0818e9fe9e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://125[.]41[.]97[.]150:46002/i",
      "pattern": "[url:value = 'http://125.41.97.150:46002/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:17:05Z",
      "confidence": 80,
      "labels": [
        "Mozi",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--98f5900d-90d5-5504-876d-a56e814f3ed5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:loja[.]acscientifica[.]com[.]br",
      "pattern": "[domain-name:value = 'loja.acscientifica.com.br']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:16:10Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8169badd-b3a2-5e7c-b76e-7d2ca9e4ae34",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:fcd4c21f131a2a0d89fe41e512ea0ca39e107b6b68eede003a32c4342bcbdbb6",
      "pattern": "[file:hashes.'SHA-256' = 'fcd4c21f131a2a0d89fe41e512ea0ca39e107b6b68eede003a32c4342bcbdbb6']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:15:37Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "chant",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c0f9a7db-2207-589a-bd4e-243e8518d956",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:minecraftsmp14[.]duckdns[.]org",
      "pattern": "[domain-name:value = 'minecraftsmp14.duckdns.org']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:15:28Z",
      "confidence": 80,
      "labels": [
        "IranBot",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6d286a7a-d4ee-5f98-accf-6718aafdf587",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:f5934bccc8f9bc452f7e1ad16f611ba856835673ab598efb32bdccd5231a5afb",
      "pattern": "[file:hashes.'SHA-256' = 'f5934bccc8f9bc452f7e1ad16f611ba856835673ab598efb32bdccd5231a5afb']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:12:50Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "macOS",
        "threatfox",
        "willow"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1831c1b7-b617-5913-a075-3d26c0500aac",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:715f1120ad1e2518105f6e66028f4d6fbd5b6e71a312d4f944ac3a6f6b435617",
      "pattern": "[file:hashes.'SHA-256' = '715f1120ad1e2518105f6e66028f4d6fbd5b6e71a312d4f944ac3a6f6b435617']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:10:53Z",
      "confidence": 80,
      "labels": [
        "Mirai",
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4637219a-e1aa-56c7-a1fa-e1ab6d8f5e18",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:iy[.]acunbet89[.]org",
      "pattern": "[domain-name:value = 'iy.acunbet89.org']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:05:48Z",
      "confidence": 80,
      "labels": [
        "Vidar",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b575df94-d4b0-578c-be6a-829324476d87",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://iy[.]acunbet89[.]org/",
      "pattern": "[url:value = 'https://iy.acunbet89.org/']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:05:48Z",
      "confidence": 80,
      "labels": [
        "Vidar",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a91bbb0c-67b2-53cc-9745-150581cb303e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:liverpoolenslaved[.]com",
      "pattern": "[domain-name:value = 'liverpoolenslaved.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:04:02Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d4e9e1dd-bb93-529e-a86c-d83e85b61da6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:c23e5ff7f6a526af814bbd789e197d13130aae0e96c474acdab60bd16fe6b3f1",
      "pattern": "[file:hashes.'SHA-256' = 'c23e5ff7f6a526af814bbd789e197d13130aae0e96c474acdab60bd16fe6b3f1']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:03:51Z",
      "confidence": 80,
      "labels": [
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f38389fc-6119-5f6f-a4cf-22a40ac0b1aa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://106[.]56[.]113[.]183:60859/i",
      "pattern": "[url:value = 'http://106.56.113.183:60859/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:02:18Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "mirai"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--83c95ff2-1306-5bb5-bb14-9fb5f85bd329",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://113[.]231[.]9[.]209:54444/i",
      "pattern": "[url:value = 'http://113.231.9.209:54444/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:02:13Z",
      "confidence": 80,
      "labels": [
        "None",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--feee6c10-4416-5b4d-b009-78de3458025c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://220[.]198[.]114[.]225:56944/i",
      "pattern": "[url:value = 'http://220.198.114.225:56944/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:02:08Z",
      "confidence": 80,
      "labels": [
        "None",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--18c35e63-86fb-558f-9d13-f3cc1b6b3ede",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://42[.]232[.]229[.]217:46603/i",
      "pattern": "[url:value = 'http://42.232.229.217:46603/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:02:06Z",
      "confidence": 80,
      "labels": [
        "None",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6f82d511-9e23-5dbd-b3ef-a0dc70322ab9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://27[.]44[.]147[.]208:43172/i",
      "pattern": "[url:value = 'http://27.44.147.208:43172/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:02:06Z",
      "confidence": 80,
      "labels": [
        "None",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f73a7011-298b-50c3-bb75-a1a63b8b3b5e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:65ea96cd0ccc55518af2f397efda1bc8ae0b2a3cd32972b8533706480ce119f3",
      "pattern": "[file:hashes.'SHA-256' = '65ea96cd0ccc55518af2f397efda1bc8ae0b2a3cd32972b8533706480ce119f3']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T14:00:03Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "malware",
        "threatfox"
      ],
      "x_swiftioc_source": "malwarebazaar_recent,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dc8f768b-240b-5c8f-9080-4eba7169e498",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://182[.]233[.]3[.]133:43326/i",
      "pattern": "[url:value = 'http://182.233.3.133:43326/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:58:18Z",
      "confidence": 80,
      "labels": [
        "Mozi",
        "arm",
        "cowrie",
        "elf",
        "honeypot",
        "malware",
        "malware_download",
        "mirai"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a87adba4-662f-5d2e-bddd-655a5d161aee",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:144[.]31[.]108[.]194",
      "pattern": "[ipv4-addr:value = '144.31.108.194']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:56:14Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cd8a8dd3-ae8a-50cc-81e2-5dfdea659fe7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:b769fc47de0d6169962d52bb782d14df55a905b67ea5d7e5fd779010109e3763",
      "pattern": "[file:hashes.'SHA-256' = 'b769fc47de0d6169962d52bb782d14df55a905b67ea5d7e5fd779010109e3763']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:56:07Z",
      "confidence": 80,
      "labels": [
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--119511e5-48b9-5d4d-9962-0be8712b84ed",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:979ea8f12ea0d0a53c9a32ae92c3990332c78b8891e8af675bda121dfe01d3d3",
      "pattern": "[file:hashes.'SHA-256' = '979ea8f12ea0d0a53c9a32ae92c3990332c78b8891e8af675bda121dfe01d3d3']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:50:17Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--baa51a16-9c54-55b1-b8c7-290def7938ad",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:levoncargo[.]com[.]br",
      "pattern": "[domain-name:value = 'levoncargo.com.br']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:50:08Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--db3b36bf-f4df-571b-ada6-e33a55629a51",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:45[.]153[.]219[.]189",
      "pattern": "[ipv4-addr:value = '45.153.219.189']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:49:39Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7334b654-3b0e-52d9-a491-94b9f178d034",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:45[.]12[.]62[.]97",
      "pattern": "[ipv4-addr:value = '45.12.62.97']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:49:39Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f52d15c9-b071-5518-942a-9e23a227b130",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:103[.]139[.]48[.]131",
      "pattern": "[ipv4-addr:value = '103.139.48.131']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:49:39Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9b90c75f-e525-5ea5-a369-1468b29b8fbe",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:2bdd795ab5ffd8a9f25c512e812ca604091229688eb114ae3be5796197dcb015",
      "pattern": "[file:hashes.'SHA-256' = '2bdd795ab5ffd8a9f25c512e812ca604091229688eb114ae3be5796197dcb015']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:49:19Z",
      "confidence": 80,
      "labels": [
        "CoinMiner",
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2a9bab56-ecaa-53ec-a865-f91d3509dc9a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:moggydaytrainer[.]com",
      "pattern": "[domain-name:value = 'moggydaytrainer.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:48:42Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--073ff713-e898-5f36-8c2b-4d4591d0ccdc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:cyberleakgta6[.]net",
      "pattern": "[domain-name:value = 'cyberleakgta6.net']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:48:42Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a49d42fc-88c7-59c9-8513-80483f609aad",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:cloudvault-app[.]com",
      "pattern": "[domain-name:value = 'cloudvault-app.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:48:42Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--23d2ee78-42dd-5099-813f-413c2d096c73",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:3f8028b2d52bab13a15d815a82cc8b8447187d6b2d28fa31a874d66cac429c2d",
      "pattern": "[file:hashes.'SHA-256' = '3f8028b2d52bab13a15d815a82cc8b8447187d6b2d28fa31a874d66cac429c2d']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:48:42Z",
      "confidence": 80,
      "labels": [
        "CoinMiner",
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ce714c97-d12b-5c4e-a2a0-cbccf35715d2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:dabe24be262d99119e6e4222e7902b5f015945de9f0b62bbde8a207d6ba88f1b",
      "pattern": "[file:hashes.'SHA-256' = 'dabe24be262d99119e6e4222e7902b5f015945de9f0b62bbde8a207d6ba88f1b']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:47:56Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e7c23aea-e796-5887-ace9-32b3441d99b7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "md5:d38da2a0e606258fc67e9a78d67f6c6f",
      "pattern": "[file:hashes.'MD5' = 'd38da2a0e606258fc67e9a78d67f6c6f']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:47:35Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dcff6e5e-1dfa-54d6-aca3-21fc030e75b6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:700d7caf6efe26cc31b6bbef7015036baebeb4e8116b433a15425746100e42d0",
      "pattern": "[file:hashes.'SHA-256' = '700d7caf6efe26cc31b6bbef7015036baebeb4e8116b433a15425746100e42d0']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:47:11Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--54d15747-94d5-598f-9bb7-54a0bf0617de",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://42[.]85[.]169[.]231:59538/i",
      "pattern": "[url:value = 'http://42.85.169.231:59538/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:47:07Z",
      "confidence": 80,
      "labels": [
        "None",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1f23bd10-d029-5b55-b94b-c093fd99348d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://123[.]9[.]87[.]106:54992/bin[.]sh",
      "pattern": "[url:value = 'http://123.9.87.106:54992/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:47:06Z",
      "confidence": 80,
      "labels": [
        "None",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--48793bd9-630f-5fea-95c0-9799e1ccba7c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:900ffdefc3647ee8e9e6269ecd394f46c10ea92687c6a3c409f959cfe4754e79",
      "pattern": "[file:hashes.'SHA-256' = '900ffdefc3647ee8e9e6269ecd394f46c10ea92687c6a3c409f959cfe4754e79']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:46:39Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "malware",
        "threatfox"
      ],
      "x_swiftioc_source": "malwarebazaar_recent,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0ee23004-0ec5-5139-bda0-90ee44faf79d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:206[.]237[.]4[.]234",
      "pattern": "[ipv4-addr:value = '206.237.4.234']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:45:58Z",
      "confidence": 80,
      "labels": [
        "CobaltStrike",
        "drb-ra",
        "modat",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f0efbd68-1f5a-5adb-8a10-d2c71750cc00",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:175[.]178[.]126[.]48",
      "pattern": "[ipv4-addr:value = '175.178.126.48']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:45:57Z",
      "confidence": 80,
      "labels": [
        "CobaltStrike",
        "drb-ra",
        "modat",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2fc23cc6-40c5-5fa8-acd2-c69d2486029a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:update[.]inteldrives[.]com",
      "pattern": "[domain-name:value = 'update.inteldrives.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:45:47Z",
      "confidence": 80,
      "labels": [
        "CobaltStrike",
        "drb-ra",
        "modat",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7eb9a7e7-b924-55a2-8425-26c3472924d5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:ce3c81a16ef577bfb9e0a5ea836834af54c332bf25974b5d01174c1858503258",
      "pattern": "[file:hashes.'SHA-256' = 'ce3c81a16ef577bfb9e0a5ea836834af54c332bf25974b5d01174c1858503258']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:45:03Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "forge",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--665a47af-5130-5fba-bec8-8e0f6418c831",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:4dc34b240a972474b036fa7813f1db6331c84909ad2d2eb345239e2f8919bf1f",
      "pattern": "[file:hashes.'SHA-256' = '4dc34b240a972474b036fa7813f1db6331c84909ad2d2eb345239e2f8919bf1f']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:44:47Z",
      "confidence": 80,
      "labels": [
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3b14242a-ae62-5c10-8fdd-d9fab683321a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:68a7dd84bfe373c54efa62b04e790158ea5ab82fc33d6d5dafb6e6a3bb2257ad",
      "pattern": "[file:hashes.'SHA-256' = '68a7dd84bfe373c54efa62b04e790158ea5ab82fc33d6d5dafb6e6a3bb2257ad']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:42:03Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "boost",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--015208fa-e99b-58cc-8718-118032df1fa3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:learn[.]investohalal[.]com",
      "pattern": "[domain-name:value = 'learn.investohalal.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:40:04Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--123d7c9e-03fe-5249-96b5-b2b873d6d2dd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:3d624472870963f33a5e902585557627733b9894a7f94f9e32bcd8c050eb5e39",
      "pattern": "[file:hashes.'SHA-256' = '3d624472870963f33a5e902585557627733b9894a7f94f9e32bcd8c050eb5e39']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:39:17Z",
      "confidence": 80,
      "labels": [
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--61dd85fc-c75e-54e6-891f-6a7ec0a36aa5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:8c00a6774d0b56c7b16ca540a4b1e16be7d11722f6a82fd325b006c88a24a613",
      "pattern": "[file:hashes.'SHA-256' = '8c00a6774d0b56c7b16ca540a4b1e16be7d11722f6a82fd325b006c88a24a613']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:39:15Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "macOS",
        "stratos",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a4e89238-7c2b-5a88-92df-f6aefa509a83",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:1947597498c5f6620f78d1d6b020761647e7dd72c0f3c7185e277b607b530e16",
      "pattern": "[file:hashes.'SHA-256' = '1947597498c5f6620f78d1d6b020761647e7dd72c0f3c7185e277b607b530e16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:36:17Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "grove",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cd822c11-3227-5829-be65-2002d2705e18",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:ce17e1126d1685c7b720c9e3bbfbde10cb5b81b0d51c4a0d53d5dcce58234a2c",
      "pattern": "[file:hashes.'SHA-256' = 'ce17e1126d1685c7b720c9e3bbfbde10cb5b81b0d51c4a0d53d5dcce58234a2c']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:34:46Z",
      "confidence": 80,
      "labels": [
        "Mirai",
        "elf",
        "malware",
        "threatfox"
      ],
      "x_swiftioc_source": "malwarebazaar_recent,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a2ec103c-1a6c-5d4c-8e1c-1b9694066620",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:74[.]0[.]32[.]71",
      "pattern": "[ipv4-addr:value = '74.0.32.71']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:34:04Z",
      "confidence": 80,
      "labels": [
        "Remus",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0c528aa0-6edf-586c-83c4-9530819b087c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:283d024268454bd13ba8a5f91d230a0a7d89eaa45ef761631812feb08ec17b70",
      "pattern": "[file:hashes.'SHA-256' = '283d024268454bd13ba8a5f91d230a0a7d89eaa45ef761631812feb08ec17b70']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:33:32Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "frame97",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7670f2cf-7a1f-5709-98d7-789bc0f36920",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://42[.]87[.]90[.]2:44050/bin[.]sh",
      "pattern": "[url:value = 'http://42.87.90.2:44050/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:32:06Z",
      "confidence": 80,
      "labels": [
        "None",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a59e7094-1db7-5e91-8e52-9805c93b194c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Sajin46/frontend/refs/heads/main/src/context/notes/Software_engobe[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Sajin46/frontend/refs/heads/main/src/context/notes/Software_engobe.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:31:07Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d61cf211-f03d-58ea-9611-b574080d6dc1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:19ab8e82883dc9aeccc95ea897cad9fec97a215acc41e2dddd3341bcd88b193c",
      "pattern": "[file:hashes.'SHA-256' = '19ab8e82883dc9aeccc95ea897cad9fec97a215acc41e2dddd3341bcd88b193c']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:30:45Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "frame",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aaaef5a7-d432-52bb-b985-009efc0fc744",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://115[.]50[.]12[.]162:39799/i",
      "pattern": "[url:value = 'http://115.50.12.162:39799/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:30:22Z",
      "confidence": 80,
      "labels": [
        "32-bit",
        "Mozi",
        "elf",
        "malware",
        "malware_download",
        "mips"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4012086e-f140-579e-b7ae-ee39064171c5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://42[.]226[.]91[.]81:36211/i",
      "pattern": "[url:value = 'http://42.226.91.81:36211/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:30:10Z",
      "confidence": 80,
      "labels": [
        "Mozi",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3dba0185-d5e7-5ff4-873c-b6bf437d9f97",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://42[.]226[.]91[.]81:36211/bin[.]sh",
      "pattern": "[url:value = 'http://42.226.91.81:36211/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:30:10Z",
      "confidence": 80,
      "labels": [
        "Mozi",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--83bec252-08e8-567e-a625-e15e5b50ae41",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/haber22/haber22[.]github[.]io/refs/heads/main/bedip/haber_github_io_v1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/haber22/haber22.github.io/refs/heads/main/bedip/haber_github_io_v1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:30:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--952868cd-6825-5ece-8ca6-559245f3098a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://182[.]112[.]39[.]114:34290/bin[.]sh",
      "pattern": "[url:value = 'http://182.112.39.114:34290/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:30:09Z",
      "confidence": 80,
      "labels": [
        "Mozi",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3c804ad7-280e-54e1-8ee9-778b4d827f1c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://163[.]142[.]92[.]36:33992/bin[.]sh",
      "pattern": "[url:value = 'http://163.142.92.36:33992/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:30:09Z",
      "confidence": 80,
      "labels": [
        "None",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1ac2ab79-84ab-5738-8ae1-66fb4dffffc7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://125[.]41[.]97[.]150:46002/bin[.]sh",
      "pattern": "[url:value = 'http://125.41.97.150:46002/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:30:08Z",
      "confidence": 80,
      "labels": [
        "Mozi",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--39940e43-a0d9-54d0-8782-e8dcc50d2e47",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://fruit-overall[.]com/4qX0LB",
      "pattern": "[url:value = 'https://fruit-overall.com/4qX0LB']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:29:40Z",
      "confidence": 80,
      "labels": [
        "ClearFake",
        "ClickFix",
        "EtherHidingMagecart",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--275a4300-92e1-522f-aec9-390f08937a4c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://egg-crusade[.]com/4qX0LB",
      "pattern": "[url:value = 'https://egg-crusade.com/4qX0LB']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:29:40Z",
      "confidence": 80,
      "labels": [
        "ClearFake",
        "ClickFix",
        "EtherHidingMagecart",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--186d0cd2-2a34-5f54-b7a7-495ea6e9f7ca",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://decoyanswer[.]com/4qX0LB",
      "pattern": "[url:value = 'https://decoyanswer.com/4qX0LB']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:29:40Z",
      "confidence": 80,
      "labels": [
        "ClearFake",
        "ClickFix",
        "EtherHidingMagecart",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a5603676-bbea-5c71-8ed6-d848d1d3a566",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:remusdownloads[.]to",
      "pattern": "[domain-name:value = 'remusdownloads.to']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:28:49Z",
      "confidence": 80,
      "labels": [
        "Remus",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--44581d19-0df4-51eb-91f8-fca92e7a711f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:cdn[.]remusdownloads[.]to",
      "pattern": "[domain-name:value = 'cdn.remusdownloads.to']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:28:49Z",
      "confidence": 80,
      "labels": [
        "Remus",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eba7839c-1d0a-54ef-a7bc-a70089e0dd06",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:9c914cf268a9b7656b0b670ccd73bdd957731ecf98a1fbf4597f4465b3ba670c",
      "pattern": "[file:hashes.'SHA-256' = '9c914cf268a9b7656b0b670ccd73bdd957731ecf98a1fbf4597f4465b3ba670c']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:27:47Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "macOS",
        "nova",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fa62632d-9032-5973-80f8-63a37f78285a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:kudoassam[.]org",
      "pattern": "[domain-name:value = 'kudoassam.org']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:27:21Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--515b3518-2608-532f-8826-1e6f25d1b5be",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:fcccbce48b9c530257d49fe82897d975a52d0abece80c2f9dc0eb04ee43da05f",
      "pattern": "[file:hashes.'SHA-256' = 'fcccbce48b9c530257d49fe82897d975a52d0abece80c2f9dc0eb04ee43da05f']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:27:09Z",
      "confidence": 80,
      "labels": [
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--558c040b-9c11-5180-b6c7-e9add8b6b2e2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:2b9ea6388458cf38b7a152a213b4b93fbd9114d4c3580c12eb2b2db6cf4b07d2",
      "pattern": "[file:hashes.'SHA-256' = '2b9ea6388458cf38b7a152a213b4b93fbd9114d4c3580c12eb2b2db6cf4b07d2']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:27:00Z",
      "confidence": 80,
      "labels": [
        "ValleyRAT",
        "malware",
        "threatfox"
      ],
      "x_swiftioc_source": "malwarebazaar_recent,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--50248e99-f922-58f0-8c34-791b93a45d51",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:b9b4bdac7ed3c88a3bfe335439dd07594b9bf913e1b8f8e72b4018acc1e1c837",
      "pattern": "[file:hashes.'SHA-256' = 'b9b4bdac7ed3c88a3bfe335439dd07594b9bf913e1b8f8e72b4018acc1e1c837']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:26:12Z",
      "confidence": 80,
      "labels": [
        "ValleyRAT",
        "malware",
        "threatfox"
      ],
      "x_swiftioc_source": "malwarebazaar_recent,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bf12105b-4538-5299-aa40-6adfa36ca05e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:43e011c2561e0dce45894caa145ca0ba490632b38c4ee16171dd3e5a7284bdac",
      "pattern": "[file:hashes.'SHA-256' = '43e011c2561e0dce45894caa145ca0ba490632b38c4ee16171dd3e5a7284bdac']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:24:45Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "haven",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6c5212b2-5860-5ae2-91b0-bfc69073782b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:7fae9dca21c5c2f802c1a48c707abeecd41feb3b18b828ca4fce1f5333d3f645",
      "pattern": "[file:hashes.'SHA-256' = '7fae9dca21c5c2f802c1a48c707abeecd41feb3b18b828ca4fce1f5333d3f645']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:23:26Z",
      "confidence": 80,
      "labels": [
        "ValleyRAT",
        "malware",
        "threatfox"
      ],
      "x_swiftioc_source": "malwarebazaar_recent,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--efabba20-6036-552e-9cd8-c9e9a07ddf56",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:lawncaremansfield[.]com",
      "pattern": "[domain-name:value = 'lawncaremansfield.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:21:43Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f9921cc5-6481-53f3-9ee1-33d5596b0848",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:2b6452f58068cefb3c54b4e039ac66baa185f6780cb0acab669c52b1657ce285",
      "pattern": "[file:hashes.'SHA-256' = '2b6452f58068cefb3c54b4e039ac66baa185f6780cb0acab669c52b1657ce285']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:21:39Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "chant",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8bca4f42-b567-5a21-81e2-078671a967ee",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:62e3e86a7586174df485af5936639769971cfc62fd9d0f2d5385d5bfa61ea88c",
      "pattern": "[file:hashes.'SHA-256' = '62e3e86a7586174df485af5936639769971cfc62fd9d0f2d5385d5bfa61ea88c']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:20:08Z",
      "confidence": 80,
      "labels": [
        "Mirai",
        "elf",
        "malware",
        "threatfox",
        "wraith"
      ],
      "x_swiftioc_source": "malwarebazaar_recent,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--55bddd0c-47ba-55ce-bf5b-42aecd26bad1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:748ada85220f05af64e0ea23260b7c3102140c02d76fc5fd19a9f775444a7309",
      "pattern": "[file:hashes.'SHA-256' = '748ada85220f05af64e0ea23260b7c3102140c02d76fc5fd19a9f775444a7309']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:18:49Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "macOS",
        "threatfox",
        "willow"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--daf8fc66-3052-58cf-8d8b-54cac3ba6551",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:landingpage[.]tatuagronegocios[.]com[.]br",
      "pattern": "[domain-name:value = 'landingpage.tatuagronegocios.com.br']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:17:14Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cca962f2-4e53-55de-89fa-2f14eb2a91ae",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/zPoseidon31/zposeidon31[.]github[.]io/refs/heads/main/doweress/io_zposeidon_github_1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/zPoseidon31/zposeidon31.github.io/refs/heads/main/doweress/io_zposeidon_github_1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7cf5c6d5-d917-5d88-ab20-0e74111299e2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/zPoseidon31/zposeidon31[.]github[.]io/refs/heads/main/doweress/github_io_zposeidon_1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/zPoseidon31/zposeidon31.github.io/refs/heads/main/doweress/github_io_zposeidon_1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2b4b4d8b-b6be-53db-9fbe-1db2b2a0226a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/thatavarthi-raj/Mywebsite/refs/heads/master/[.]github/Mywebsite_v2[.]8-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/thatavarthi-raj/Mywebsite/refs/heads/master/.github/Mywebsite_v2.8-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1882c438-3bb4-5672-b6e5-eedeb2e5905c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/juanin9898/scat/refs/heads/main/[.]github/Software-v1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/juanin9898/scat/refs/heads/main/.github/Software-v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--545ceb7c-3afb-524e-9d6c-dd237aaef417",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ishant415/Epic-archery2/refs/heads/main/Epic-Archery-2--template-main/Epic-archery-v1[.]5-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ishant415/Epic-archery2/refs/heads/main/Epic-Archery-2--template-main/Epic-archery-v1.5-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8e4fcaef-1752-5dda-bc7c-716b476eab3c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/clixgvvv/clixgvvv[.]github[.]io/refs/heads/main/Calamintha/github-clixgvvv-io-3[.]8-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/clixgvvv/clixgvvv.github.io/refs/heads/main/Calamintha/github-clixgvvv-io-3.8-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7d59a694-8f92-521c-8b6d-c1a969341d6e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Vdoni21/vdoni21[.]github[.]io/refs/heads/main/gulgul/vdoni_github_io_1[.]8-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Vdoni21/vdoni21.github.io/refs/heads/main/gulgul/vdoni_github_io_1.8-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e843dbe1-e0be-5198-8250-d6c485a591b6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Para99999/para99999[.]github[.]io/refs/heads/main/heterologic/github-io-para-v3[.]4-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Para99999/para99999.github.io/refs/heads/main/heterologic/github-io-para-v3.4-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c28c5933-ace2-5e62-9219-7c1771771b7e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/NyatakuIbnuRosada/nyatakuibnurosada[.]github[.]io/refs/heads/main/ady/nyatakuibnurosada_io_github_3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/NyatakuIbnuRosada/nyatakuibnurosada.github.io/refs/heads/main/ady/nyatakuibnurosada_io_github_3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--60fc689e-a5b6-527e-b7a5-e03904424eb7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/MoHaMeD286332/mohamed286332[.]github[.]io/refs/heads/main/handlike/mohamed_io_github_v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/MoHaMeD286332/mohamed286332.github.io/refs/heads/main/handlike/mohamed_io_github_v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aaaf101b-df35-5e6c-9c2d-3d603cdd9c35",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/LaudIt/AZ-C5-HTML/refs/heads/master/images/AZ-C5-HTML-v2[.]2-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/LaudIt/AZ-C5-HTML/refs/heads/master/images/AZ-C5-HTML-v2.2-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0a5085da-4cd9-55a5-bf19-41b7a3e6df30",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/abcdethatshowyoustartthealphabet/abcdethatshowyoustartthealphabet[.]github[.]io/refs/heads/main/ceramal/github-io-abcdethatshowyoustartthealphabet-2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/abcdethatshowyoustartthealphabet/abcdethatshowyoustartthealphabet.github.io/refs/heads/main/ceramal/github-io-abcdethatshowyoustartthealphabet-2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2cd3e42e-02be-50e1-8f0a-d06653b39a85",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SantatraASF/OwnerCar/refs/heads/master/test/models/Owner-Car-v2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SantatraASF/OwnerCar/refs/heads/master/test/models/Owner-Car-v2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cdfb517b-77e4-5c05-95bd-854d988a7c86",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/LukePham163/lukepham163[.]github[.]io/refs/heads/main/cheth/lukepham-io-github-v3[.]5-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/LukePham163/lukepham163.github.io/refs/heads/main/cheth/lukepham-io-github-v3.5-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6d051165-fde5-50bb-bc74-1d94363e6d8e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sabrinahpantoja/sabrinahpantoja[.]github[.]io/refs/heads/main/formonitrile/sabrinahpantoja-io-github-v1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sabrinahpantoja/sabrinahpantoja.github.io/refs/heads/main/formonitrile/sabrinahpantoja-io-github-v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eda15c20-cdd7-507d-90be-56b7c1044e8f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Zinqqr/zinqqr[.]github[.]io/refs/heads/main/velvetiness/zinqqr-github-io-3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Zinqqr/zinqqr.github.io/refs/heads/main/velvetiness/zinqqr-github-io-3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--350d3ff0-e7dc-52a9-8e54-074948b49123",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tzevaot-yhwh/Locum-X/refs/heads/main/oesophagus/X_Locum_2[.]3-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tzevaot-yhwh/Locum-X/refs/heads/main/oesophagus/X_Locum_2.3-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1d87d2a0-e8a9-5b95-8156-7010eb447943",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Hwnggv/hwnggv[.]github[.]io/refs/heads/main/coaxing/github_hwnggv_io_v3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Hwnggv/hwnggv.github.io/refs/heads/main/coaxing/github_hwnggv_io_v3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ec8c1c4a-4063-56c3-963b-8c47c799edc4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Arno1/arno1[.]github[.]io/refs/heads/main/aspergation/github-io-arno-2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Arno1/arno1.github.io/refs/heads/main/aspergation/github-io-arno-2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--124c01bb-06dc-517f-979e-f7f5b8649fb1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kimingoood-code/kimingoood-code[.]github[.]io/refs/heads/main/impounder/kimingoood-io-github-code-3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kimingoood-code/kimingoood-code.github.io/refs/heads/main/impounder/kimingoood-io-github-code-3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cf4a851f-da5e-5c11-b87a-77311221106a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kaydenplayZ/kaydenplayz[.]github[.]io/refs/heads/main/internationalize/github_io_kaydenplayz_v3[.]4-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kaydenplayZ/kaydenplayz.github.io/refs/heads/main/internationalize/github_io_kaydenplayz_v3.4-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--54c87863-603e-5eb8-be6f-6c6bcc6a355d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ishant415/epic-archery-5-by-isahnt/refs/heads/main/project-template-C31-main/project-template-C31-main/assets/isahnt-archery-by-epic-3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ishant415/epic-archery-5-by-isahnt/refs/heads/main/project-template-C31-main/project-template-C31-main/assets/isahnt-archery-by-epic-3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aee5d14b-bb5e-5de5-b44a-ce58099abd22",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/iago030809/iago030809[.]github[.]io/refs/heads/main/paradoxidian/io-github-iago-2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/iago030809/iago030809.github.io/refs/heads/main/paradoxidian/io-github-iago-2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8c606a3b-783a-5200-b081-7e73265edfab",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hussnainhai33/hussnainhai33[.]github[.]io/refs/heads/main/monopathic/io-hussnainhai-github-2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hussnainhai33/hussnainhai33.github.io/refs/heads/main/monopathic/io-hussnainhai-github-2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9b7ac1d0-b3ab-5814-abed-0945805f880e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Suratu123/project/refs/heads/main/cervicaprine/Software_v1[.]7-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Suratu123/project/refs/heads/main/cervicaprine/Software_v1.7-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--37ae4704-d2bf-5b44-a37d-69e4045e8c2c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AldiPradana-KD/remake2/refs/heads/main/assets/remake_1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AldiPradana-KD/remake2/refs/heads/main/assets/remake_1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7c2f1bc9-6ef2-565f-a82a-58a09f97c56c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/thatavarthi-raj/Mydata/refs/heads/main/bubblingly/Mydata_v1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/thatavarthi-raj/Mydata/refs/heads/main/bubblingly/Mydata_v1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e5082543-11bd-5d4d-9f03-8a6f19da80a4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/smksamir/smksamir[.]github[.]io/refs/heads/main/treponemicide/smksamir-github-io-2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/smksamir/smksamir.github.io/refs/heads/main/treponemicide/smksamir-github-io-2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b9cd788c-2b23-5493-b2c0-9b853c002370",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/lucas-itup/integrador-nucba/refs/heads/main/css/nucba_integrador_v3[.]9-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/lucas-itup/integrador-nucba/refs/heads/main/css/nucba_integrador_v3.9-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8b22fc0f-c892-5168-a252-3c1134085d05",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/iqra-ftm/ATM_machine/refs/heads/main/Phasianidae/machine_AT_v1[.]4-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/iqra-ftm/ATM_machine/refs/heads/main/Phasianidae/machine_AT_v1.4-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--003383ee-85b8-5567-b13e-1dc938a890f1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ANDREIII12/EduNavigator/refs/heads/main/staup/Edu_Navigator_v1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ANDREIII12/EduNavigator/refs/heads/main/staup/Edu_Navigator_v1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--73bc5132-0b5f-57ab-9743-1ce1d322db00",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ghm006/ghm006[.]github[.]io/refs/heads/main/denunciate/io-github-ghm-2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ghm006/ghm006.github.io/refs/heads/main/denunciate/io-github-ghm-2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cd57e85b-787f-5b67-9102-bca7ac9ed465",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/clixgvvv/clixgvvv[.]github[.]io/refs/heads/main/Calamintha/github_clixgvvv_io_v3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/clixgvvv/clixgvvv.github.io/refs/heads/main/Calamintha/github_clixgvvv_io_v3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8ee5d1d5-9cee-59bd-ac25-890bfa446530",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wafi-net/Wafi-net[.]github[.]io/refs/heads/main/macroevolution/Wafi-net-github-io-3[.]9-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wafi-net/Wafi-net.github.io/refs/heads/main/macroevolution/Wafi-net-github-io-3.9-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c27c5831-201d-5632-b16e-e08a1b426cbf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Selvaprakash-Ramalingam/Real-time-Image-Analyzer---MRV/refs/heads/main/src/MRV_Analyzer_Real_time_Image_v1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Selvaprakash-Ramalingam/Real-time-Image-Analyzer---MRV/refs/heads/main/src/MRV_Analyzer_Real_time_Image_v1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cd62b955-8699-5f6a-95a2-d670194ef906",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Fnar3x/fnar3x[.]github[.]io/refs/heads/main/polygon/fnar-github-io-x-v1[.]4-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Fnar3x/fnar3x.github.io/refs/heads/main/polygon/fnar-github-io-x-v1.4-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--75bdeaf6-599b-5e83-bdb8-e4c7ad078f88",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/CYRIKT/Agenda/refs/heads/main/storage/framework/cache/data/Software_2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/CYRIKT/Agenda/refs/heads/main/storage/framework/cache/data/Software_2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--320ff190-72c9-5888-8a31-8fda9fa7a2b3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Arno1/arno1[.]github[.]io/refs/heads/main/aspergation/github_arno_io_v3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Arno1/arno1.github.io/refs/heads/main/aspergation/github_arno_io_v3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5513e2b2-d0f5-51d8-b7c3-2554608a457f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/xeto7/gen/refs/heads/main/comatula/Software_kaross[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/xeto7/gen/refs/heads/main/comatula/Software_kaross.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d962916f-5da9-5719-b529-cc63427cfda8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ruksol/Car-Sales-BKND/refs/heads/main/src/controller/Sales-BKND-Car-3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ruksol/Car-Sales-BKND/refs/heads/main/src/controller/Sales-BKND-Car-3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0a7dd7f1-72cd-55a6-b74c-5303cd6fac6b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/noe0408/noe0408[.]github[.]io/refs/heads/main/overseethe/github_io_noe_v1[.]2-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/noe0408/noe0408.github.io/refs/heads/main/overseethe/github_io_noe_v1.2-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7e37b055-6bc5-57cb-a7cf-c00ed156fea1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mark-oori/cohort-1/refs/heads/main/html%20and%20css/cs-6/6x02-Strikethrough_%26_underline/cohort-v1[.]1-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mark-oori/cohort-1/refs/heads/main/html%20and%20css/cs-6/6x02-Strikethrough_%26_underline/cohort-v1.1-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--08c2cbcd-1784-5ba5-8248-1be6d1356d9c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mamit514/mamit514[.]github[.]io/refs/heads/main/frayn/io_github_mamit_1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mamit514/mamit514.github.io/refs/heads/main/frayn/io_github_mamit_1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7aba74ad-29df-5a54-9a36-6b6abfdad53b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/idkwhatismyname123/daoshuri-countdown/refs/heads/main/Typhonian/countdown_daoshuri_v1[.]4-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/idkwhatismyname123/daoshuri-countdown/refs/heads/main/Typhonian/countdown_daoshuri_v1.4-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7814694f-92a9-5f3e-bea4-88a0e9015cb9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/andre1231231/andre1231231[.]github[.]io/refs/heads/main/polite/github_io_andre_v3[.]1-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/andre1231231/andre1231231.github.io/refs/heads/main/polite/github_io_andre_v3.1-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--584696ff-9413-56e2-b37a-3e41f2598d16",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Sershy8537/sershy8537[.]github[.]io/refs/heads/main/Bangash/sershy-github-io-2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Sershy8537/sershy8537.github.io/refs/heads/main/Bangash/sershy-github-io-2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7890846a-8c6e-50a7-bde9-601c29633ebe",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Arehman782/crab-game-modded-menu-lounge/refs/heads/branch/unimpaired/crab_menu_game_modded_lounge_v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Arehman782/crab-game-modded-menu-lounge/refs/heads/branch/unimpaired/crab_menu_game_modded_lounge_v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--94977a52-b118-5a24-a065-ae6ea47e44d1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SamEricBailey/samericbailey[.]github[.]io/refs/heads/main/verbal/samericbailey-io-github-2[.]5-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SamEricBailey/samericbailey.github.io/refs/heads/main/verbal/samericbailey-io-github-2.5-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1951089b-6126-519a-ace6-79bd0e1fa689",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Brutalyking/mgs-v-tpp-nsfw-enhancer/refs/heads/branch/icebox/tpp-nsfw-v-mgs-enhancer-3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Brutalyking/mgs-v-tpp-nsfw-enhancer/refs/heads/branch/icebox/tpp-nsfw-v-mgs-enhancer-3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--84e0fcf6-fb91-5a90-8701-198c31b2962f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/karcioricardo/portifolio/refs/heads/main/tassoo/Software-1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/karcioricardo/portifolio/refs/heads/main/tassoo/Software-1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:07Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c157b142-7caf-50e0-ba18-1529a07fcd3a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Adzikpeli/adzikpeli[.]github[.]io/refs/heads/main/punishably/io-adzikpeli-github-v3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Adzikpeli/adzikpeli.github.io/refs/heads/main/punishably/io-adzikpeli-github-v3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:06Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--224a2dec-df7f-517c-a14e-7ff21a347662",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/lucas-itup/E2-LANDING-Lucas-Pupilli/refs/heads/main/fonts/Lucas-Pupilli-LANDIN-v3[.]0-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/lucas-itup/E2-LANDING-Lucas-Pupilli/refs/heads/main/fonts/Lucas-Pupilli-LANDIN-v3.0-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:02Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7ee12f4d-18ec-5538-9539-868912689596",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/lucas-itup/integrador-nucba/refs/heads/main/assets/js/integrador_nucba_1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/lucas-itup/integrador-nucba/refs/heads/main/assets/js/integrador_nucba_1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:01Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--10d2a04e-0964-5342-be9d-752a85262cf8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/wichonemes/wichonemes[.]github[.]io/refs/heads/main/fogyism/io_github_wichonemes_3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/wichonemes/wichonemes.github.io/refs/heads/main/fogyism/io_github_wichonemes_3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5edf90d4-df43-544c-8564-c50abf5e62ca",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/lucas-itup/node-e1/refs/heads/main/[.]idea/node-e-2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/lucas-itup/node-e1/refs/heads/main/.idea/node-e-2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5b9fb943-185a-5222-bef0-fad69bc39e14",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ishant415/class13-by-ishant-project/refs/heads/main/unvoted/by_class_ishant_project_v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ishant415/class13-by-ishant-project/refs/heads/main/unvoted/by_class_ishant_project_v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--12514e2b-1019-5bc8-8c3b-c07eabbf3519",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Bibi-hajra/DSA-/refs/heads/main/Bealtine/DS_1[.]9-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Bibi-hajra/DSA-/refs/heads/main/Bealtine/DS_1.9-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:16:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6611b868-80a0-5f51-9bc1-ccda35c8608a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/speciallyProgrammed/speciallyprogrammed[.]github[.]io/refs/heads/main/Sambal/github_speciallyprogrammed_io_3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/speciallyProgrammed/speciallyprogrammed.github.io/refs/heads/main/Sambal/github_speciallyprogrammed_io_3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a22f86a9-431b-56d7-8403-09186dd3a536",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rohits0410/test-git-2/refs/heads/master/rudish/git_test_1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rohits0410/test-git-2/refs/heads/master/rudish/git_test_1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fb37ec4e-c229-5467-bc1f-bea75e435b17",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/notvibhu8/notvibhu8[.]github[.]io/refs/heads/main/demagogically/io_github_notvibhu_1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/notvibhu8/notvibhu8.github.io/refs/heads/main/demagogically/io_github_notvibhu_1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e0e10ed1-77b1-54f6-a286-4431c10f368e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ixczo/ixczo[.]github[.]io/refs/heads/main/vibetoite/io-ixczo-github-1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ixczo/ixczo.github.io/refs/heads/main/vibetoite/io-ixczo-github-1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e9ac23fe-0cac-5908-b1ee-0d991bb59a37",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ishant415/epic-archery/refs/heads/main/materialness/epic-archery-v2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ishant415/epic-archery/refs/heads/main/materialness/epic-archery-v2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5afb7287-a5af-5fa8-a07a-c909523ff87b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ishant415/cut-the-fruit-project-by-Ishant/refs/heads/main/proprietorial/by_cut_fruit_Ishant_the_project_machineful[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ishant415/cut-the-fruit-project-by-Ishant/refs/heads/main/proprietorial/by_cut_fruit_Ishant_the_project_machineful.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fbcc0cbc-378a-56a3-80d8-84c2c4f1e939",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/iqra-ftm/cli-number-guessing/refs/heads/main/untippled/guessing-number-cli-1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/iqra-ftm/cli-number-guessing/refs/heads/main/untippled/guessing-number-cli-1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--99db721a-da03-5120-913d-42cf21bda4fd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ibra2008klk/ibra2008klk[.]github[.]io/refs/heads/main/salute/io_github_klk_ibra_3[.]4-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ibra2008klk/ibra2008klk.github.io/refs/heads/main/salute/io_github_klk_ibra_3.4-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--96b3ff70-ef09-55a9-8e82-d0c29c342c7e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/drissbough/drissbough[.]github[.]io/refs/heads/main/Abrahamidae/drissbough-io-github-v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/drissbough/drissbough.github.io/refs/heads/main/Abrahamidae/drissbough-io-github-v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--77e1f7e1-6242-54e8-be0a-9c08fda54335",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/JJBratt/jjbratt[.]github[.]io/refs/heads/main/leechkin/jjbratt-io-github-v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/JJBratt/jjbratt.github.io/refs/heads/main/leechkin/jjbratt-io-github-v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7553d857-7705-5234-9859-c2cae0998a5b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nomanjoiya228/nomanjoiya228[.]github[.]io/refs/heads/main/uncheerfully/github_nomanjoiya_io_3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nomanjoiya228/nomanjoiya228.github.io/refs/heads/main/uncheerfully/github_nomanjoiya_io_3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--13728c35-c49f-510c-b76b-f412215e53aa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/malith153/malith153[.]github[.]io/refs/heads/main/uncoagulated/io-malith-github-v2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/malith153/malith153.github.io/refs/heads/main/uncoagulated/io-malith-github-v2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dc4c9525-ca1e-5793-900f-b214c9ab166b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kiatun3434/kiatun3434/refs/heads/main/physicochemistry/kiatun-2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kiatun3434/kiatun3434/refs/heads/main/physicochemistry/kiatun-2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5e3db0d9-62c6-52de-a926-6c117b8a1aa8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ishant415/cut-the-fruit-project-by-Ishant/refs/heads/main/proprietorial/Ishant_project_cut_fruit_the_by_1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ishant415/cut-the-fruit-project-by-Ishant/refs/heads/main/proprietorial/Ishant_project_cut_fruit_the_by_1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1eed5d1b-a7af-5159-94fd-9d18102d0faf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hericguedez/hericguedez[.]github[.]io/refs/heads/main/upwork-main/assets/fonts/io_github_hericguedez_3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hericguedez/hericguedez.github.io/refs/heads/main/upwork-main/assets/fonts/io_github_hericguedez_3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--52e8853b-cbc9-5887-81d7-9a7c2d603edc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/elfnan10101996/elfnan10101996[.]github[.]io/refs/heads/main/sphacelism/elfnan_github_io_v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/elfnan10101996/elfnan10101996.github.io/refs/heads/main/sphacelism/elfnan_github_io_v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--42f00067-a109-58a2-9693-dccfd5fe2122",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Zinqqr/Clipboard-landing-page/refs/heads/main/clipboard-landing-page-master/images/Clipboard-page-landing-v2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Zinqqr/Clipboard-landing-page/refs/heads/main/clipboard-landing-page-master/images/Clipboard-page-landing-v2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--09942544-b32f-524e-8bbc-21beab664b79",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/StacksMadeDev/SimpleChattyBot/refs/heads/main/src/main/Simple_Bot_Chatty_1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/StacksMadeDev/SimpleChattyBot/refs/heads/main/src/main/Simple_Bot_Chatty_1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9de42607-f9c8-5a44-92bd-2502e50480cc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Kirtan132003/Python-DataToolKit/refs/heads/main/ungowned/Tool_Kit_Python_Data_v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Kirtan132003/Python-DataToolKit/refs/heads/main/ungowned/Tool_Kit_Python_Data_v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f718b9ef-cce2-545c-b447-937a9e343141",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/karcioricardo/Asylum-Free-Download-Hub/refs/heads/main/sexualize/Asylum-Download-Hub-Free-2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/karcioricardo/Asylum-Free-Download-Hub/refs/heads/main/sexualize/Asylum-Download-Hub-Free-2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c39a1145-5fc8-594d-ae20-353d095cef81",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/NyatakuIbnuRosada/nyatakuibnurosada[.]github[.]io/refs/heads/main/ady/io-github-nyatakuibnurosada-2[.]1-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/NyatakuIbnuRosada/nyatakuibnurosada.github.io/refs/heads/main/ady/io-github-nyatakuibnurosada-2.1-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9e833d28-9306-5155-a172-10a856dd6af2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/EaziRsa/eazirsa[.]github[.]io/refs/heads/main/butadiyne/eazirsa-io-github-v1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/EaziRsa/eazirsa.github.io/refs/heads/main/butadiyne/eazirsa-io-github-v1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6139f40f-7023-5886-8075-d9f4fcc9c8e1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hussnainhai33/hussnainhai33[.]github[.]io/refs/heads/main/monopathic/hussnainhai_github_io_v3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hussnainhai33/hussnainhai33.github.io/refs/heads/main/monopathic/hussnainhai_github_io_v3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d07d9943-7216-59f8-8728-7524dfe08966",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Abyravka90/belajarGit2/refs/heads/master/folder_naufal%20f/Remedial_naufal%20fadhilla/php/Git_belajar_1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Abyravka90/belajarGit2/refs/heads/master/folder_naufal%20f/Remedial_naufal%20fadhilla/php/Git_belajar_1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8ccdf5d1-85ab-5bc9-a71f-91f26043a74a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/mynewsapp/refs/heads/main/introit/Software_achropsia[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/mynewsapp/refs/heads/main/introit/Software_achropsia.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cda551af-71ed-54e2-aad8-c804c64eb556",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/andre1231231/andre1231231[.]github[.]io/refs/heads/main/polite/github_andre_io_v1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/andre1231231/andre1231231.github.io/refs/heads/main/polite/github_andre_io_v1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4210fdf2-768e-5d61-a0e2-beeb383676e8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/abdulhamidali1/git_project/refs/heads/main/Phobos/project_git_1[.]5-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/abdulhamidali1/git_project/refs/heads/main/Phobos/project_git_1.5-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f0a939fb-f00c-539c-ac94-faf3b35c188a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Bamidele2025/bamidele2025[.]github[.]io/refs/heads/main/curua/bamidele_github_io_chaja[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Bamidele2025/bamidele2025.github.io/refs/heads/main/curua/bamidele_github_io_chaja.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--79e09502-68af-510f-a452-cf691bbede53",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Srilaxman05/chatping/refs/heads/main/airliner/Software-v1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Srilaxman05/chatping/refs/heads/main/airliner/Software-v1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:54Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--07c283cb-b463-5bcc-a58a-1d3130c03ac1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/smksamir/smksamir[.]github[.]io/refs/heads/main/treponemicide/smksamir-io-github-v2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/smksamir/smksamir.github.io/refs/heads/main/treponemicide/smksamir-io-github-v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:53Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e15b3c7f-5741-56e6-85ae-6c4575cc2951",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kartik359/image-finder-/refs/heads/main/arango/finder_image_thuggery[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kartik359/image-finder-/refs/heads/main/arango/finder_image_thuggery.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:53Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1fed93b8-b240-58da-9886-9e896827407f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GamemodeG/gamemodeg[.]github[.]io/refs/heads/main/pike/github_gamemodeg_io_1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GamemodeG/gamemodeg.github.io/refs/heads/main/pike/github_gamemodeg_io_1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:53Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--68d63d32-53e1-5773-b2e5-99b135b3de34",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:1ec1013cdd71d0806a2ce0bfc2b3637e50e85ccbafe4328a2f5eb70e38fdb4b8",
      "pattern": "[file:hashes.'SHA-256' = '1ec1013cdd71d0806a2ce0bfc2b3637e50e85ccbafe4328a2f5eb70e38fdb4b8']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:53Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "macOS",
        "quill",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8643769b-5228-5847-b088-60207e358114",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Shaswat0/Color-Changer/refs/heads/main/symmetrical/Color-Changer-3[.]7-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Shaswat0/Color-Changer/refs/heads/main/symmetrical/Color-Changer-3.7-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4f152a65-8e42-510d-a71e-f217bff0a986",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kumarsreenivas051/kumarsreenivas051[.]github[.]io/refs/heads/main/Bellatrix/github-kumarsreenivas-io-v2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kumarsreenivas051/kumarsreenivas051.github.io/refs/heads/main/Bellatrix/github-kumarsreenivas-io-v2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1cf5a154-ecec-50c8-97de-4f26433d90f1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/pammu9481/pammu9481[.]github[.]io/refs/heads/main/scarlatinal/github-pammu-io-1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/pammu9481/pammu9481.github.io/refs/heads/main/scarlatinal/github-pammu-io-1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:49Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f8299db5-3392-53bf-b256-ecce76ff4e9a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nishantsunuwar/test/refs/heads/master/tetraploidy/Software_v2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nishantsunuwar/test/refs/heads/master/tetraploidy/Software_v2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:49Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f95bbb3f-dd0a-5605-b830-59cc24a7d4df",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nikeshRajbanshi231/todoapp/refs/heads/main/supersimplicity/Software-v2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nikeshRajbanshi231/todoapp/refs/heads/main/supersimplicity/Software-v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:49Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5d203dfb-70aa-558e-897b-f681d1a64ebe",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ishant415/class13-by-ishant-project/refs/heads/main/unvoted/project_by_class_ishant_impenitence[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ishant415/class13-by-ishant-project/refs/heads/main/unvoted/project_by_class_ishant_impenitence.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:49Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--10cafc3c-21ea-5877-ba5e-725c88aba893",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/beansbujjajalo/beansbujjajalo[.]github[.]io/refs/heads/main/gnomesque/beansbujjajalo_github_io_v2[.]1-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/beansbujjajalo/beansbujjajalo.github.io/refs/heads/main/gnomesque/beansbujjajalo_github_io_v2.1-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:49Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--38ccc943-4276-5abe-85d7-4273ebfe9c96",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/KaterineLimaE/Tienda_LunaStore/refs/heads/main/node_modules/utils-merge/Store-Luna-Tienda-v2[.]8-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/KaterineLimaE/Tienda_LunaStore/refs/heads/main/node_modules/utils-merge/Store-Luna-Tienda-v2.8-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:49Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2b3c40f1-b78a-59ff-94b7-2985ddd9dbe5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Akbarkurniawan02/akbarkurniawan02[.]github[.]io/refs/heads/main/diagnostician/github_io_akbarkurniawan_2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Akbarkurniawan02/akbarkurniawan02.github.io/refs/heads/main/diagnostician/github_io_akbarkurniawan_2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:49Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b9b59b41-2e7e-53d2-b431-2c078ac5fbf2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/tinosam/faiseur_paix/refs/heads/master/test/models/faiseur-paix-1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/tinosam/faiseur_paix/refs/heads/master/test/models/faiseur-paix-1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1d37d093-5cf7-5b6e-ad21-6c89ed4450cf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kumarsreenivas051/Arduino/refs/heads/master/pneumotyphus/Software_v1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kumarsreenivas051/Arduino/refs/heads/master/pneumotyphus/Software_v1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8440682b-847d-5482-90aa-06617b177baa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ixczo/ixczo[.]github[.]io/refs/heads/main/vibetoite/ixczo_io_github_v1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ixczo/ixczo.github.io/refs/heads/main/vibetoite/ixczo_io_github_v1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--545709fe-38f1-5e37-a218-f2ebc14c2c02",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Kenuche/kenuche[.]github[.]io/refs/heads/main/kist/github-io-kenuche-v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Kenuche/kenuche.github.io/refs/heads/main/kist/github-io-kenuche-v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4a18bea0-30af-58d8-82ad-dfc5a75dfd90",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Danny50143/danny50143[.]github[.]io/refs/heads/main/anthropotomist/danny-io-github-v3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Danny50143/danny50143.github.io/refs/heads/main/anthropotomist/danny-io-github-v3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dfa999a5-0c81-5860-a84a-1544faf0ab49",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Alexandre2377/alexandre2377[.]github[.]io/refs/heads/main/thermolabile/alexandre-github-io-1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Alexandre2377/alexandre2377.github.io/refs/heads/main/thermolabile/alexandre-github-io-1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ec032548-20de-5925-9947-ca3398420723",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rocky18313/rocky18313[.]github[.]io/refs/heads/main/achromatophile/rocky_io_github_3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rocky18313/rocky18313.github.io/refs/heads/main/achromatophile/rocky_io_github_3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d048c043-4972-52f3-bc32-e42ebe250374",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/pammu9481/pammu9481[.]github[.]io/refs/heads/main/scarlatinal/io-github-pammu-v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/pammu9481/pammu9481.github.io/refs/heads/main/scarlatinal/io-github-pammu-v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--32b39953-0c33-5c1d-a74c-07ec33896a24",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/drissbough/drissbough[.]github[.]io/refs/heads/main/Abrahamidae/io-github-drissbough-v1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/drissbough/drissbough.github.io/refs/heads/main/Abrahamidae/io-github-drissbough-v1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--077c7ab1-907a-5c1f-a415-787fa2de8252",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/KrisUE/krisue[.]github[.]io/refs/heads/main/oxyaphia/krisue-io-github-v1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/KrisUE/krisue.github.io/refs/heads/main/oxyaphia/krisue-io-github-v1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f663b31d-2acb-5c27-b58a-74d2466ed015",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Kenuche/kenuche[.]github[.]io/refs/heads/main/kist/github_io_kenuche_v2[.]0-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Kenuche/kenuche.github.io/refs/heads/main/kist/github_io_kenuche_v2.0-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e72096fc-723e-5348-8af6-6b21c174937f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/noe0408/noe0408[.]github[.]io/refs/heads/main/overseethe/github_noe_io_2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/noe0408/noe0408.github.io/refs/heads/main/overseethe/github_noe_io_2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f7a95bf2-75ee-557f-94bd-3f911eb5ba5c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/jorgewgouveia/jorgewgouveia[.]github[.]io/refs/heads/main/Mynheer/io_jorgewgouveia_github_v3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/jorgewgouveia/jorgewgouveia.github.io/refs/heads/main/Mynheer/io_jorgewgouveia_github_v3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0747d1e2-fdd4-551e-bd70-eef5b1c428ad",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hagarnegm/CarSimulator/refs/heads/main/cabinetmaking/Car-Simulator-v3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hagarnegm/CarSimulator/refs/heads/main/cabinetmaking/Car-Simulator-v3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--57398f7a-2f24-540f-b709-6e61faa75288",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Zinqqr/zinqqr[.]github[.]io/refs/heads/main/velvetiness/github-zinqqr-io-v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Zinqqr/zinqqr.github.io/refs/heads/main/velvetiness/github-zinqqr-io-v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c0dd6716-45a0-5a92-b722-7a05f7ded960",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Shaswat0/BMI-CALCULATOR/refs/heads/main/Pace/BM-CALCULATOR-v2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Shaswat0/BMI-CALCULATOR/refs/heads/main/Pace/BM-CALCULATOR-v2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--646c4dbb-fd4e-51cc-a640-733406b4592e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ANDREIII12/EduNavigator/refs/heads/main/staup/Edu-Navigator-2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ANDREIII12/EduNavigator/refs/heads/main/staup/Edu-Navigator-2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0d94f351-d461-5bc8-90ae-3817360357a9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rafatiyan/rafatiyan[.]github[.]io/refs/heads/main/quet/github-rafatiyan-io-3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rafatiyan/rafatiyan.github.io/refs/heads/main/quet/github-rafatiyan-io-3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0addd03b-b0ed-58c5-83af-923bcd243dc8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/StacksMadeDev/AccountingLedgerApp/refs/heads/main/src/test/java/App-Ledger-Accounting-1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/StacksMadeDev/AccountingLedgerApp/refs/heads/main/src/test/java/App-Ledger-Accounting-1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--454bfdef-80bc-53c7-b17d-3236cb120853",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/YPCM/posFINAL/refs/heads/main/imgweb/FINAL-pos-2[.]2-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/YPCM/posFINAL/refs/heads/main/imgweb/FINAL-pos-2.2-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c2892812-bde3-5e92-a384-b65261639deb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Fnar3x/fnar3x[.]github[.]io/refs/heads/main/polygon/io_x_github_fnar_scurrilously[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Fnar3x/fnar3x.github.io/refs/heads/main/polygon/io_x_github_fnar_scurrilously.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ae2e3121-2d9b-5fd1-ba77-b3fae5c46ca1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ixczo/ixczo[.]github[.]io/refs/heads/main/vibetoite/io-ixczo-github-v1[.]5-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ixczo/ixczo.github.io/refs/heads/main/vibetoite/io-ixczo-github-v1.5-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:43Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eba70b5b-5624-59f2-800d-15562a0f5a58",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/KrisUE/krisue[.]github[.]io/refs/heads/main/oxyaphia/github-io-krisue-1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/KrisUE/krisue.github.io/refs/heads/main/oxyaphia/github-io-krisue-1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:43Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a20b7b9c-9656-50c9-bcab-7f74a783628b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Kaiga-kun/climb-jump-tower-roblox-toolkit/refs/heads/branch/gadling/climb_roblox_jump_toolkit_tower_3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Kaiga-kun/climb-jump-tower-roblox-toolkit/refs/heads/branch/gadling/climb_roblox_jump_toolkit_tower_3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:43Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0632888b-08ab-5591-8505-2f8f62dbb8cd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Galy77/PF-Grupo-20/refs/heads/main/server/src/middleware/P_Grupo_1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Galy77/PF-Grupo-20/refs/heads/main/server/src/middleware/P_Grupo_1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:43Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b3c83c01-64d7-5921-a835-eb00741b6733",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/testaccount24123/testaccount24123[.]github[.]io/refs/heads/main/convolvulinolic/testaccount-io-github-v3[.]1-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/testaccount24123/testaccount24123.github.io/refs/heads/main/convolvulinolic/testaccount-io-github-v3.1-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7ab0099e-8c5f-544c-a0a4-f6afb1768f30",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/StacksMadeDev/NeighborhoodLibrary/refs/heads/main/[.]idea/Library-Neighborhood-3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/StacksMadeDev/NeighborhoodLibrary/refs/heads/main/.idea/Library-Neighborhood-3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--38cc744b-3939-59a0-8833-52bef8d60603",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/postterza1804/postterza1804[.]github[.]io/refs/heads/main/medallionist/postterza1804[.]github[.]io_v3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/postterza1804/postterza1804.github.io/refs/heads/main/medallionist/postterza1804.github.io_v3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:41Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c0b4716b-e61e-5ed2-b74d-82fd9706a902",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/xxxsoekarno-lab/xxxsoekarno-lab[.]github[.]io/refs/heads/main/Hipparion/github_io_xxxsoekarno_lab_v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/xxxsoekarno-lab/xxxsoekarno-lab.github.io/refs/heads/main/Hipparion/github_io_xxxsoekarno_lab_v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--87e93294-3052-53be-a59a-7b1ce1bc3b66",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/lenane68/BusinessCards-api/refs/heads/main/ablator/Cards_Business_api_2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/lenane68/BusinessCards-api/refs/heads/main/ablator/Cards_Business_api_2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b8c2a2df-d784-5f71-a55b-fa2307978dbc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kimingoood-code/kimingoood-code[.]github[.]io/refs/heads/main/impounder/kimingoood-code-github-io-v1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kimingoood-code/kimingoood-code.github.io/refs/heads/main/impounder/kimingoood-code-github-io-v1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7598f9b2-9da6-5514-876b-208981cdddab",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hericguedez/databot/refs/heads/main/prudelike/Software_2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hericguedez/databot/refs/heads/main/prudelike/Software_2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5cfb3b65-c5ce-5374-bcd8-42ee165d82ca",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wafi-net/mindseye-open-access-hub/refs/heads/branch/superendorse/open_hub_mindseye_access_v2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wafi-net/mindseye-open-access-hub/refs/heads/branch/superendorse/open_hub_mindseye_access_v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--41f5032f-894c-5786-958e-1382220a35f3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mahmoudar/brainrot-combat-scripts-for-roblox/refs/heads/branch/schizogenetic/for_roblox_brainrot_combat_scripts_3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mahmoudar/brainrot-combat-scripts-for-roblox/refs/heads/branch/schizogenetic/for_roblox_brainrot_combat_scripts_3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--13efbaa5-1a20-5e08-8bca-dacad274737a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kumarsreenivas051/Car-Price-Prediction/refs/heads/main/Skitswish/Price_Prediction_Car_2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kumarsreenivas051/Car-Price-Prediction/refs/heads/main/Skitswish/Price_Prediction_Car_2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--67412df8-b066-56f8-b4bd-21fb41fdee99",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sarimkhan021/PH-LEVEL-SCALE/refs/heads/main/node_modules/resolve/[.]github/P_SCALE_LEVE_3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sarimkhan021/PH-LEVEL-SCALE/refs/heads/main/node_modules/resolve/.github/P_SCALE_LEVE_3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--82464f8f-8ed1-5d3d-a408-277c9acaf513",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rafatiyan/rafatiyan[.]github[.]io/refs/heads/main/quet/github_rafatiyan_io_v2[.]7-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rafatiyan/rafatiyan.github.io/refs/heads/main/quet/github_rafatiyan_io_v2.7-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c06b73cc-50b0-55f4-ac35-18afc6180763",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/lucas-itup/node-e1/refs/heads/main/[.]idea/node_e_v2[.]8-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/lucas-itup/node-e1/refs/heads/main/.idea/node_e_v2.8-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0e3486df-d004-55f2-bf7f-78fd5c568237",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/khusnul598/khusnul598[.]github[.]io/refs/heads/main/bandhook/khusnul_github_io_2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/khusnul598/khusnul598.github.io/refs/heads/main/bandhook/khusnul_github_io_2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--548f7eda-8a2c-5b93-924d-f195250f59ca",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/pammu9481/tikler[.]json/refs/heads/main/zyga/json_tikler_v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/pammu9481/tikler.json/refs/heads/main/zyga/json_tikler_v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6ceb7033-232b-5895-b073-b62a5161dbd6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hagarnegm/MoonWalk-VR/refs/heads/main/Assets/LaunchPad/Textures/Moon_Walk_VR_skirtboard[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hagarnegm/MoonWalk-VR/refs/heads/main/Assets/LaunchPad/Textures/Moon_Walk_VR_skirtboard.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--469f77d1-070a-591c-9d8f-b30b9902139a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hagarnegm/Arabic-OCR/refs/heads/master/src/OCR_Arabic_1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hagarnegm/Arabic-OCR/refs/heads/master/src/OCR_Arabic_1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--80ede260-69a7-592d-93a7-0c60c5365283",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/wichonemes/wichonemes[.]github[.]io/refs/heads/main/fogyism/io-github-wichonemes-1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/wichonemes/wichonemes.github.io/refs/heads/main/fogyism/io-github-wichonemes-1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:35Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9dd75723-5711-56ac-b009-f30f1a1ef06e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/pammu9481/pammu1[.]json/refs/heads/main/pseudopod/pammu_json_3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/pammu9481/pammu1.json/refs/heads/main/pseudopod/pammu_json_3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:35Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--63fa23e0-5274-5db4-89a9-8124c12bd785",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nikeshRajbanshi231/Amazon-clone/refs/heads/main/oligospermous/clone-Amazon-v1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nikeshRajbanshi231/Amazon-clone/refs/heads/main/oligospermous/clone-Amazon-v1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:35Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--25cdb525-43ff-5914-845d-8479a62501e1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ANDREIII12/index/refs/heads/main/bit/Software-v3[.]8-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ANDREIII12/index/refs/heads/main/bit/Software-v3.8-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:35Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b0d3d835-f154-54f9-9624-0bb3f1949b0e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hiteknodeposit20241/hiteknodeposit20241[.]github[.]io/refs/heads/main/twelve/github-io-hiteknodeposit-3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hiteknodeposit20241/hiteknodeposit20241.github.io/refs/heads/main/twelve/github-io-hiteknodeposit-3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0263bd1f-94dd-50b5-b031-605ff720ca5d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/LaudIt/AZ-C5-CSS/refs/heads/main/images/AZ-C5-CSS-v1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/LaudIt/AZ-C5-CSS/refs/heads/main/images/AZ-C5-CSS-v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--907d08d1-6fdd-54fc-b2be-1273819d20fc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Danialpark077/danialpark077[.]github[.]io/refs/heads/main/reetam/danialpark-github-io-v1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Danialpark077/danialpark077.github.io/refs/heads/main/reetam/danialpark-github-io-v1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6f0e5ff6-0f8c-5735-945b-a3cfb6297661",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sabrinahpantoja/sabrinahpantoja[.]github[.]io/refs/heads/main/formonitrile/io_github_sabrinahpantoja_v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sabrinahpantoja/sabrinahpantoja.github.io/refs/heads/main/formonitrile/io_github_sabrinahpantoja_v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:33Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a75e0a78-4851-56cf-bf3d-210f6fe12d02",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/yeayraww24/CRUD-PHP-MySQLi-Dengan-Bootstrap-/refs/heads/master/Phasianella/CRU-My-SQ-PH-Li-Dengan-Bootstrap-v2[.]5-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/yeayraww24/CRUD-PHP-MySQLi-Dengan-Bootstrap-/refs/heads/master/Phasianella/CRU-My-SQ-PH-Li-Dengan-Bootstrap-v2.5-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6e8bf603-c548-5451-8fe6-de965ef8fc80",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rohits0410/test-git-2/refs/heads/master/rudish/git_test_3[.]0-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rohits0410/test-git-2/refs/heads/master/rudish/git_test_3.0-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8bb6c8b1-b7c4-53b3-8200-426bc45391e7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/lenane68/JSProject/refs/heads/main/projects/project4/Project-JS-1[.]5-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/lenane68/JSProject/refs/heads/main/projects/project4/Project-JS-1.5-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c4d6d18c-7357-5c38-b424-d4c701dd2f9c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ixczo/ixczo[.]github[.]io/refs/heads/main/vibetoite/github-ixczo-io-3[.]0-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ixczo/ixczo.github.io/refs/heads/main/vibetoite/github-ixczo-io-3.0-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--412ce588-fe84-5d03-bbff-f85461c2b3de",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ghm006/ghm006[.]github[.]io/refs/heads/main/denunciate/ghm006[.]github[.]io_v1[.]7-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ghm006/ghm006.github.io/refs/heads/main/denunciate/ghm006.github.io_v1.7-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b1ed0773-27de-550b-ab90-61e7834c1b66",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/dryssboy/dryssboy[.]github[.]io/refs/heads/main/reinvasion/io_github_dryssboy_v1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/dryssboy/dryssboy.github.io/refs/heads/main/reinvasion/io_github_dryssboy_v1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--05b96060-0636-503b-b596-82530e2672cb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/KILLADI-ui/arz-kiya-hai-song-lyrics-with-javascript/refs/heads/main/hippo/song_kiya_arz_lyrics_javascript_hai_with_3[.]3-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/KILLADI-ui/arz-kiya-hai-song-lyrics-with-javascript/refs/heads/main/hippo/song_kiya_arz_lyrics_javascript_hai_with_3.3-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dbca0f69-3d31-544a-bdc2-522ddff93b0e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Hwnggv/hwnggv[.]github[.]io/refs/heads/main/coaxing/io_hwnggv_github_v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Hwnggv/hwnggv.github.io/refs/heads/main/coaxing/io_hwnggv_github_v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--60669e2a-6e49-54cc-afc2-7a5704e3bb21",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AldiPradana-KD/w3school/refs/heads/main/HTML/13color/RGB/school-w-v1[.]6-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AldiPradana-KD/w3school/refs/heads/main/HTML/13color/RGB/school-w-v1.6-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d1f4a653-98d0-5259-bdab-0d83fdaa2fbf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/YPCM/test-02[.]github[.]io/refs/heads/main/imgweb/io_test_github_v1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/YPCM/test-02.github.io/refs/heads/main/imgweb/io_test_github_v1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--af28ee4d-5951-5496-80e6-b3bd1cc53790",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Gothgirl0/gothgirl0[.]github[.]io/refs/heads/main/unproducedness/gothgirl_io_github_v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Gothgirl0/gothgirl0.github.io/refs/heads/main/unproducedness/gothgirl_io_github_v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f10ae894-919e-583c-b1e8-bbec3aa1e8b1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Akbarkurniawan02/akbarkurniawan02[.]github[.]io/refs/heads/main/diagnostician/github-io-akbarkurniawan-3[.]3-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Akbarkurniawan02/akbarkurniawan02.github.io/refs/heads/main/diagnostician/github-io-akbarkurniawan-3.3-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0f05cd5e-b888-5cc9-94aa-174b5fc16346",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/indra25oktober/indra25oktober[.]github[.]io/refs/heads/main/snowless/indra_io_github_oktober_1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/indra25oktober/indra25oktober.github.io/refs/heads/main/snowless/indra_io_github_oktober_1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d074d19d-5868-5adf-9da7-96278ee2b57e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/elfnan10101996/elfnan10101996[.]github[.]io/refs/heads/main/sphacelism/io_github_elfnan_v1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/elfnan10101996/elfnan10101996.github.io/refs/heads/main/sphacelism/io_github_elfnan_v1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f94c56bc-a688-5f0c-a2d8-aa794a1ed79e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/YPCM/test-02[.]github[.]io/refs/heads/main/imgfood/github_test_io_v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/YPCM/test-02.github.io/refs/heads/main/imgfood/github_test_io_v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aac7c457-5d23-54e5-a536-7ff9df15435f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Vdoni21/vdoni21[.]github[.]io/refs/heads/main/gulgul/vdoni_github_io_1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Vdoni21/vdoni21.github.io/refs/heads/main/gulgul/vdoni_github_io_1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aa7737dc-8e54-53e4-9d2e-a463303a75f7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Gothgirl0/gothgirl0[.]github[.]io/refs/heads/main/unproducedness/io-gothgirl-github-v1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Gothgirl0/gothgirl0.github.io/refs/heads/main/unproducedness/io-gothgirl-github-v1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0fcab04a-0449-5de5-b2e6-4a9a34b86140",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/EaziRsa/eazirsa[.]github[.]io/refs/heads/main/butadiyne/io-eazirsa-github-2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/EaziRsa/eazirsa.github.io/refs/heads/main/butadiyne/io-eazirsa-github-2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--637f803c-65be-5020-a27e-5c4495607ede",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ziiyoung/ziiyoung[.]github[.]io/refs/heads/main/Dicyemata/github_ziiyoung_io_3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ziiyoung/ziiyoung.github.io/refs/heads/main/Dicyemata/github_ziiyoung_io_3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--079cd802-f788-5532-a82b-c82d419b5c2c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/khan012345/khan012345[.]github[.]io/refs/heads/main/uteropelvic/khan_github_io_v1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/khan012345/khan012345.github.io/refs/heads/main/uteropelvic/khan_github_io_v1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4a8c9148-bd25-5092-b636-3c34fdb5b66d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/WijewardhanaGayashi/Photography_Website/refs/heads/master/Views/img/testimonials/Photography_Website_3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/WijewardhanaGayashi/Photography_Website/refs/heads/master/Views/img/testimonials/Photography_Website_3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f7b0c788-56a1-5cd3-b74d-d46eb164e8b9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/MinhMui123/MinhMui123[.]github[.]io/refs/heads/main/Idoistic/MinhMui123[.]github[.]io_3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/MinhMui123/MinhMui123.github.io/refs/heads/main/Idoistic/MinhMui123.github.io_3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--24c6816f-d342-5e3b-a22c-533524109aba",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/KaterineLimaE/katerinelimae[.]github[.]io/refs/heads/main/arsono/io-katerinelimae-github-v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/KaterineLimaE/katerinelimae.github.io/refs/heads/main/arsono/io-katerinelimae-github-v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--52ff9d35-46e1-54dd-82be-d6756384cac8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/CoDiGet/codiget[.]github[.]io/refs/heads/main/scombrine/io-codiget-github-2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/CoDiGet/codiget.github.io/refs/heads/main/scombrine/io-codiget-github-2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1038ed71-0b3e-53a4-b39c-15eae15dff18",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hagarnegm/DNS-Exfiltration-Detection/refs/heads/main/src/data/Exfiltration-Detection-DN-v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hagarnegm/DNS-Exfiltration-Detection/refs/heads/main/src/data/Exfiltration-Detection-DN-v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8166a548-0d1e-574f-b280-02f61cb24a18",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/beansbujjajalo/beansbujjajalo[.]github[.]io/refs/heads/main/gnomesque/github-beansbujjajalo-io-v1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/beansbujjajalo/beansbujjajalo.github.io/refs/heads/main/gnomesque/github-beansbujjajalo-io-v1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2cc24a91-75a5-5852-8170-c2e6418defa0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ANDREIII12/andreiii12[.]github[.]io/refs/heads/main/steeplechasing/github-andreiii-io-2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ANDREIII12/andreiii12.github.io/refs/heads/main/steeplechasing/github-andreiii-io-2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cc9d8ff7-4522-599d-9688-a6f8be370f52",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ibra2008klk/ibra2008klk[.]github[.]io/refs/heads/main/salute/ibra-io-github-klk-v2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ibra2008klk/ibra2008klk.github.io/refs/heads/main/salute/ibra-io-github-klk-v2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c79e46c7-c068-5f30-94fa-020b607c8642",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/iLejuxepWaduzd/ilejuxepwaduzd[.]github[.]io/refs/heads/main/steganophthalmatous/github_ilejuxepwaduzd_io_3[.]4-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/iLejuxepWaduzd/ilejuxepwaduzd.github.io/refs/heads/main/steganophthalmatous/github_ilejuxepwaduzd_io_3.4-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a1802014-6462-54f6-b9b1-dcae57662981",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SantatraASF/FinalProject/refs/heads/master/test/helpers/Final-Project-v3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SantatraASF/FinalProject/refs/heads/master/test/helpers/Final-Project-v3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6c647348-1b14-5010-a9a5-4458414f6af1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Sdhellerman/shoguns-castle-defense-toolkit/refs/heads/branch/androgynal/toolkit-castle-shoguns-defense-3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Sdhellerman/shoguns-castle-defense-toolkit/refs/heads/branch/androgynal/toolkit-castle-shoguns-defense-3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:24Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8903ad92-6e86-584b-adc4-43911a00c877",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/shadankaifi/shadankaifi[.]github[.]io/refs/heads/main/parvipotent/io-shadankaifi-github-3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/shadankaifi/shadankaifi.github.io/refs/heads/main/parvipotent/io-shadankaifi-github-3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:23Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--529f2774-d60a-5610-bd7a-90a738c60c67",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/postterza1804/postterza1804[.]github[.]io/refs/heads/main/medallionist/io_postterza_github_v2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/postterza1804/postterza1804.github.io/refs/heads/main/medallionist/io_postterza_github_v2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:23Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0647061a-2e8a-5595-8396-cdc75551fc8e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/lucas-itup/lucas-itup[.]github[.]io/refs/heads/main/chiliad/io-github-lucas-itup-2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/lucas-itup/lucas-itup.github.io/refs/heads/main/chiliad/io-github-lucas-itup-2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:23Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--08a6ef4f-c8ff-5734-a368-e33ddabad494",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GamemodeG/gamemodeg[.]github[.]io/refs/heads/main/pike/io-github-gamemodeg-v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GamemodeG/gamemodeg.github.io/refs/heads/main/pike/io-github-gamemodeg-v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--13cce6af-a997-5494-b1aa-01ffb603f5f8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/lucas-itup/E3-JAVASCRIPT/refs/heads/main/img/JAVASCRIPT_3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/lucas-itup/E3-JAVASCRIPT/refs/heads/main/img/JAVASCRIPT_3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:21Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--45c676c7-71bd-5328-b2fc-4362dfc0174e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/freshestmanaliv1993/freshestmanaliv1993[.]github[.]io/refs/heads/main/besin/github_io_freshestmanaliv_v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/freshestmanaliv1993/freshestmanaliv1993.github.io/refs/heads/main/besin/github_io_freshestmanaliv_v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--853e0a7e-970f-561f-aec1-a5a293c121da",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/thatavarthi-raj/myjava/refs/heads/master/My2ndJAVA/myjava_3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/thatavarthi-raj/myjava/refs/heads/master/My2ndJAVA/myjava_3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a3e4e5df-346a-53c5-b755-981a78c6dd0c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/thatavarthi-raj/HelloRaj/refs/heads/master/hernant/HelloRaj_2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/thatavarthi-raj/HelloRaj/refs/heads/master/hernant/HelloRaj_2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--368dfeaa-8bce-5714-b349-0b787ebafaa3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/testma01/testma01[.]github[.]io/refs/heads/main/mezzotint/testma-io-github-v1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/testma01/testma01.github.io/refs/heads/main/mezzotint/testma-io-github-v1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d38365ed-535d-5448-8d06-d2e86894630c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/lucas-itup/E2-LANDING-Lucas-Pupilli/refs/heads/main/css/Lucas-LANDIN-Pupilli-v3[.]1-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/lucas-itup/E2-LANDING-Lucas-Pupilli/refs/heads/main/css/Lucas-LANDIN-Pupilli-v3.1-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a031d57a-597d-590e-9176-22fcd79de893",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/dadathegreat1989/dadathegreat1989[.]github[.]io/refs/heads/main/cunningly/io-github-dadathegreat-2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/dadathegreat1989/dadathegreat1989.github.io/refs/heads/main/cunningly/io-github-dadathegreat-2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--818df1a7-3965-5f05-8b6f-16223325ac57",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Para99999/para99999[.]github[.]io/refs/heads/main/heterologic/github-para-io-v1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Para99999/para99999.github.io/refs/heads/main/heterologic/github-para-io-v1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8167ba9d-f344-53f4-bf52-7f5e65ddf9ea",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/KILLADI-ui/3D-card/refs/heads/main/mutoscope/card_v1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/KILLADI-ui/3D-card/refs/heads/main/mutoscope/card_v1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1abf5a5e-04b3-5029-b01e-f2e7afdfd006",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Bamidele2025/bamidele2025[.]github[.]io/refs/heads/main/curua/io-github-bamidele-1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Bamidele2025/bamidele2025.github.io/refs/heads/main/curua/io-github-bamidele-1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--30076240-8768-56b1-9781-e00c9096e69c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/thatavarthi-raj/terraform_aws/refs/heads/main/Pentastomida/terraform_aws_v1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/thatavarthi-raj/terraform_aws/refs/heads/main/Pentastomida/terraform_aws_v1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bef7934f-3a35-5c2e-874d-4bfcc32c852b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/speciallyProgrammed/Python-Code/refs/heads/master/scrollery/Python-Code-1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/speciallyProgrammed/Python-Code/refs/heads/master/scrollery/Python-Code-1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c3a60fc8-a2a7-59d5-9e98-9099ef29e4e5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/pammu9481/tikler[.]json/refs/heads/main/zyga/json_tikler_v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/pammu9481/tikler.json/refs/heads/main/zyga/json_tikler_v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8b0a252e-d770-53fe-ad06-5cc0398e7aa7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ishant415/epic-archery/refs/heads/main/materialness/archery_epic_v1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ishant415/epic-archery/refs/heads/main/materialness/archery_epic_v1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--99cff8a9-01ea-540f-892e-bb072dbe9caf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ishant415/epic-archery-5-by-isahnt/refs/heads/main/project-template-C31-main/project-template-C31-main/isahnt_by_epic_archery_2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ishant415/epic-archery-5-by-isahnt/refs/heads/main/project-template-C31-main/project-template-C31-main/isahnt_by_epic_archery_2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--760d51e5-6c80-5686-a781-1307e95e80c7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/YPCM/posFINAL/refs/heads/main/imgfood/FINAL-pos-1[.]2-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/YPCM/posFINAL/refs/heads/main/imgfood/FINAL-pos-1.2-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--94446c75-b170-58fd-879e-39378a261f39",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/MandalAakash0525/mandalaakash0525[.]github[.]io/refs/heads/main/solidify/mandalaakash-github-io-3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/MandalAakash0525/mandalaakash0525.github.io/refs/heads/main/solidify/mandalaakash-github-io-3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f5063384-a171-5cb6-a186-690952e5eda0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AldiPradana-KD/remake3/refs/heads/main/assets/remake-v1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AldiPradana-KD/remake3/refs/heads/main/assets/remake-v1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--69f7520b-5c91-50b1-b9a4-7e236f312509",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/xxxsoekarno-lab/xxxsoekarno-lab[.]github[.]io/refs/heads/main/Hipparion/xxxsoekarno-lab-github-io-1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/xxxsoekarno-lab/xxxsoekarno-lab.github.io/refs/heads/main/Hipparion/xxxsoekarno-lab-github-io-1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4b748f5e-467a-5582-95bc-707c43b844a5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/thatavarthi-raj/Mywebsite/refs/heads/master/[.]github/Software-1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/thatavarthi-raj/Mywebsite/refs/heads/master/.github/Software-1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--48411b59-8379-58e0-8e5f-7b9d1878f7bd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/lucas-itup/E4-JAVASCRIPT/refs/heads/main/stylesheet/JAVASCRIPT-3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/lucas-itup/E4-JAVASCRIPT/refs/heads/main/stylesheet/JAVASCRIPT-3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2df9f569-767b-5ff5-a316-bd2167f52560",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/khan012345/khan012345[.]github[.]io/refs/heads/main/uteropelvic/io-github-khan-v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/khan012345/khan012345.github.io/refs/heads/main/uteropelvic/io-github-khan-v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6aaac408-bc1a-5026-80f1-7ccecfe9e1a6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/karthiklad/karthiklad[.]github[.]io/refs/heads/main/suggestingly/github_karthiklad_io_3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/karthiklad/karthiklad.github.io/refs/heads/main/suggestingly/github_karthiklad_io_3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--58db8edb-0a96-530a-84bd-a33a790d010b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/freshestmanaliv1993/freshestmanaliv1993[.]github[.]io/refs/heads/main/besin/io-github-freshestmanaliv-1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/freshestmanaliv1993/freshestmanaliv1993.github.io/refs/heads/main/besin/io-github-freshestmanaliv-1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--46fe0451-a992-5d24-9ab1-554b603e6ea1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/dadathegreat1989/dadathegreat1989[.]github[.]io/refs/heads/main/cunningly/io_github_dadathegreat_3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/dadathegreat1989/dadathegreat1989.github.io/refs/heads/main/cunningly/io_github_dadathegreat_3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1f4137f0-71b6-5f57-bee8-1f9d568e6b12",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Websyze/websyze[.]github[.]io/refs/heads/main/invisible/websyze_io_github_1[.]7-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Websyze/websyze.github.io/refs/heads/main/invisible/websyze_io_github_1.7-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--683f6fb1-ca14-5ba0-b2f4-a3ddef758a94",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Sajin46/aiml_project/refs/heads/main/project/pages/aiml-project-v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Sajin46/aiml_project/refs/heads/main/project/pages/aiml-project-v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d1e4d10c-0e96-5a1b-8274-868a2d24dcc7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/LukePham163/lukepham163[.]github[.]io/refs/heads/main/cheth/lukepham_io_github_1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/LukePham163/lukepham163.github.io/refs/heads/main/cheth/lukepham_io_github_1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d72eb061-5157-5365-a5df-a55466d92c87",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Danialpark077/danialpark077[.]github[.]io/refs/heads/main/reetam/github_danialpark_io_v2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Danialpark077/danialpark077.github.io/refs/heads/main/reetam/github_danialpark_io_v2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c554189b-b70e-55ff-b4a4-fc690c5f5849",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/seif2404/my-vencord-plugin/refs/heads/main/ferroconcretor/my-vencord-plugin-1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/seif2404/my-vencord-plugin/refs/heads/main/ferroconcretor/my-vencord-plugin-1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fa7bdadf-8db3-55b9-abea-1cdf62595ad3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/abcdethatshowyoustartthealphabet/abcdethatshowyoustartthealphabet[.]github[.]io/refs/heads/main/ceramal/github-abcdethatshowyoustartthealphabet-io-v2[.]6-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/abcdethatshowyoustartthealphabet/abcdethatshowyoustartthealphabet.github.io/refs/heads/main/ceramal/github-abcdethatshowyoustartthealphabet-io-v2.6-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7ebe9499-22e7-531e-a95c-44187ac91a75",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/S-Hariharan-06/student-management-system/refs/heads/main/src/main/java/com/student/studentmanagement/system_management_student_v2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/S-Hariharan-06/student-management-system/refs/heads/main/src/main/java/com/student/studentmanagement/system_management_student_v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c2af9cdc-afdd-5afe-85dc-7f5d8fd32907",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/CoDiGet/codiget[.]github[.]io/refs/heads/main/scombrine/codiget-io-github-1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/CoDiGet/codiget.github.io/refs/heads/main/scombrine/codiget-io-github-1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--89fd19ef-96d1-5f15-84a6-525177b105b3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AldiPradana-KD/materi/refs/heads/main/html/Software_v2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AldiPradana-KD/materi/refs/heads/main/html/Software_v2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--03b0885e-5424-5cab-9702-8fe8553730b2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hagarnegm/Insider-Threat-Detection/refs/heads/main/src/data/Kafka%20Setup%20Package/Insider-Detection-Threat-3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hagarnegm/Insider-Threat-Detection/refs/heads/main/src/data/Kafka%20Setup%20Package/Insider-Detection-Threat-3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--018c7846-c060-5c3d-9945-6eb590f7dc4c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/dheepatel01/dheepatel01[.]github[.]io/refs/heads/main/gramp/dheepatel_io_github_louey[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/dheepatel01/dheepatel01.github.io/refs/heads/main/gramp/dheepatel_io_github_louey.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--44e60979-3f1a-5213-9a17-93d018be3791",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Kirtan132003/Python-Basics/refs/heads/main/pyosepticemia/Basics_Python_isosuccinic[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Kirtan132003/Python-Basics/refs/heads/main/pyosepticemia/Basics_Python_isosuccinic.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3e70a366-9bab-5d06-acfb-ed7e367a770c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Avoarisera/thp_day1/refs/heads/master/immediateness/day-thp-2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Avoarisera/thp_day1/refs/heads/master/immediateness/day-thp-2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fcea2af6-dd35-54ae-8be0-0936ad507899",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://115[.]48[.]163[.]169:48468/i",
      "pattern": "[url:value = 'http://115.48.163.169:48468/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:15:14Z",
      "confidence": 80,
      "labels": [
        "Mozi",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--329e11d8-5725-5dbb-aabb-15af7954290c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:31[.]57[.]201[.]47",
      "pattern": "[ipv4-addr:value = '31.57.201.47']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:14:30Z",
      "confidence": 80,
      "labels": [
        "Remus",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5c7ca206-244a-5045-910b-0659216e2e14",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:107[.]148[.]158[.]243",
      "pattern": "[ipv4-addr:value = '107.148.158.243']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:14:30Z",
      "confidence": 80,
      "labels": [
        "Remus",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6b6b5aa7-13d5-5f36-956c-666291448d70",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:statswarcraft[.]com",
      "pattern": "[domain-name:value = 'statswarcraft.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:12:43Z",
      "confidence": 80,
      "labels": [
        "Remus",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--145a7c1e-9856-5f5d-9bc8-011c265a522c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:remusdownloads[.]su",
      "pattern": "[domain-name:value = 'remusdownloads.su']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:12:43Z",
      "confidence": 80,
      "labels": [
        "Remus",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--018c6b4e-4b5c-5b89-9c2c-840eb01b45c9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:remusapi[.]la",
      "pattern": "[domain-name:value = 'remusapi.la']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:12:43Z",
      "confidence": 80,
      "labels": [
        "Remus",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--26a73dd6-66fe-5b57-86d5-53843620b2cc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:cdn[.]remusdownloads[.]su",
      "pattern": "[domain-name:value = 'cdn.remusdownloads.su']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:12:43Z",
      "confidence": 80,
      "labels": [
        "Remus",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a0e311e6-d9cb-5b0f-9232-66ffd2db48c9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:917293de84f76d7c3524185b22b6bab9838e884c794f0d9dea170717095fc8f6",
      "pattern": "[file:hashes.'SHA-256' = '917293de84f76d7c3524185b22b6bab9838e884c794f0d9dea170717095fc8f6']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:10:51Z",
      "confidence": 80,
      "labels": [
        "Mirai",
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ceabbe95-ae4c-59e5-8e38-7e6737649f5a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:6z9bnriq[.]ecprofessionals[.]co",
      "pattern": "[domain-name:value = '6z9bnriq.ecprofessionals.co']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:09:17Z",
      "confidence": 80,
      "labels": [
        "ClearFake",
        "mac-0x68dc",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7da85c6e-c79d-5bd6-a4a5-fdf0761b0bed",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:43b93575dd46b2701ad639648a13caecdde8f7139d07683127d946adc0161526",
      "pattern": "[file:hashes.'SHA-256' = '43b93575dd46b2701ad639648a13caecdde8f7139d07683127d946adc0161526']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:08:32Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "haven",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ea672e56-d58f-5cca-b141-eb28eccbf826",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:85baa2398a8fd9434c63110ef9264f1da3dabc5a3b548915151e039940e42111",
      "pattern": "[file:hashes.'SHA-256' = '85baa2398a8fd9434c63110ef9264f1da3dabc5a3b548915151e039940e42111']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:06:49Z",
      "confidence": 80,
      "labels": [
        "Mirai",
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--57953fc6-78c4-521a-9059-85f21631e741",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:landing[.]thtdev[.]xyz",
      "pattern": "[domain-name:value = 'landing.thtdev.xyz']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:05:55Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--34565c47-265b-57d2-b53d-f2ceedf4cfae",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:802212acb5c7249d53ff46988b8b156f2a49eb65ef1b6b8e0eeceb954c6469c3",
      "pattern": "[file:hashes.'SHA-256' = '802212acb5c7249d53ff46988b8b156f2a49eb65ef1b6b8e0eeceb954c6469c3']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:04:57Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "forge",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--31e36330-24c2-5bd0-aefa-68a5664ab278",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:ecprofessionals[.]co",
      "pattern": "[domain-name:value = 'ecprofessionals.co']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:03:17Z",
      "confidence": 80,
      "labels": [
        "ClearFake",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c6b706f9-4778-59e2-99f3-f8fe9e2b4803",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/yeayraww24/Ujilevel_Tengah_Semester_Ganjil/refs/heads/master/philotadpole/Ujilevel_Tengah_Semester_Ganjil[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/yeayraww24/Ujilevel_Tengah_Semester_Ganjil/refs/heads/master/philotadpole/Ujilevel_Tengah_Semester_Ganjil.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--05884146-35a9-5461-beb5-12128262d01b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/smksamir/DATA-STRUCTURES-IMPLEMENTATION-USING-SWINGS-IN-JAVA/refs/heads/main/src/com/DSAProject/USIN_IMPLEMENTATIO_I_JAVA_DAT_SWING_STRUCTURE_v2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/smksamir/DATA-STRUCTURES-IMPLEMENTATION-USING-SWINGS-IN-JAVA/refs/heads/main/src/com/DSAProject/USIN_IMPLEMENTATIO_I_JAVA_DAT_SWING_STRUCTURE_v2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--608b9c6f-ef37-5743-b618-83b07e37a4a5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ksubham-dora2002/ksubham-dora2002[.]github[.]io/refs/heads/main/strigulose/ksubham_io_github_dora_v1[.]7-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ksubham-dora2002/ksubham-dora2002.github.io/refs/heads/main/strigulose/ksubham_io_github_dora_v1.7-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6435f569-37c7-5a14-b4fa-b7a79f354606",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ferdiansusanto/ferdiansusanto[.]github[.]io/refs/heads/main/knothorn/ferdiansusanto_github_io_3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ferdiansusanto/ferdiansusanto.github.io/refs/heads/main/knothorn/ferdiansusanto_github_io_3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4f97b68a-e40e-5da1-9f48-8fea74eb37c6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/CartierSeps/cartierseps[.]github[.]io/refs/heads/main/scut/io-github-cartierseps-1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/CartierSeps/cartierseps.github.io/refs/heads/main/scut/io-github-cartierseps-1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b87c2949-f11a-5695-b05f-d57d5a2c3c5e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Arno1/PracticalML_Project/refs/heads/master/unmammonized/Project-Practical-M-1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Arno1/PracticalML_Project/refs/heads/master/unmammonized/Project-Practical-M-1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--04baec7d-ab09-5045-994e-199004b54e32",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mustapha07022010/C29/refs/heads/main/Project-Template-C29-main%203/Software_v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mustapha07022010/C29/refs/heads/main/Project-Template-C29-main%203/Software_v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4ab43130-f763-5a26-a85c-df773a904e8d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kumarsreenivas051/CPP/refs/heads/master/menoplania/Software_v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kumarsreenivas051/CPP/refs/heads/master/menoplania/Software_v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4da090c9-5f95-5847-a651-c78b740a4d6d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hicemen/hicemen[.]github[.]io/refs/heads/main/trekpath/hicemen-io-github-v1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hicemen/hicemen.github.io/refs/heads/main/trekpath/hicemen-io-github-v1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--19f834e3-d153-5fe0-bd39-daf442c73bff",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/akshay2699/AdminLTE/refs/heads/main/public/vendors/plugins/codemirror/mode/css/AdminLTE-v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/akshay2699/AdminLTE/refs/heads/main/public/vendors/plugins/codemirror/mode/css/AdminLTE-v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--48219609-2217-53d0-9139-d26609061275",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Vykemopi/Unity-3d-Movement-in-C-/refs/heads/main/slingshot/Movement-d-in-Unity-3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Vykemopi/Unity-3d-Movement-in-C-/refs/heads/main/slingshot/Movement-d-in-Unity-3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--86d288a0-4c83-53ce-aade-bd1770d79365",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Perpaft11/Perpaft11[.]github[.]io/refs/heads/main/stoneboat/Perpaft11[.]github[.]io_v2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Perpaft11/Perpaft11.github.io/refs/heads/main/stoneboat/Perpaft11.github.io_v2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7e2f2aef-4431-55eb-928f-943126573767",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/NafisMuntasir/nafismuntasir[.]github[.]io/refs/heads/main/unstockinged/io_github_nafismuntasir_v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/NafisMuntasir/nafismuntasir.github.io/refs/heads/main/unstockinged/io_github_nafismuntasir_v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--627dbc52-f3f9-58ea-aac7-4488c0d14ee2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Habeebmoulana/habeebmoulana[.]github[.]io/refs/heads/main/adjutorious/io_habeebmoulana_github_v3[.]5-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Habeebmoulana/habeebmoulana.github.io/refs/heads/main/adjutorious/io_habeebmoulana_github_v3.5-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7cf80a59-1b25-5278-b2e8-e07f607ddf30",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/CharlotteJV/java-spring-starter/refs/heads/main/src/test/java/vn/hoidanit/laptopshop/starter-spring-java-v1[.]0-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/CharlotteJV/java-spring-starter/refs/heads/main/src/test/java/vn/hoidanit/laptopshop/starter-spring-java-v1.0-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4796039a-6fe8-5bf6-b95c-9a4df6751955",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/CharlotteJV/demo-java_web-eclipse-ASM/refs/heads/master/Ps24565_TranMinhDuy/target/eclipse-demo-ASM-java-web-v3[.]0-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/CharlotteJV/demo-java_web-eclipse-ASM/refs/heads/master/Ps24565_TranMinhDuy/target/eclipse-demo-ASM-java-web-v3.0-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2eff7acf-eeaa-5a71-a776-32c0d519c091",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Bibi-hajra/CGPA-Calculator-project/refs/heads/main/cultivate/CGP_project_Calculator_v3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Bibi-hajra/CGPA-Calculator-project/refs/heads/main/cultivate/CGP_project_Calculator_v3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8d3c6b99-65e0-5823-9de4-76e96984aa83",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/smksamir/EmployeeApp/refs/heads/master/EmployeeApp/src/test/App_Employee_2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/smksamir/EmployeeApp/refs/heads/master/EmployeeApp/src/test/App_Employee_2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0f450df6-21b3-5ff8-8173-822aec07a801",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mustapha07022010/do-youknowthis/refs/heads/main/Troglodytinae/youknowthis-do-2[.]3-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mustapha07022010/do-youknowthis/refs/heads/main/Troglodytinae/youknowthis-do-2.3-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a6542d1b-b47b-58d3-8404-7d10af6ea47c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/bytenichen7/Streamer-Panel/refs/heads/main/antisialic/Panel-Streamer-3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/bytenichen7/Streamer-Panel/refs/heads/main/antisialic/Panel-Streamer-3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--08cb0566-1356-519c-a687-fcf304d60492",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Younishassan123/younishassan123[.]github[.]io/refs/heads/main/supercritical/younishassan_io_github_3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Younishassan123/younishassan123.github.io/refs/heads/main/supercritical/younishassan_io_github_3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aab7c506-aa18-5e4e-b8fb-4b71d46c49d7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/WaqarDev69/waqardev69[.]github[.]io/refs/heads/main/milliammeter/io-waqardev-github-v2[.]6-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/WaqarDev69/waqardev69.github.io/refs/heads/main/milliammeter/io-waqardev-github-v2.6-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--394cacc2-a40f-5f5d-8396-f5515b2c8cba",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SecretResell/HyperWave/refs/heads/main/chlorinize/Hyper_Wave_v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SecretResell/HyperWave/refs/heads/main/chlorinize/Hyper_Wave_v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4b88a729-40cf-5950-8d35-3eb00b926a43",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/NyatakuIbnuRosada/rainguard/refs/heads/main/android/app/src/main/res/values/Software_1[.]0-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/NyatakuIbnuRosada/rainguard/refs/heads/main/android/app/src/main/res/values/Software_1.0-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--af270765-a23a-5356-9610-16660cc1832d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/thatavarthi-raj/HelloRaj/refs/heads/master/hernant/Hello_Raj_1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/thatavarthi-raj/HelloRaj/refs/heads/master/hernant/Hello_Raj_1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--37facb3d-d435-5e66-b0df-0046fbb46b71",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Zowil06/zowil06[.]github[.]io/refs/heads/main/musicography/zowil-io-github-3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Zowil06/zowil06.github.io/refs/heads/main/musicography/zowil-io-github-3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8329db42-cbef-59b9-b891-e77b41bb87d0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Alexandre2377/alexandre2377[.]github[.]io/refs/heads/main/thermolabile/github_alexandre_io_1[.]1-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Alexandre2377/alexandre2377.github.io/refs/heads/main/thermolabile/github_alexandre_io_1.1-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--acd18a86-898e-5094-9566-688666dd0e26",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mustapha07022010/102proj/refs/heads/main/Gryllus/proj-1[.]3-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mustapha07022010/102proj/refs/heads/main/Gryllus/proj-1.3-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--60a6f118-d7ae-571e-90b6-e7350427920b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/WaqarDev69/MY-WEB/refs/heads/master/Weather%20App/node_modules/is-glob/WEB_M_v2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/WaqarDev69/MY-WEB/refs/heads/master/Weather%20App/node_modules/is-glob/WEB_M_v2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a605ba99-7f4e-58d0-915d-62048706435f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/smksamir/ShopNest/refs/heads/main/src/main/java/com/shopNest/customer/Shop_Nest_2[.]0-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/smksamir/ShopNest/refs/heads/main/src/main/java/com/shopNest/customer/Shop_Nest_2.0-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b8963ded-941d-5287-82a5-4e68c3c83cc3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/MaybeVatsal/Ai-based-Face-Recognition-Attendance-System/refs/heads/main/agnomen/Face-Attendance-Ai-Recognition-based-System-v1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/MaybeVatsal/Ai-based-Face-Recognition-Attendance-System/refs/heads/main/agnomen/Face-Attendance-Ai-Recognition-based-System-v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4583ac41-826d-59de-ad3e-ff5a4b581844",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/CharlotteJV/show_carr/refs/heads/main/utils/carr-show-3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/CharlotteJV/show_carr/refs/heads/main/utils/carr-show-3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--05c0d19f-fd6d-5412-83f1-dc865be65760",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/CharlotteJV/Shopfood/refs/heads/main/Sorbonical/Software_v1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/CharlotteJV/Shopfood/refs/heads/main/Sorbonical/Software_v1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--07675abf-808b-5d89-934d-64366e152f34",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/liam234e23432/liam234e23432[.]github[.]io/refs/heads/main/pelmatozoic/github-io-e-liam-v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/liam234e23432/liam234e23432.github.io/refs/heads/main/pelmatozoic/github-io-e-liam-v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:07Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--da28c452-d690-5174-8304-f08cd28d4501",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SheyiTrig/CRM/refs/heads/master/bootstrap/css/CRM_v2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SheyiTrig/CRM/refs/heads/master/bootstrap/css/CRM_v2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:07Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3f874f26-64c6-57e8-ae32-fcd2405de28d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/waleed-1/waleed-1[.]github[.]io/refs/heads/main/overeffort/waleed-github-io-v1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/waleed-1/waleed-1.github.io/refs/heads/main/overeffort/waleed-github-io-v1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:05Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--014cc2e1-845b-504b-9434-8cc9f57fb40f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/filhotarcisio/projeto_ong/refs/heads/main/js/projeto_ong_2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/filhotarcisio/projeto_ong/refs/heads/main/js/projeto_ong_2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:05Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5b54f545-e7d0-5c01-9cb2-fb2c4fb48cd7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Rushi-Joshi-au50/First-Repo/refs/heads/main/superedification/Repo-First-3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Rushi-Joshi-au50/First-Repo/refs/heads/main/superedification/Repo-First-3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:05Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2b499eb2-096e-5d56-99b0-041b957f2fdf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/EDDY7688/EDDY7688/refs/heads/main/poultice/EDD-v2[.]6-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/EDDY7688/EDDY7688/refs/heads/main/poultice/EDD-v2.6-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:05Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9c934395-8456-5451-b77e-d237319cb48b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/CharlotteJV/netflix-clone/refs/heads/main/pages/watch/netflix-clone-v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/CharlotteJV/netflix-clone/refs/heads/main/pages/watch/netflix-clone-v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:05Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3bc68f88-6310-51f2-966d-006ecf8f1329",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Bibi-hajra/ASSIGNMENT/refs/heads/main/abrotine/Software_3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Bibi-hajra/ASSIGNMENT/refs/heads/main/abrotine/Software_3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:05Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bc348e28-552b-5141-9b27-b050fb8d5600",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nishantsunuwar/assassins-creed-shadows-adult-enhancements/refs/heads/branch/messor/assassins-adult-creed-enhancements-shadows-1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nishantsunuwar/assassins-creed-shadows-adult-enhancements/refs/heads/branch/messor/assassins-adult-creed-enhancements-shadows-1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:04Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fe8bb399-9800-59de-baca-f98ea02d365e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mustapha07022010/archery24/refs/heads/main/PRO-C24-V3-Template-main/archery-v3[.]9-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mustapha07022010/archery24/refs/heads/main/PRO-C24-V3-Template-main/archery-v3.9-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:03Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fcf733a1-a7de-510a-9b70-4ea9513c9204",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:39b103515513b85419b3ea2a50e4d63957cd87fec7edd826e79c1206b8fcf818",
      "pattern": "[file:hashes.'SHA-256' = '39b103515513b85419b3ea2a50e4d63957cd87fec7edd826e79c1206b8fcf818']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:03Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "boost",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9f810246-0351-5357-a744-001364c000ca",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rijackkson/dio-java-basico/refs/heads/main/src/basico_java_dio_v1[.]9-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rijackkson/dio-java-basico/refs/heads/main/src/basico_java_dio_v1.9-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:02Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--80f35212-5da9-53c9-8e0b-de96a15505a7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mustapha07022010/kangaroo-38/refs/heads/main/PRO-C38-Template-main/assets/kangaroo-v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mustapha07022010/kangaroo-38/refs/heads/main/PRO-C38-Template-main/assets/kangaroo-v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:02Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--26a5a574-6a1a-5575-bc55-a919393c8e8b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mustapha07022010/25-archer/refs/heads/main/PRO-C25-Template-main%202/assets/archer_3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mustapha07022010/25-archer/refs/heads/main/PRO-C25-Template-main%202/assets/archer_3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:02Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3999ea0e-0c47-5261-b8c6-3fa92fa57c1d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kabita10/Hr-Dashboard/refs/heads/master/src/app/user-dashboard/Dashboard-Hr-v3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kabita10/Hr-Dashboard/refs/heads/master/src/app/user-dashboard/Dashboard-Hr-v3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:02Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1b86616b-0efe-5611-b580-5823b6afb45c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/akshay2699/html-portfolio/refs/heads/main/public/html-portfolio-v2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/akshay2699/html-portfolio/refs/heads/main/public/html-portfolio-v2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:02Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--47b51843-ca57-5ec8-af08-678251c2fcd3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SamEricBailey/samericbailey[.]github[.]io/refs/heads/main/verbal/samericbailey-github-io-3[.]8-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SamEricBailey/samericbailey.github.io/refs/heads/main/verbal/samericbailey-github-io-3.8-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:02Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7f9cbb77-ac38-59a7-9579-98d37872c08d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ruksol/Interior-Designer/refs/heads/main/Artinskian/Designer_Interior_3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ruksol/Interior-Designer/refs/heads/main/Artinskian/Designer_Interior_3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:01Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fc32470b-6a6b-54db-8fce-a787b32779b9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mustapha07022010/html1/refs/heads/main/TutorialHub-2-template-main%205/html-1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mustapha07022010/html1/refs/heads/main/TutorialHub-2-template-main%205/html-1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:01Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--789b59ea-0504-5d7d-a29b-a1c9112459f5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ishant415/class-16-ballon-buster3/refs/heads/main/neurilemmatic/buster-ballon-class-3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ishant415/class-16-ballon-buster3/refs/heads/main/neurilemmatic/buster-ballon-class-3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:01Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4bb66236-f2b4-5d49-9607-27e78a8ea091",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/diego707/ejemplo_primefaces/refs/heads/master/src/java/controller/primefaces_ejemplo_v3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/diego707/ejemplo_primefaces/refs/heads/master/src/java/controller/primefaces_ejemplo_v3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:01Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2b52f5f2-caf5-53b0-842a-274f2e775b4e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/CarRoc07/TrabajoGrupalJS/refs/heads/main/[.]history/Trabajo_Grupal_JS_v1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/CarRoc07/TrabajoGrupalJS/refs/heads/main/.history/Trabajo_Grupal_JS_v1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:01Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e524072a-eef2-54b0-8078-46f8a3603205",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mustapha07022010/104proj/refs/heads/main/project104/proj_v2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mustapha07022010/104proj/refs/heads/main/project104/proj_v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1054b86b-9332-52e6-a964-b8c96801c969",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/jorgewgouveia/bubble-gum-simulator-script-hub/refs/heads/branch/prophyllum/simulator_script_gum_bubble_hub_v2[.]7-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/jorgewgouveia/bubble-gum-simulator-script-hub/refs/heads/branch/prophyllum/simulator_script_gum_bubble_hub_v2.7-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--80f86c42-f39e-548b-a982-5564cf479da0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hanyubin2007/hanyubin2007[.]github[.]io/refs/heads/main/flesher/io-hanyubin-github-v1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hanyubin2007/hanyubin2007.github.io/refs/heads/main/flesher/io-hanyubin-github-v1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--712e1ef2-5902-5cac-84b3-1dffda8049f0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/barone-unuakpor/barone-unuakpor[.]github[.]io/refs/heads/main/unarbitrary/io-github-unuakpor-barone-1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/barone-unuakpor/barone-unuakpor.github.io/refs/heads/main/unarbitrary/io-github-unuakpor-barone-1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--42621a99-b7e4-5bf2-8b1c-1a4a776cbab2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Zowil06/bai-tap-lon-cuoi-ky-/refs/heads/master/demonize/lon_tap_ky_bai_cuoi_2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Zowil06/bai-tap-lon-cuoi-ky-/refs/heads/master/demonize/lon_tap_ky_bai_cuoi_2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b08bbf02-944b-5764-91bd-f90a156fab88",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Nashteshri7/doom-the-dark-ages-pc-version/refs/heads/branch/quindecima/doom-the-dark-ages-pc-version-v2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Nashteshri7/doom-the-dark-ages-pc-version/refs/heads/branch/quindecima/doom-the-dark-ages-pc-version-v2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f6f5ed06-f070-52ba-96db-1fae730b0fee",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Feezah/module5_solution/refs/heads/gh-pages/site/images/menu/NL/module5_solution_3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Feezah/module5_solution/refs/heads/gh-pages/site/images/menu/NL/module5_solution_3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:02:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6c04dd9c-c8ac-5329-a50e-85bed57e0c02",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kumarsreenivas051/Air-Brake/refs/heads/master/laudification/Brake_Air_1[.]4-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kumarsreenivas051/Air-Brake/refs/heads/master/laudification/Brake_Air_1.4-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e5a9be5a-3c1f-50fd-9e15-ee34290954cb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hiharpin/eth-todo-list/refs/heads/main/contracts/todo-list-eth-v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hiharpin/eth-todo-list/refs/heads/main/contracts/todo-list-eth-v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9bfaadd9-cda0-5606-a277-4945faf852a5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/DeepZatakiya/deepzatakiya[.]github[.]io/refs/heads/main/overtint/github_io_deepzatakiya_v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/DeepZatakiya/deepzatakiya.github.io/refs/heads/main/overtint/github_io_deepzatakiya_v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ea0b1bf2-4e9f-5bba-8118-e5843c269433",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ishant415/epic-archery-part2/refs/heads/main/hominisection/epic-archery-part-v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ishant415/epic-archery-part2/refs/heads/main/hominisection/epic-archery-part-v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--445ce3ff-eefa-57ef-aa6f-47f717d13bf5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mustapha07022010/37quiz/refs/heads/main/PRO-C37-Template-main/js/quiz_3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mustapha07022010/37quiz/refs/heads/main/PRO-C37-Template-main/js/quiz_3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a6b00ae7-de83-5502-a3dc-4c2f1a96c2d6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/akshay2699/my-portfolio/refs/heads/main/asset/portfolio-my-1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/akshay2699/my-portfolio/refs/heads/main/asset/portfolio-my-1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eb2294f6-ceb4-561c-85d6-e562f8f9186f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Solatglas/Streamify/refs/heads/Master/thigmonegative/Software_v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Solatglas/Streamify/refs/heads/Master/thigmonegative/Software_v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--716ac66a-ecc3-5a28-9507-c2e18c9521cd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/NovaBiriseg/novabiriseg[.]github[.]io/refs/heads/main/quadrilogue/github_io_novabiriseg_v3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/NovaBiriseg/novabiriseg.github.io/refs/heads/main/quadrilogue/github_io_novabiriseg_v3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--14dc6239-229a-5367-b61e-c701f666bbc8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mustapha07022010/archery28/refs/heads/main/PRO-C28-Template-main/archery-3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mustapha07022010/archery28/refs/heads/main/PRO-C28-Template-main/archery-3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4295cb58-ce45-5a3d-9ca7-4124eb406138",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Rianvaleni/rianvaleni[.]github[.]io/refs/heads/main/canceler/github_rianvaleni_io_v1[.]8-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Rianvaleni/rianvaleni.github.io/refs/heads/main/canceler/github_rianvaleni_io_v1.8-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--be7a399c-eaf2-5864-8a86-c0f91e02d334",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ZayZay1nonly/zayzay1nonly[.]github[.]io/refs/heads/main/ingression/io_zayzay_nonly_github_v3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ZayZay1nonly/zayzay1nonly.github.io/refs/heads/main/ingression/io_zayzay_nonly_github_v3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:54Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e01d5c75-4b71-5dd7-b1dc-57c7f511c6de",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/RafaEngineer/WebApi_kotlin/refs/heads/Get/unusual/WebApi_kotlin[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/RafaEngineer/WebApi_kotlin/refs/heads/Get/unusual/WebApi_kotlin.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:54Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aee2b69a-56ae-5634-ba27-07d803df073c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/LaudIt/uew-icthub/refs/heads/main/scatterable/uew-icthub_v3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/LaudIt/uew-icthub/refs/heads/main/scatterable/uew-icthub_v3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:54Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a9b52c1f-7ffc-5814-b00f-0b19076dff5b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rijackkson/clinica-mediaca-dio-modulo-html/refs/heads/main/medias/mediaca_clinica_html_modulo_dio_v2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rijackkson/clinica-mediaca-dio-modulo-html/refs/heads/main/medias/mediaca_clinica_html_modulo_dio_v2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:53Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8bedcf33-15c6-5251-b715-5e26cedd49ac",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Zinqqr/Simple-Customer-Review-Page/refs/heads/main/images/Review_Customer_Simple_Page_v3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Zinqqr/Simple-Customer-Review-Page/refs/heads/main/images/Review_Customer_Simple_Page_v3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:53Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--59095b29-a1f1-5611-822f-32d7dbc17939",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/KaterineLimaE/Tienda_LunaStore/refs/heads/main/node_modules/send/Store-Tienda-Luna-v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/KaterineLimaE/Tienda_LunaStore/refs/heads/main/node_modules/send/Store-Tienda-Luna-v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:53Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ca39a724-53ba-542b-8d6c-f017fd0eb186",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GIPPY754/dragon-adventures-roblox-scripting-hub/refs/heads/branch/rubrician/dragon_adventures_scripting_roblox_hub_3[.]1-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GIPPY754/dragon-adventures-roblox-scripting-hub/refs/heads/branch/rubrician/dragon_adventures_scripting_roblox_hub_3.1-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:53Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6ceede2f-e4ab-57e4-835f-b75a12c56b88",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nishantsunuwar/test/refs/heads/master/tetraploidy/Software_1[.]1-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nishantsunuwar/test/refs/heads/master/tetraploidy/Software_1.1-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:52Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e16f8f0d-23bd-5db4-9b75-c85c0a9a1330",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/helanzhiyi/helanzhiyi[.]github[.]io/refs/heads/main/pensionary/helanzhiyi-io-github-v2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/helanzhiyi/helanzhiyi.github.io/refs/heads/main/pensionary/helanzhiyi-io-github-v2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:52Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--95bb0c9a-c33f-5ced-a496-be6cc84d6a97",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SheyiTrig/CRM/refs/heads/master/js/CRM-v3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SheyiTrig/CRM/refs/heads/master/js/CRM-v3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:52Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bb5a6deb-ce47-52a9-bd9e-ccbfac9f395b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ForzBeta/forzbeta[.]github[.]io/refs/heads/main/Vened/forzbeta_github_io_v2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ForzBeta/forzbeta.github.io/refs/heads/main/Vened/forzbeta_github_io_v2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:52Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0179a7f2-7e7e-510d-bd76-346c62075d7a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/wanderasadallah/wanderasadallah[.]github[.]io/refs/heads/main/inlook/wanderasadallah_github_io_v2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/wanderasadallah/wanderasadallah.github.io/refs/heads/main/inlook/wanderasadallah_github_io_v2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--52970929-6ba8-5c09-ad3d-9f9477ce6e92",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/yeayraww24/CRUD-PHP-MYSQL-DENGAN-AJAX/refs/heads/main/eyn/PH_AJAX_DENGA_CRU_MYSQ_v1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/yeayraww24/CRUD-PHP-MYSQL-DENGAN-AJAX/refs/heads/main/eyn/PH_AJAX_DENGA_CRU_MYSQ_v1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0a101257-03b1-535b-b8da-64d431fc0ed8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/waleed-1/waleed-1[.]github[.]io/refs/heads/main/overeffort/waleed_github_io_hypothecative[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/waleed-1/waleed-1.github.io/refs/heads/main/overeffort/waleed_github_io_hypothecative.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9c32b0cb-f42e-57d8-a041-85368f254232",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/testma01/testma01[.]github[.]io/refs/heads/main/mezzotint/io-testma-github-v2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/testma01/testma01.github.io/refs/heads/main/mezzotint/io-testma-github-v2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--21aaf33d-f8ac-501b-bfeb-b7f84b60cb8d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mustapha07022010/gun-42/refs/heads/main/Project-Template-C42-main/gun-v1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mustapha07022010/gun-42/refs/heads/main/Project-Template-C42-main/gun-v1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6ce18805-bd27-5262-9d23-f671c4535988",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mustapha07022010/27-archer/refs/heads/main/PRO-C27-Template-main/archer-2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mustapha07022010/27-archer/refs/heads/main/PRO-C27-Template-main/archer-2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ef95926e-c5ab-5fc3-b892-84fe12ea3305",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ishant415/epic-archery-iiiii/refs/heads/main/project-template-eoic-archery-5-main/project-template-eoic-archery-5-main/assets/archery_iiiii_epic_v3[.]1-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ishant415/epic-archery-iiiii/refs/heads/main/project-template-eoic-archery-5-main/project-template-eoic-archery-5-main/assets/archery_iiiii_epic_v3.1-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bcdb572b-d590-5fbe-9646-19eb66fcfe11",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hiharpin/web3[.]0/refs/heads/web3[.]0/subjectable/web_2[.]9-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hiharpin/web3.0/refs/heads/web3.0/subjectable/web_2.9-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2941df31-4e4b-568a-bc7e-b91af6859c23",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/cesarsilva14/cesarsilva14[.]github[.]io/refs/heads/main/pannationalism/io_cesarsilva_github_2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/cesarsilva14/cesarsilva14.github.io/refs/heads/main/pannationalism/io_cesarsilva_github_2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--93f51aaf-86c3-5a9e-a039-ab1a3b53c70b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Movlud07/MyApi5_proj/refs/heads/master/MyApi5[.]Core/Api-My-proj-v3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Movlud07/MyApi5_proj/refs/heads/master/MyApi5.Core/Api-My-proj-v3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a7a2b57f-a30b-57cc-b1fe-58ecb0bdc4a6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Juniorvidigal25/juniorvidigal25[.]github[.]io/refs/heads/main/voussoir/github_juniorvidigal_io_2[.]0-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Juniorvidigal25/juniorvidigal25.github.io/refs/heads/main/voussoir/github_juniorvidigal_io_2.0-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--87a938c1-01fa-535e-931b-688378fcff8d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/CharlotteJV/Learn-to-git-for-work/refs/heads/main/rufescent/Learn_git_work_for_to_v3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/CharlotteJV/Learn-to-git-for-work/refs/heads/main/rufescent/Learn_git_work_for_to_v3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--50dc0966-a26e-5d59-aa4a-8fb33041821e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ArianVCL1985/arianvcl1985[.]github[.]io/refs/heads/main/summulist/github_io_arianvcl_1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ArianVCL1985/arianvcl1985.github.io/refs/heads/main/summulist/github_io_arianvcl_1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8fe25483-a216-5297-b815-8e3338ce5b5e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/KMERA2024/kmera2024[.]github[.]io/refs/heads/main/lambent/io-kmera-github-2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/KMERA2024/kmera2024.github.io/refs/heads/main/lambent/io-kmera-github-2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:49Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--36b96ef2-d212-5c20-bbe1-969ae057e07c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ninjacazul/ninjacazul[.]github[.]io/refs/heads/main/nonextended/ninjacazul_github_io_superincomprehensible[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ninjacazul/ninjacazul.github.io/refs/heads/main/nonextended/ninjacazul_github_io_superincomprehensible.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--180eaff2-73b9-5eb5-ac29-328caf036440",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Garnel-Diffo/text-extraction-on-license-plates/refs/heads/main/data/text_license_plates_extraction_on_v1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Garnel-Diffo/text-extraction-on-license-plates/refs/heads/main/data/text_license_plates_extraction_on_v1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--17570c63-2189-5863-bbd4-3b98ceb3589a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/BomJr/bomjr[.]github[.]io/refs/heads/main/fossilated/io_bomjr_github_v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/BomJr/bomjr.github.io/refs/heads/main/fossilated/io_bomjr_github_v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b17a882e-2024-5f80-9dcc-23ff161f596f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/niel17/niel17[.]github[.]io/refs/heads/main/serin/github-niel-io-v2[.]4-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/niel17/niel17.github.io/refs/heads/main/serin/github-niel-io-v2.4-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a9dc7f22-19d5-54ea-a2d8-261001cd82ec",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/YPCM/ypcm[.]github[.]io/refs/heads/main/discursative/github_io_ypcm_v3[.]3-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/YPCM/ypcm.github.io/refs/heads/main/discursative/github_io_ypcm_v3.3-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c3e60e19-626d-52ce-82f4-de99ec09e6fd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Dhanush-TD/House_prediction/refs/heads/main/Mexicanize/House_prediction[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Dhanush-TD/House_prediction/refs/heads/main/Mexicanize/House_prediction.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b5bdda4d-59f9-54f4-9e8d-c47972bc7afc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rijackkson/clinica-mediaca-dio-modulo-html/refs/heads/main/medias/mediaca-dio-html-modulo-clinica-v1[.]3-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rijackkson/clinica-mediaca-dio-modulo-html/refs/heads/main/medias/mediaca-dio-html-modulo-clinica-v1.3-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c6711eb8-6cd5-508d-9aca-533d2da40d43",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nahomabraham/RideShare/refs/heads/main/ride_share/android/app/src/main/res/drawable-v21/Share-Ride-v2[.]9-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nahomabraham/RideShare/refs/heads/main/ride_share/android/app/src/main/res/drawable-v21/Share-Ride-v2.9-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--38fb5f32-9d14-5e06-9b6a-b094ae65b6d1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mustapha07022010/fruit/refs/heads/main/hobbly/Software-3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mustapha07022010/fruit/refs/heads/main/hobbly/Software-3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e59576d1-bbd5-5fb9-a8f3-9e235e3cfef2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ikky-Ei/Backend1/refs/heads/main/node_modules/mongoose/lib/helpers/error/Backend-v3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ikky-Ei/Backend1/refs/heads/main/node_modules/mongoose/lib/helpers/error/Backend-v3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6222775e-6647-5c84-b716-3549b21de1b0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Solatglas/Web-Basics/refs/heads/Master/stemmery/Basics-Web-v2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Solatglas/Web-Basics/refs/heads/Master/stemmery/Basics-Web-v2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0a57a961-6040-5be3-870e-8911a9af677a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/yeayraww24/basic_javascript/refs/heads/master/insertional/basic_javascript[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/yeayraww24/basic_javascript/refs/heads/master/insertional/basic_javascript.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--969e521e-5207-59f9-8ef1-16ece14297fe",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ruksol/ECP/refs/heads/main/appealingly/Software_v2[.]6-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ruksol/ECP/refs/heads/main/appealingly/Software_v2.6-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ab026312-4877-57ea-900a-481f7b9ce5e2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Dilnawaziitr/Final_Assignment/refs/heads/main/fiacre/Final_Assignment_v2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Dilnawaziitr/Final_Assignment/refs/heads/main/fiacre/Final_Assignment_v2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0074f564-c95f-5f1b-88df-bbf06789d57b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/smksamir/ShopNest/refs/heads/main/src/main/webapp/prodImg/Nest_Shop_3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/smksamir/ShopNest/refs/heads/main/src/main/webapp/prodImg/Nest_Shop_3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:43Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--78b43686-6449-5a96-bc38-3d3b8f2809e0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Zowil06/bai-tap-lon-cuoi-ky-/refs/heads/master/demonize/ky-lon-tap-bai-cuoi-1[.]3-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Zowil06/bai-tap-lon-cuoi-ky-/refs/heads/master/demonize/ky-lon-tap-bai-cuoi-1.3-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:43Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0e4b3cef-6b8b-595d-8e95-a41a53340e0c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/tatan1099/Tienda_Naturvida_Actualizada/refs/heads/main/CapaDatos/Properties/Tienda_Naturvida_Actualizada_v3[.]3-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/tatan1099/Tienda_Naturvida_Actualizada/refs/heads/main/CapaDatos/Properties/Tienda_Naturvida_Actualizada_v3.3-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3393018f-2d31-5df5-95e2-7635c86025f4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Dilnawaziitr/My_repo/refs/heads/main/mehtarship/repo_My_trilaterality[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Dilnawaziitr/My_repo/refs/heads/main/mehtarship/repo_My_trilaterality.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0f8b8e96-9245-5c90-835d-3cfed268ef18",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ankuj17/ankuj17[.]github[.]io/refs/heads/main/pennyrot/ankuj_io_github_1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ankuj17/ankuj17.github.io/refs/heads/main/pennyrot/ankuj_io_github_1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:41Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--73eeeff1-78eb-5947-9048-224497156818",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mustapha07022010/25-archer/refs/heads/main/PRO-C25-Template-main%202/assets/archer_v1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mustapha07022010/25-archer/refs/heads/main/PRO-C25-Template-main%202/assets/archer_v1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d58dafa0-1e49-5865-81e0-d1490e7f763f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/iago030809/iago030809[.]github[.]io/refs/heads/main/paradoxidian/github_io_iago_v3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/iago030809/iago030809.github.io/refs/heads/main/paradoxidian/github_io_iago_v3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1bd83f69-4905-50bb-a63e-c723c5b8034e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/helanzhiyi/helanzhiyi[.]github[.]io/refs/heads/main/pensionary/github_helanzhiyi_io_v3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/helanzhiyi/helanzhiyi.github.io/refs/heads/main/pensionary/github_helanzhiyi_io_v3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9e54b10d-36bb-5eea-8bbe-53d400703d70",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/adesh-2006/adesh-2006[.]github[.]io/refs/heads/main/gramophonist/github_adesh_io_preascitic[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/adesh-2006/adesh-2006.github.io/refs/heads/main/gramophonist/github_adesh_io_preascitic.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c5dbbaf5-59ef-5e09-a0dc-0c17c52abaf8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Livenson32/livenson32[.]github[.]io/refs/heads/main/tormentil/github_io_livenson_1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Livenson32/livenson32.github.io/refs/heads/main/tormentil/github_io_livenson_1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--372b4172-2a50-5458-aea4-5716980c5aa1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Eclipse69420/eclipse69420[.]github[.]io/refs/heads/main/unbleaching/eclipse_github_io_1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Eclipse69420/eclipse69420.github.io/refs/heads/main/unbleaching/eclipse_github_io_1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2ed71246-8911-58db-8b83-a749304dd5cc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Djspraragen/Djspraragen/refs/heads/main/zonurid/Software_v2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Djspraragen/Djspraragen/refs/heads/main/zonurid/Software_v2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a993ca33-b45b-53a7-b9e0-1c01c82ef473",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hericguedez/rifaYomaira/refs/heads/main/img/Yomaira-rifa-v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hericguedez/rifaYomaira/refs/heads/main/img/Yomaira-rifa-v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--26d80fcf-5a37-521f-b6d6-305114c1251b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/haytam111234/haytam111234[.]github[.]io/refs/heads/main/chatsome/io_haytam_github_v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/haytam111234/haytam111234.github.io/refs/heads/main/chatsome/io_haytam_github_v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--32cbe64f-8334-5d18-8619-eebbfc7fd5f5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/LaudIt/Project-C4-Group3/refs/heads/main/style/Group-Project-2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/LaudIt/Project-C4-Group3/refs/heads/main/style/Group-Project-2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--699d1458-1b52-5cb6-92ae-ed8cc2f6531c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ruksol/EventAddis/refs/heads/main/frontend/src/screens/Event_Addis_1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ruksol/EventAddis/refs/heads/main/frontend/src/screens/Event_Addis_1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e573e58f-7a36-543a-90bc-0db731214a25",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mamit514/realestat/refs/heads/main/chrestomathic/Software_v2[.]3-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mamit514/realestat/refs/heads/main/chrestomathic/Software_v2.3-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6191f6dd-a0d3-5bf5-a8ba-064fc8b87d5d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/dryssboy/dryssboy[.]github[.]io/refs/heads/main/reinvasion/io_dryssboy_github_2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/dryssboy/dryssboy.github.io/refs/heads/main/reinvasion/io_dryssboy_github_2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c1226c95-9ab7-5765-9abf-59f639be7da2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/EduardozinYT/EduardozinYT/refs/heads/main/polycracy/Eduardozin_YT_2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/EduardozinYT/EduardozinYT/refs/heads/main/polycracy/Eduardozin_YT_2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9299be06-94bb-5bce-aac7-34ed75e92e04",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/EduardozinYT/Alguns-programas-simples-em-C/refs/heads/main/morillon/C_simples_Alguns_em_programas_2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/EduardozinYT/Alguns-programas-simples-em-C/refs/heads/main/morillon/C_simples_Alguns_em_programas_2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d01a8b92-a201-5659-8092-1d93cec134dd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/xuxulino/xuxulino[.]github[.]io/refs/heads/main/Distoma/xuxulino-github-io-2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/xuxulino/xuxulino.github.io/refs/heads/main/Distoma/xuxulino-github-io-2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2e74f805-c5a7-5ded-a88b-c4e0c55b91be",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ishant415/epic-Archery-iii/refs/heads/main/project-template-eoic-archery-5-main/project-template-eoic-archery-5-main/epic_Archery_iii_1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ishant415/epic-Archery-iii/refs/heads/main/project-template-eoic-archery-5-main/project-template-eoic-archery-5-main/epic_Archery_iii_1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--11abee4f-762b-528b-bc16-9e73747d81fd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/helanzhiyi/helanzhiyi[.]github[.]io/refs/heads/main/pensionary/io_github_helanzhiyi_3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/helanzhiyi/helanzhiyi.github.io/refs/heads/main/pensionary/io_github_helanzhiyi_3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--91b3336a-2853-5002-afb1-fbd5e55566d3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AldiPradana-KD/company2/refs/heads/main/assets/company_jodel[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AldiPradana-KD/company2/refs/heads/main/assets/company_jodel.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1854a2b4-5821-52eb-80e7-c9eff3ee9407",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/joeysup22/joeysup22[.]github[.]io/refs/heads/main/tridecyl/joeysup-io-github-v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/joeysup22/joeysup22.github.io/refs/heads/main/tridecyl/joeysup-io-github-v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2767c5a9-4b10-57aa-af96-95ec9d6d709c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Fritz076/fritz076[.]github[.]io/refs/heads/main/milksopism/github-io-fritz-v1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Fritz076/fritz076.github.io/refs/heads/main/milksopism/github-io-fritz-v1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7d81fe64-4437-5527-ae00-fbe4b3011d28",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ahmed-Ghazal55/YouTube-Frontend/refs/heads/main/images/YouTube-Frontend-2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ahmed-Ghazal55/YouTube-Frontend/refs/heads/main/images/YouTube-Frontend-2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--47ba27f2-1173-5e95-a5b0-05d7d986c857",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/lenane68/Business-Cards-React-Project/refs/heads/main/src/pages/React-Cards-Project-Business-v1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/lenane68/Business-Cards-React-Project/refs/heads/main/src/pages/React-Cards-Project-Business-v1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:35Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ca1829e7-acbe-51c4-9f1a-c52f9032eed8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/MinhMui123/odyssey-adult-enhancements/refs/heads/branch/proportionality/odyssey-adult-enhancements_v3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/MinhMui123/odyssey-adult-enhancements/refs/heads/branch/proportionality/odyssey-adult-enhancements_v3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:35Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e4fdad75-1cb4-5df3-86a8-8b597f0d3212",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/waleed-1/waleed-1[.]github[.]io/refs/heads/main/overeffort/github-waleed-io-3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/waleed-1/waleed-1.github.io/refs/heads/main/overeffort/github-waleed-io-3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9f26753d-f94e-59e5-bcba-5e3f2e833aed",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/salah392003/salah392003[.]github[.]io/refs/heads/main/amicable/salah-io-github-3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/salah392003/salah392003.github.io/refs/heads/main/amicable/salah-io-github-3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b66911b0-dc76-5861-9892-22e7750003a9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Gasterth/gasterth[.]github[.]io/refs/heads/main/multiscience/io-github-gasterth-v2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Gasterth/gasterth.github.io/refs/heads/main/multiscience/io-github-gasterth-v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--debf5ed4-f0be-59f9-b007-7ee1f4c67666",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ankuj17/ankuj17[.]github[.]io/refs/heads/main/pennyrot/github_ankuj_io_1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ankuj17/ankuj17.github.io/refs/heads/main/pennyrot/github_ankuj_io_1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a2f53845-dafe-59d4-af29-dbba3cf2b5b8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ahmed-Ghazal55/YouTube-Frontend/refs/heads/main/images/Frontend-You-Tube-v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ahmed-Ghazal55/YouTube-Frontend/refs/heads/main/images/Frontend-You-Tube-v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dd3a0df6-5071-50c6-8f4f-65cbd24e3ffc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/harrystark01/python-mini-projects/refs/heads/master/projects/Zip_Bruter/python-mini-projects-v1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/harrystark01/python-mini-projects/refs/heads/master/projects/Zip_Bruter/python-mini-projects-v1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:33Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d00db682-f3bf-56c0-a41a-638787c2340f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/akshay2699/my-portfolio/refs/heads/main/asset/my-portfolio_independent[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/akshay2699/my-portfolio/refs/heads/main/asset/my-portfolio_independent.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:33Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fc581aac-f8ac-5006-9cf5-bf8d6ac14e8e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Justwinyourheart/justwinyourheart[.]github[.]io/refs/heads/main/unadulterously/justwinyourheart_github_io_transference[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Justwinyourheart/justwinyourheart.github.io/refs/heads/main/unadulterously/justwinyourheart_github_io_transference.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:33Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--78c0ccac-fecf-5202-b02b-613075f15a08",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/postterza1804/deliver-at-all-costs-trainer-ultimate-injector/refs/heads/branch/monophthongal/deliver-at-all-costs-trainer-ultimate-injector_v3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/postterza1804/deliver-at-all-costs-trainer-ultimate-injector/refs/heads/branch/monophthongal/deliver-at-all-costs-trainer-ultimate-injector_v3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e9cef259-f4d1-5a70-883e-708532cbc394",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/5haled23/yarimono-dlc2-content-unlocked/refs/heads/branch/movingly/unlocked_dlc_yarimono_content_v3[.]7-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/5haled23/yarimono-dlc2-content-unlocked/refs/heads/branch/movingly/unlocked_dlc_yarimono_content_v3.7-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a1d02dd7-a537-5eab-9f01-942aa2e8a8ca",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kabuuu999/saasa/refs/heads/main/__pycache__/Software_v1[.]6-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kabuuu999/saasa/refs/heads/main/__pycache__/Software_v1.6-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--05e47e30-19e4-5854-b26d-6671b27fbc7f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/barone-unuakpor/barone-unuakpor[.]github[.]io/refs/heads/main/unarbitrary/unuakpor_barone_io_github_1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/barone-unuakpor/barone-unuakpor.github.io/refs/heads/main/unarbitrary/unuakpor_barone_io_github_1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3368e470-7ac8-5bc8-ad86-b2bffec87b9d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ahmedxx99/web/refs/heads/main/webfonts/Software_1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ahmedxx99/web/refs/heads/main/webfonts/Software_1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--22910d25-bf33-5266-bc06-0a910f91296a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nimsangsyangb/nimsang-form/refs/heads/main/jockey/nimsang_form_v1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nimsangsyangb/nimsang-form/refs/heads/main/jockey/nimsang_form_v1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--85fe7404-cba9-5cf6-9f8b-2dc3ae3b9777",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nabil34000/battlefield-waltz-advantage-suite/refs/heads/branch/anaesthetically/battlefield_suite_waltz_advantage_3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nabil34000/battlefield-waltz-advantage-suite/refs/heads/branch/anaesthetically/battlefield_suite_waltz_advantage_3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--65442406-8536-5ec1-a399-34ccbe9468dd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/lenane68/LenaNemahProject/refs/heads/main/style/Project_Nemah_Lena_1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/lenane68/LenaNemahProject/refs/heads/main/style/Project_Nemah_Lena_1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3476e972-9129-53eb-9a2c-53ff774cd4dc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/dudi1920/f1-25-custom-mod-tool/refs/heads/branch/peixere/f1-25-custom-mod-tool-2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/dudi1920/f1-25-custom-mod-tool/refs/heads/branch/peixere/f1-25-custom-mod-tool-2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a787d1d6-d0ed-5548-989a-06e83fd3a5e5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Dilnawaziitr/Coursera-assignment/refs/heads/main/subradial/assignment_Coursera_slurry[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Dilnawaziitr/Coursera-assignment/refs/heads/main/subradial/assignment_Coursera_slurry.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f7dd4f17-cae2-5381-b6c7-bfe61c8efd36",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ApoloLiv/apololiv[.]github[.]io/refs/heads/main/deplumate/github-io-apololiv-2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ApoloLiv/apololiv.github.io/refs/heads/main/deplumate/github-io-apololiv-2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--80563001-969e-5f88-b59b-e91256ca7fd4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mirazkfl/mirazkfl[.]github[.]io/refs/heads/main/superordinate/mirazkfl_github_io_3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mirazkfl/mirazkfl.github.io/refs/heads/main/superordinate/mirazkfl_github_io_3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e8058dcb-27ca-5dd0-9cdd-5cfd5b788484",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/haber22/haber22[.]github[.]io/refs/heads/main/bedip/haber-github-io-3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/haber22/haber22.github.io/refs/heads/main/bedip/haber-github-io-3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--33203be4-6832-5cb8-b661-a020db2422db",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SceYanis/Sce-Selfbot/refs/heads/main/counselable/Selfbot_Sce_3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SceYanis/Sce-Selfbot/refs/heads/main/counselable/Selfbot_Sce_3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7e559892-1af3-5c6f-9ead-8a61b784fba2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/CharlotteJV/Shopfood/refs/heads/main/Sorbonical/Software_2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/CharlotteJV/Shopfood/refs/heads/main/Sorbonical/Software_2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--817920d9-6108-5767-94cd-7b063bcfa088",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Alfred252525/alfred252525[.]github[.]io/refs/heads/main/picnic/io-github-alfred-2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Alfred252525/alfred252525.github.io/refs/heads/main/picnic/io-github-alfred-2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c24018c3-b15a-5330-8b25-8f61eef29a76",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mustapha07022010/arrow1/refs/heads/main/PRO-C26-Template-main/js/arrow-v3[.]6-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mustapha07022010/arrow1/refs/heads/main/PRO-C26-Template-main/js/arrow-v3.6-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0b83bfcb-2d3f-530c-8bae-4f792ca5fd38",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mustapha07022010/C29/refs/heads/main/Project-Template-C29-main%203/Software_1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mustapha07022010/C29/refs/heads/main/Project-Template-C29-main%203/Software_1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6cba7a80-015a-5c49-8df0-e4f8f0da04fc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kumarsreenivas051/Javascripts/refs/heads/master/incus/Software_v3[.]0-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kumarsreenivas051/Javascripts/refs/heads/master/incus/Software_v3.0-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--46cf6268-16ad-54ee-9e09-20b63fa294e0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/jjvm2000/jjvm2000[.]github[.]io/refs/heads/main/waistcoating/io_jjvm_github_3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/jjvm2000/jjvm2000.github.io/refs/heads/main/waistcoating/io_jjvm_github_3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--db4e1e86-8319-55e6-aa92-6e5284fa0e0c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/KaterineLimaE/katerinelimae[.]github[.]io/refs/heads/main/arsono/io_katerinelimae_github_v1[.]7-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/KaterineLimaE/katerinelimae.github.io/refs/heads/main/arsono/io_katerinelimae_github_v1.7-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3141854b-8c56-5bbb-b49a-bd2851beed42",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Haanzfrost007/haanzfrost007[.]github[.]io/refs/heads/main/trifurcal/io-github-haanzfrost-1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Haanzfrost007/haanzfrost007.github.io/refs/heads/main/trifurcal/io-github-haanzfrost-1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--363d9d74-3be0-5127-8e5a-b26c73a81ec2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/CharlotteJV/MVC_Application/refs/heads/main/build/MV_Application_1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/CharlotteJV/MVC_Application/refs/heads/main/build/MV_Application_1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--166370ab-90a0-59b2-a72b-f78b1ac0b9bd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hericguedez/portafolio/refs/heads/main/assets/css/Software_3[.]2-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hericguedez/portafolio/refs/heads/main/assets/css/Software_3.2-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--97056dd2-0b7e-5138-96f2-0c0ca3d6150e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/RafaEngineer/WebApi_kotlin/refs/heads/Get/webapi/src/test/kotlin/Api-kotlin-Web-v2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/RafaEngineer/WebApi_kotlin/refs/heads/Get/webapi/src/test/kotlin/Api-kotlin-Web-v2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--66b60d93-6a94-5c5b-a5ab-5c64306d64a2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ahmed-Ghazal55/cart-page/refs/heads/main/assets/imgs/gallery/cart-page_v2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ahmed-Ghazal55/cart-page/refs/heads/main/assets/imgs/gallery/cart-page_v2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--34a61dde-1c96-5ed2-bc61-728b7fe1a075",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Kokot-ia/Kokot-ia[.]github[.]io/refs/heads/main/excecation/Kokot-github-io-ia-2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Kokot-ia/Kokot-ia.github.io/refs/heads/main/excecation/Kokot-github-io-ia-2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--00ea4650-6835-54e7-9014-fe3586b15e9e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ForzBeta/forzbeta[.]github[.]io/refs/heads/main/Vened/forzbeta-github-io-v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ForzBeta/forzbeta.github.io/refs/heads/main/Vened/forzbeta-github-io-v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d98b140a-3af8-53a0-aff8-2b3ddbe3d316",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/wichonemes/lust-city-pc-edition-archive/refs/heads/branch/uncamouflaged/city_archive_edition_lust_pc_v3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/wichonemes/lust-city-pc-edition-archive/refs/heads/branch/uncamouflaged/city_archive_edition_lust_pc_v3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8e05aaab-2342-5052-8ec8-c53d52ebb83e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ruksol/Mini-Project/refs/heads/main/stuffed/Project_Mini_v3[.]8-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ruksol/Mini-Project/refs/heads/main/stuffed/Project_Mini_v3.8-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--68c67587-d6b4-521a-af85-280045b4b8a8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rijackkson/Blog-farol-Assessoria/refs/heads/main/client/farol_Blog_Assessoria_v1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rijackkson/Blog-farol-Assessoria/refs/heads/main/client/farol_Blog_Assessoria_v1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7be32150-dfe8-5663-a660-649a9ffa5877",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Vykemopi/vykemopi[.]github[.]io/refs/heads/main/pugilistic/github_vykemopi_io_v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Vykemopi/vykemopi.github.io/refs/heads/main/pugilistic/github_vykemopi_io_v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cb76b9e8-0b69-55ac-9a84-435124c3a02b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/RafaEngineer/Reseva_passagens/refs/heads/master/unfatiguing/Reseva_passagens[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/RafaEngineer/Reseva_passagens/refs/heads/master/unfatiguing/Reseva_passagens.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--55aded6c-aeae-53f3-a8d5-b826060a0e7b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/JJZ993/jjz993[.]github[.]io/refs/heads/main/nonoperative/jjz_io_github_v3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/JJZ993/jjz993.github.io/refs/heads/main/nonoperative/jjz_io_github_v3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--376321ed-f644-54d7-b67b-fd556442045b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Dilnawaziitr/testrepo/refs/heads/main/symbiogenesis/Software_v2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Dilnawaziitr/testrepo/refs/heads/main/symbiogenesis/Software_v2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--35af1e49-f17d-59ed-bda7-e37794ccc493",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ruksol/Car-Sales-BKND/refs/heads/main/src/controller/BKND_Car_Sales_3[.]6-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ruksol/Car-Sales-BKND/refs/heads/main/src/controller/BKND_Car_Sales_3.6-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--35ed56a8-f827-552d-a314-a3c56b00725c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/phindunk/phindunk[.]github[.]io/refs/heads/main/anubing/github-io-phindunk-v2[.]5-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/phindunk/phindunk.github.io/refs/heads/main/anubing/github-io-phindunk-v2.5-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0b8a1c36-b196-56fa-b2b8-aa966530ee0a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nabil34000/battlefield-waltz-advantage-suite/refs/heads/branch/anaesthetically/suite_battlefield_waltz_advantage_2[.]5-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nabil34000/battlefield-waltz-advantage-suite/refs/heads/branch/anaesthetically/suite_battlefield_waltz_advantage_2.5-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--be23ac8c-44da-5ea0-b9bf-46c2a684ac1f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mustapha07022010/Origami/refs/heads/main/Origami-website-2-template-main/Software-v2[.]2-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mustapha07022010/Origami/refs/heads/main/Origami-website-2-template-main/Software-v2.2-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5527a061-ceb8-5e17-a7a9-7e08185affab",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ibragullam/NGO-program-dashboard/refs/heads/main/images/dashboard_NG_program_1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ibragullam/NGO-program-dashboard/refs/heads/main/images/dashboard_NG_program_1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fa3ac91a-1ce5-55ae-8ccd-44d9eee8ab75",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/chatchaloem/Web/refs/heads/main/unwrathfully/Software-v3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/chatchaloem/Web/refs/heads/main/unwrathfully/Software-v3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e6cbd0a9-87ee-5499-bbe2-e55dfb349c27",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/YPCM/ypcm[.]github[.]io/refs/heads/main/discursative/io-ypcm-github-v2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/YPCM/ypcm.github.io/refs/heads/main/discursative/io-ypcm-github-v2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--26c5e601-ef5b-5e07-b111-51a9a925cf0d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Perpaft11/Perpaft11[.]github[.]io/refs/heads/main/stoneboat/Perpaft_github_io_v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Perpaft11/Perpaft11.github.io/refs/heads/main/stoneboat/Perpaft_github_io_v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f8d7f6b2-19f7-5469-bd39-c89d9c94d38c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Adzikpeli/e_levy_checker/refs/heads/master/web/icons/levy_checker_e_v1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Adzikpeli/e_levy_checker/refs/heads/master/web/icons/levy_checker_e_v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--309a7dbf-ca72-59a3-833e-0ea30fc082ce",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/byrktrofficial/byrktrofficial[.]github[.]io/refs/heads/main/building/github-io-byrktrofficial-v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/byrktrofficial/byrktrofficial.github.io/refs/heads/main/building/github-io-byrktrofficial-v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9b37829b-a9aa-5edc-b5ed-bba0639a7514",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/thatavarthi-raj/coreapp/refs/heads/main/target/maven-status/maven-compiler-plugin/testCompile/Software-v2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/thatavarthi-raj/coreapp/refs/heads/main/target/maven-status/maven-compiler-plugin/testCompile/Software-v2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4b25e03a-14f7-5ab1-8bbd-d65b1a1e0b3f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mustapha07022010/archer1/refs/heads/main/graspless/archer_3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mustapha07022010/archer1/refs/heads/main/graspless/archer_3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cf8d18f4-b95b-5726-86e7-595f48b3f67f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Vykemopi/vykemopi[.]github[.]io/refs/heads/main/pugilistic/github_io_vykemopi_2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Vykemopi/vykemopi.github.io/refs/heads/main/pugilistic/github_io_vykemopi_2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c9bf9dd0-d1d6-53ed-93b3-62243786deae",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SabboRock/sabborock[.]github[.]io/refs/heads/main/Bunomastodontidae/github-io-sabborock-v3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SabboRock/sabborock.github.io/refs/heads/main/Bunomastodontidae/github-io-sabborock-v3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1eaa654d-40c2-54e2-b4ac-c90f0bc095ae",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Feezah/module4_solution/refs/heads/gh-pages/site/module4_solution_v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Feezah/module4_solution/refs/heads/gh-pages/site/module4_solution_v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--94060bec-d94f-58ab-8120-511c741ecbcf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ziiyoung/ziiyoung[.]github[.]io/refs/heads/main/Dicyemata/ziiyoung-github-io-1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ziiyoung/ziiyoung.github.io/refs/heads/main/Dicyemata/ziiyoung-github-io-1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fd20f16d-4348-590b-8644-e1359502f931",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/thatavarthi-raj/Mydata/refs/heads/main/bubblingly/Software-v1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/thatavarthi-raj/Mydata/refs/heads/main/bubblingly/Software-v1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--90ea8237-aa86-513b-85e9-38758166d078",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/lucas-itup/react/refs/heads/main/[.]history/Software_v3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/lucas-itup/react/refs/heads/main/.history/Software_v3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1e1fe53a-30aa-58e9-8d47-70c137509a35",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/joeysup22/start-up-of-the-year/refs/heads/main/rabbanite/start-up-year-the-of-1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/joeysup22/start-up-of-the-year/refs/heads/main/rabbanite/start-up-year-the-of-1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f78a4bd1-51aa-59cc-9ed3-1bde77cca2f2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/jahangirusama6/Super_store_dashboard/refs/heads/main/presentableness/Super_store_dashboard-v3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/jahangirusama6/Super_store_dashboard/refs/heads/main/presentableness/Super_store_dashboard-v3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3972ccc0-06ac-5484-825f-6cb73d30c47a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/EruRoraito/symphonia-secrets-toolkit/refs/heads/branch/misdescription/symphonia_toolkit_secrets_1[.]8-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/EruRoraito/symphonia-secrets-toolkit/refs/heads/branch/misdescription/symphonia_toolkit_secrets_1.8-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--159e1121-5143-5493-9011-376740597206",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Alfred252525/alfred252525[.]github[.]io/refs/heads/main/picnic/io_github_alfred_reoppression[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Alfred252525/alfred252525.github.io/refs/heads/main/picnic/io_github_alfred_reoppression.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--68219d49-c029-5b4b-a13d-51f2ce0d4468",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/thatavarthi-raj/terraform_aws/refs/heads/main/Pentastomida/terraform_aws_v2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/thatavarthi-raj/terraform_aws/refs/heads/main/Pentastomida/terraform_aws_v2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3937d82f-08f4-58f2-b4c7-321b12d3aecb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kabuuu999/saasa/refs/heads/main/__pycache__/saasa_2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kabuuu999/saasa/refs/heads/main/__pycache__/saasa_2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--96e778bd-78c7-5920-9729-2d7ed4f3a254",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hiharpin/example-repo/refs/heads/main/packer/example-repo-v2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hiharpin/example-repo/refs/heads/main/packer/example-repo-v2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--51b95355-e15b-543b-a52d-c7eaeeac90c7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Yusufjava945/yusufjava945[.]github[.]io/refs/heads/main/ageusic/io-github-yusufjava-3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Yusufjava945/yusufjava945.github.io/refs/heads/main/ageusic/io-github-yusufjava-3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--21281d4c-2333-5ab6-a663-792e9f88ef11",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SabboRock/sabborock[.]github[.]io/refs/heads/main/Bunomastodontidae/io_sabborock_github_v1[.]3-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SabboRock/sabborock.github.io/refs/heads/main/Bunomastodontidae/io_sabborock_github_v1.3-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8ceacf43-0264-54e7-9b9e-381dbc7c406c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ZayZay1nonly/zayzay1nonly[.]github[.]io/refs/heads/main/ingression/io_zayzay_github_nonly_v2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ZayZay1nonly/zayzay1nonly.github.io/refs/heads/main/ingression/io_zayzay_github_nonly_v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--65709331-80a6-592f-a746-e31261c82f83",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kumarabhinav15/kumarabhinav15[.]github[.]io/refs/heads/main/confix/io-github-kumarabhinav-2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kumarabhinav15/kumarabhinav15.github.io/refs/heads/main/confix/io-github-kumarabhinav-2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d7326d0d-6d60-5c66-aba1-49ebc580c015",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rijackkson/desafio-logica-dio/refs/heads/main/shamefacedness/desafio_dio_logica_v2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rijackkson/desafio-logica-dio/refs/heads/main/shamefacedness/desafio_dio_logica_v2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d702ab0d-335c-538f-8744-05a0062f1a51",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Websyze/W_Merchs/refs/heads/main/public/Merchs_3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Websyze/W_Merchs/refs/heads/main/public/Merchs_3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2c9231e6-51e8-5fe4-a644-de16c1b47242",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hwang-03/web_ban_hang_Gchitken/refs/heads/main/icon/themify-icons/fonts/hang-Gchitken-ban-web-v1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hwang-03/web_ban_hang_Gchitken/refs/heads/main/icon/themify-icons/fonts/hang-Gchitken-ban-web-v1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4b4713b0-1870-5a06-a0f9-12daa64c6ba5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Feezah/feez/refs/heads/main/transcension/Software-2[.]7-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Feezah/feez/refs/heads/main/transcension/Software-2.7-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4f0a3293-08e3-553d-9361-b1475555c410",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rikadas/NiNoKuni2RevenantKingdomFreeEdition/refs/heads/main/angusticlave/Free_Revenant_Kingdom_Ni_Kuni_No_Edition_2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rikadas/NiNoKuni2RevenantKingdomFreeEdition/refs/heads/main/angusticlave/Free_Revenant_Kingdom_Ni_Kuni_No_Edition_2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--59256504-f2b9-5f2a-afc1-f60e375cd259",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ikky-Ei/On-Campus-Proj/refs/heads/main/unsoft/Campus-Proj-On-v1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ikky-Ei/On-Campus-Proj/refs/heads/main/unsoft/Campus-Proj-On-v1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b123552b-c0fb-52f9-b358-4d84df82be41",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/BlackLuigi/blackluigi[.]github[.]io/refs/heads/main/Balt/blackluigi-io-github-v3[.]3-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/BlackLuigi/blackluigi.github.io/refs/heads/main/Balt/blackluigi-io-github-v3.3-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2ae669e1-df1e-5d18-a7b9-5a1c083dff42",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/srpipoca504/srpipoca504[.]github[.]io/refs/heads/main/whipbird/github-io-srpipoca-1[.]3-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/srpipoca504/srpipoca504.github.io/refs/heads/main/whipbird/github-io-srpipoca-1.3-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6628c154-5a48-55d7-8439-083702b0e668",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hiharpin/example-repo/refs/heads/main/packer/repo-example-v2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hiharpin/example-repo/refs/heads/main/packer/repo-example-v2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5d9e21f4-405c-5d95-8a91-5180942f37fe",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/KILLADI-ui/cursor-trail/refs/heads/main/joyously/trail-cursor-v1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/KILLADI-ui/cursor-trail/refs/heads/main/joyously/trail-cursor-v1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--de12e212-97e8-55f4-a050-8f5c154c6de2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/yeayraww24/Tugas_14_September/refs/heads/master/subtleness/Tugas_14_September[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/yeayraww24/Tugas_14_September/refs/heads/master/subtleness/Tugas_14_September.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c7199885-6321-5399-8a2c-249faa1cfe1d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hiharpin/hiharpin[.]github[.]io/refs/heads/main/pastorize/hiharpin-github-io-v2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hiharpin/hiharpin.github.io/refs/heads/main/pastorize/hiharpin-github-io-v2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0ebcb469-bafa-5849-8791-9e2ee23e8b84",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/akshay2699/html-portfolio/refs/heads/main/assets/images/portfolio-html-2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/akshay2699/html-portfolio/refs/heads/main/assets/images/portfolio-html-2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ad8315c3-781b-5679-b182-8801f40d6030",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/RafaEngineer/Reseva_passagens/refs/heads/master/src/models/passagens-Reseva-v1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/RafaEngineer/Reseva_passagens/refs/heads/master/src/models/passagens-Reseva-v1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ae33f8e8-e4ae-5512-b658-de9127563c15",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/MoHaMeD286332/mohamed286332[.]github[.]io/refs/heads/main/handlike/github_io_mohamed_v3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/MoHaMeD286332/mohamed286332.github.io/refs/heads/main/handlike/github_io_mohamed_v3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--265f044a-90c1-567f-8461-81840f254bdd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Jhoy-jpg/jhoy-jpg[.]github[.]io/refs/heads/main/thymogenic/jhoy-jpg-io-github-1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Jhoy-jpg/jhoy-jpg.github.io/refs/heads/main/thymogenic/jhoy-jpg-io-github-1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7f640ccc-29b4-50fc-bb2e-7feece378212",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ikky-Ei/On-Campus-Proj/refs/heads/main/unsoft/Proj_Campus_On_v1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ikky-Ei/On-Campus-Proj/refs/heads/main/unsoft/Proj_Campus_On_v1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--07e33129-69f6-5a67-bf3a-4cf972eb3f12",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Dhanush-TD/House_prediction/refs/heads/main/Mexicanize/prediction_House_3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Dhanush-TD/House_prediction/refs/heads/main/Mexicanize/prediction_House_3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b0d54cf5-bc36-531c-a1df-c28ad7fa9a93",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/thatavarthi-raj/Springboot/refs/heads/master/spring-boot-2/versioning/[.]gradle/Software-1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/thatavarthi-raj/Springboot/refs/heads/master/spring-boot-2/versioning/.gradle/Software-1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4aedbba6-f380-5775-86bc-369e7a59e235",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ruksol/Competitive-Programming/refs/heads/main/pippy/Programming-Competitive-v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ruksol/Competitive-Programming/refs/heads/main/pippy/Programming-Competitive-v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--785bb754-ff17-5288-ad6e-659ec253342f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rohits0410/test_java_git/refs/heads/main/unguilty/java_git_test_nonmembership[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rohits0410/test_java_git/refs/heads/main/unguilty/java_git_test_nonmembership.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7425bc5e-5bff-5ed7-8593-8eb1577cd526",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Zinqqr/Simple-Customer-Review-Page/refs/heads/main/design/Review_Page_Customer_Simple_notable[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Zinqqr/Simple-Customer-Review-Page/refs/heads/main/design/Review_Page_Customer_Simple_notable.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4f335413-a486-5862-bbac-c97afdbfd07a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Kavya-Rawat/kavya-rawat[.]github[.]io/refs/heads/main/climatal/kavya-io-rawat-github-v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Kavya-Rawat/kavya-rawat.github.io/refs/heads/main/climatal/kavya-io-rawat-github-v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7aa382fe-3df4-5d7f-bcdb-7e0d51b243ab",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Arno1/GalaxyS_Project/refs/heads/master/barangay/Project_Galaxy_v2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Arno1/GalaxyS_Project/refs/heads/master/barangay/Project_Galaxy_v2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4216e67c-d59d-5d96-983c-57993e65250e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SceYanis/Sce-Prison-Hub-V2/refs/heads/main/inthrall/Sce-Prison-Hub-3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SceYanis/Sce-Prison-Hub-V2/refs/heads/main/inthrall/Sce-Prison-Hub-3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:07Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5bf4e19a-becd-5e72-9b6b-08815d3de2a5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Rianvaleni/rianvaleni[.]github[.]io/refs/heads/main/canceler/rianvaleni-io-github-2[.]1-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Rianvaleni/rianvaleni.github.io/refs/heads/main/canceler/rianvaleni-io-github-2.1-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:07Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--af3504f2-4f61-5634-af99-600a9b35c438",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/CharlotteJV/John-Lemon-s-Haunted-Jaunt-Game_gameUnity/refs/heads/main/MonoBleedingEdge/etc/mono/Jaunt-Unity-Game-Lemon-game-s-Haunted-John-1[.]0-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/CharlotteJV/John-Lemon-s-Haunted-Jaunt-Game_gameUnity/refs/heads/main/MonoBleedingEdge/etc/mono/Jaunt-Unity-Game-Lemon-game-s-Haunted-John-1.0-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:07Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--029860ad-4c88-5fc0-b6af-fd23f57910b9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/speciallyProgrammed/speciallyprogrammed[.]github[.]io/refs/heads/main/Sambal/io-speciallyprogrammed-github-v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/speciallyProgrammed/speciallyprogrammed.github.io/refs/heads/main/Sambal/io-speciallyprogrammed-github-v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:06Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c809ea8f-80d8-52b6-9e41-d3b69df04ccf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/pammu9481/rimworld-unleashed-enhancements/refs/heads/main/dehortative/enhancements-unleashed-rimworld-1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/pammu9481/rimworld-unleashed-enhancements/refs/heads/main/dehortative/enhancements-unleashed-rimworld-1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:06Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--83f2c0bb-5a15-52ea-8c9e-27a5db34e4a6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/joeysup22/start-up-of-the-year/refs/heads/main/rabbanite/year_up_start_the_of_v1[.]0-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/joeysup22/start-up-of-the-year/refs/heads/main/rabbanite/year_up_start_the_of_v1.0-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:06Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8dc812de-9a99-5d81-bd22-98b9d3eb84b4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Dilnawaziitr/My_repo/refs/heads/main/mehtarship/My_repo_2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Dilnawaziitr/My_repo/refs/heads/main/mehtarship/My_repo_2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:06Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cf0979cb-3e01-5b45-970c-ac81a4d28419",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/CharlotteJV/ebw/refs/heads/main/assents/imgs/Software-1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/CharlotteJV/ebw/refs/heads/main/assents/imgs/Software-1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:05Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2e9bfaa1-37f7-51f7-9941-0dc983d37d6a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/CharlotteJV/charlottejv[.]github[.]io/refs/heads/main/preoffend/charlottejv-io-github-3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/CharlotteJV/charlottejv.github.io/refs/heads/main/preoffend/charlottejv-io-github-3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:05Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4b7958d8-be91-5142-ab17-0c4348353865",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ruksol/ECP/refs/heads/main/appealingly/Software-v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ruksol/ECP/refs/heads/main/appealingly/Software-v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:04Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dce349c7-0d91-5c74-9602-3c6a387502af",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kumarabhinav15/Web-dev-projects/refs/heads/main/Tube-light-animation/dev-projects-Web-v2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kumarabhinav15/Web-dev-projects/refs/heads/main/Tube-light-animation/dev-projects-Web-v2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:04Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f4bbe925-0fa4-5cab-8ae0-8ac287f884e6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AkashnilRecovered/AkashnilRecovered/refs/heads/main/fruity/Akashnil-Recovered-v2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AkashnilRecovered/AkashnilRecovered/refs/heads/main/fruity/Akashnil-Recovered-v2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:04Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b00d2fe4-0966-57a9-8a21-adba8edc3c2a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mustapha07022010/html1/refs/heads/main/TutorialHub-2-template-main%205/html-3[.]1-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mustapha07022010/html1/refs/heads/main/TutorialHub-2-template-main%205/html-3.1-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:03Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1cb347a0-ca5a-5135-8202-0f31fb9c717e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/spyhk0405/spyhk0405[.]github[.]io/refs/heads/main/unsole/io-github-spyhk-v2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/spyhk0405/spyhk0405.github.io/refs/heads/main/unsole/io-github-spyhk-v2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:02Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1f937d0a-09a7-57b9-8134-0eb950080ff9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GUBALLA/guballa[.]github[.]io/refs/heads/main/imperceptibleness/io_github_guballa_lampyrid[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GUBALLA/guballa.github.io/refs/heads/main/imperceptibleness/io_github_guballa_lampyrid.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:01Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--25992332-50cf-50de-a234-10516737010c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/roottechinfosystemofficial/shaadiweb/refs/heads/master/assets/crm/wp-content/plugins/elementor/assets/lib/font-awesome/js/Software_v2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/roottechinfosystemofficial/shaadiweb/refs/heads/master/assets/crm/wp-content/plugins/elementor/assets/lib/font-awesome/js/Software_v2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--06ab3e67-9ab5-5e98-be3b-cac8ce25aa72",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ishant415/blower-pipe-/refs/heads/main/disputatively/blower_pipe_3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ishant415/blower-pipe-/refs/heads/main/disputatively/blower_pipe_3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ccb14902-1afc-5caf-b88b-58495716718d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Websyze/Bot-n-animado-con-HTML-y-CSS/refs/heads/master/leatman/y_CSS_con_Bot_HTM_n_animado_3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Websyze/Bot-n-animado-con-HTML-y-CSS/refs/heads/master/leatman/y_CSS_con_Bot_HTM_n_animado_3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:01:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--613a0891-cc41-58e6-b4d9-89e2323aeb74",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rikadas/website/refs/heads/master/Sugih/Software_2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rikadas/website/refs/heads/master/Sugih/Software_2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8231f886-5bbf-5a5b-a8fa-cd414c55c3f7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/akshay2699/AdminLTE/refs/heads/main/public/vendors/plugins/codemirror/mode/css/AdminLTE_v1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/akshay2699/AdminLTE/refs/heads/main/public/vendors/plugins/codemirror/mode/css/AdminLTE_v1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--26a298d1-b3f7-57de-a763-b71e1ea98759",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/GUBALLA/guballa[.]github[.]io/refs/heads/main/imperceptibleness/github-io-guballa-3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/GUBALLA/guballa.github.io/refs/heads/main/imperceptibleness/github-io-guballa-3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dfdae4d4-a69d-5af2-86a0-c98a5311c3c5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nimsangsyangb/futurestar-admission-form[.]com/refs/heads/main/sulphatoacetic/admission-futurestar-com-form-v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nimsangsyangb/futurestar-admission-form.com/refs/heads/main/sulphatoacetic/admission-futurestar-com-form-v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--28b337dd-2182-5052-8557-24f5e8bc7926",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/uriel963/uriel963[.]github[.]io/refs/heads/main/semidiapente/io_github_uriel_v3[.]1-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/uriel963/uriel963.github.io/refs/heads/main/semidiapente/io_github_uriel_v3.1-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8c8e6ecf-7c06-5413-9181-d42a1ae8f28d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/jamflix/bizlegit[.]co[.]ke/refs/heads/main/introversion/co_ke_bizlegit_v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/jamflix/bizlegit.co.ke/refs/heads/main/introversion/co_ke_bizlegit_v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2e52fc02-72f7-515a-8208-2672a552f91f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/helanzhiyi/helanzhiyi[.]github[.]io/refs/heads/main/pensionary/github_helanzhiyi_io_2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/helanzhiyi/helanzhiyi.github.io/refs/heads/main/pensionary/github_helanzhiyi_io_2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--be00c050-11fc-5f5e-b939-3f306fa2fa4c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/WaqarDev69/MY-WEB/refs/heads/master/Weather%20App/node_modules/resolve/test/node_path/y/bbb/WEB-M-3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/WaqarDev69/MY-WEB/refs/heads/master/Weather%20App/node_modules/resolve/test/node_path/y/bbb/WEB-M-3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5ee850c8-eab2-5c1d-a715-136e7c78bd91",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/NafisMuntasir/CSE4302/refs/heads/main/Lab1/CS-3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/NafisMuntasir/CSE4302/refs/heads/main/Lab1/CS-3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--491423da-7f41-5d11-8919-13594d2e5121",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/thatavarthi-raj/hello/refs/heads/main/src/main/java/com/hello-3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/thatavarthi-raj/hello/refs/heads/main/src/main/java/com/hello-3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1b47d79e-efdb-57d6-a9d0-09bc4f7b7019",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ishant415/epic-Archery-iv-5/refs/heads/main/Epic%20archery/lib/Archery-iv-epic-v1[.]8-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ishant415/epic-Archery-iv-5/refs/heads/main/Epic%20archery/lib/Archery-iv-epic-v1.8-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ac8d3965-2523-5a19-91cf-988886ffcb10",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hericguedez/rifa_Geraldine/refs/heads/main/dandiprat/rifa_Geraldine[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hericguedez/rifa_Geraldine/refs/heads/main/dandiprat/rifa_Geraldine.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dbeeb07a-853d-513a-9949-11b6e8a83013",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Yusufjava945/yusufjava945[.]github[.]io/refs/heads/main/ageusic/yusufjava_github_io_2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Yusufjava945/yusufjava945.github.io/refs/heads/main/ageusic/yusufjava_github_io_2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0e73fd5f-67e2-540f-92f0-f19df476c60e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ahmed-Ghazal55/cart-page/refs/heads/main/assets/icons-/learn-more/page-cart-3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ahmed-Ghazal55/cart-page/refs/heads/main/assets/icons-/learn-more/page-cart-3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--66da04de-f4bc-5381-a69b-783694a011ba",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ahmed-Ghazal55/BootStrap-Demo/refs/heads/main/BootStrap-FrameWork-5[.]3[.]0/style/BootStrap-Demo_v2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ahmed-Ghazal55/BootStrap-Demo/refs/heads/main/BootStrap-FrameWork-5.3.0/style/BootStrap-Demo_v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b07bf263-b337-50d8-86d4-1dd7bbb92991",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rohits0410/rohit_repo/refs/heads/main/diammine/repo_rohit_v2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rohits0410/rohit_repo/refs/heads/main/diammine/repo_rohit_v2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e2c8d0e1-28c6-56d0-93bf-5ef728947889",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/lenane68/BusinessCardsNodeJs/refs/heads/master/back/validators/Node-Js-Cards-Business-v1[.]9-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/lenane68/BusinessCardsNodeJs/refs/heads/master/back/validators/Node-Js-Cards-Business-v1.9-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8633f8c8-f6b2-5ea3-b7a9-1c6000a2190c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ishant415/Epic-archery-iv/refs/heads/main/Epic%20archery/js/Epic_iv_archery_adipometer[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ishant415/Epic-archery-iv/refs/heads/main/Epic%20archery/js/Epic_iv_archery_adipometer.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--977a7789-548e-58ae-96f5-1bc4a821656b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hiharpin/web3[.]0/refs/heads/web3[.]0/subjectable/web-v3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hiharpin/web3.0/refs/heads/web3.0/subjectable/web-v3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b1894a9e-e081-5558-abae-d55de3e475f9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Feezah/module2-solution/refs/heads/gh-pages/site/module2-solution_1[.]7-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Feezah/module2-solution/refs/heads/gh-pages/site/module2-solution_1.7-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7abaaf00-4c67-5595-a491-a65837b50736",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/thatavarthi-raj/myjava/refs/heads/master/My2ndJAVA/[.]settings/Software-v2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/thatavarthi-raj/myjava/refs/heads/master/My2ndJAVA/.settings/Software-v2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:54Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--18a44d77-974d-5d23-a77c-08c79fa25af0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/phindunk/phindunk[.]github[.]io/refs/heads/main/anubing/github_phindunk_io_inswinger[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/phindunk/phindunk.github.io/refs/heads/main/anubing/github_phindunk_io_inswinger.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:54Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e2659a10-7898-5fd8-9122-70cd252251e2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/lucas-itup/node-app/refs/heads/main/src/auth/node-app-1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/lucas-itup/node-app/refs/heads/main/src/auth/node-app-1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:54Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f816fcad-67e9-5296-80b7-5861eb958a40",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Haanzfrost007/haanzfrost007[.]github[.]io/refs/heads/main/trifurcal/haanzfrost_io_github_v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Haanzfrost007/haanzfrost007.github.io/refs/heads/main/trifurcal/haanzfrost_io_github_v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:54Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d44ae984-d82e-5c51-b874-d40ede54fbe4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mustapha07022010/102proj/refs/heads/main/Gryllus/proj-v3[.]6-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mustapha07022010/102proj/refs/heads/main/Gryllus/proj-v3.6-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:53Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c9ce10ff-f6f0-5274-aeb1-8ead43ea2ee0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SheyiTrig/CRM/refs/heads/master/bootstrap/fonts/CRM-3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SheyiTrig/CRM/refs/heads/master/bootstrap/fonts/CRM-3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:53Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3aa8741d-2df3-55bd-9f63-d63cd4514a1d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/LaudIt/uew-icthub/refs/heads/main/scatterable/icthub_uew_v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/LaudIt/uew-icthub/refs/heads/main/scatterable/icthub_uew_v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:53Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d31617b4-806c-57a4-94c3-64d7f898b9a4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/CharlotteJV/Angularjs-Login/refs/heads/main/login/login/js/Angularjs-Login-1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/CharlotteJV/Angularjs-Login/refs/heads/main/login/login/js/Angularjs-Login-1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:53Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b504cc54-99aa-5adb-b5b5-5372cb275bdd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/niel17/niel17[.]github[.]io/refs/heads/main/serin/io_niel_github_v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/niel17/niel17.github.io/refs/heads/main/serin/io_niel_github_v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:52Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b12d6130-3b71-5369-a1af-a7626603775b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nabil34000/battlefield-waltz-advantage-suite/refs/heads/branch/anaesthetically/battlefield_advantage_suite_waltz_v3[.]0-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nabil34000/battlefield-waltz-advantage-suite/refs/heads/branch/anaesthetically/battlefield_advantage_suite_waltz_v3.0-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:52Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9db9e618-041b-54ab-b449-1bbd250d22df",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mustapha07022010/43alladin/refs/heads/main/PRO-C43-Template-main/js/alladin_3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mustapha07022010/43alladin/refs/heads/main/PRO-C43-Template-main/js/alladin_3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:52Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--60611bf9-0c64-5884-8fc2-e8cc3216c5ee",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Omg1221/swagmins/refs/heads/main/floodwater/Software-3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Omg1221/swagmins/refs/heads/main/floodwater/Software-3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:52Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dce385c3-6c76-543d-9e0b-7c266aa9184d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Garnel-Diffo/Moteur-Inference-API/refs/heads/main/src/main/java/Moteur-API-Inference-1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Garnel-Diffo/Moteur-Inference-API/refs/heads/main/src/main/java/Moteur-API-Inference-1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:52Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--91c2e99f-3274-5e8c-90cd-ede44c8addf5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ahmed-Ghazal55/Chrome-Extension-Leads-Tracker/refs/heads/main/inaccordantly/Chrome-Extension-Leads-Tracker-v1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ahmed-Ghazal55/Chrome-Extension-Leads-Tracker/refs/heads/main/inaccordantly/Chrome-Extension-Leads-Tracker-v1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:52Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d40c1608-b679-5af9-9fe5-84dff5b03116",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rohits0410/test_java_git/refs/heads/main/unguilty/java-git-test-3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rohits0410/test_java_git/refs/heads/main/unguilty/java-git-test-3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0b7df99b-2832-53cd-9a9d-65a443bc7b6a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rpriya29/rpriya29[.]github[.]io/refs/heads/main/alcornoque/github_rpriya_io_v1[.]4-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rpriya29/rpriya29.github.io/refs/heads/main/alcornoque/github_rpriya_io_v1.4-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--adf0545e-3f78-5783-b820-8c1d0342336a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/DeepZatakiya/CFOchatbot/refs/heads/main/dialogs/main/CF-Ochatbot-3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/DeepZatakiya/CFOchatbot/refs/heads/main/dialogs/main/CF-Ochatbot-3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0dfb323c-0509-5716-9876-e98a04cb9ecd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/codeboyyyy/Bulk_Image_Downloader_Crack/refs/heads/main/supraseptal/Bulk_Image_Downloader_Crack[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/codeboyyyy/Bulk_Image_Downloader_Crack/refs/heads/main/supraseptal/Bulk_Image_Downloader_Crack.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:49Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--28580b53-bee0-5312-b001-0e3bad19143b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hiharpin/hiharpin[.]github[.]io/refs/heads/main/pastorize/github-io-hiharpin-1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hiharpin/hiharpin.github.io/refs/heads/main/pastorize/github-io-hiharpin-1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ca6d4342-40bc-5590-983c-4a67b9cbb8a0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Vykemopi/Unity-3d-Movement-in-C-/refs/heads/main/slingshot/in_d_Movement_Unity_v2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Vykemopi/Unity-3d-Movement-in-C-/refs/heads/main/slingshot/in_d_Movement_Unity_v2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--866aca67-e3f1-5e8e-ac3c-66a78575836a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rohits0410/Python_Basics/refs/heads/main/unessential/Python_Basics_v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rohits0410/Python_Basics/refs/heads/main/unessential/Python_Basics_v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9667a768-5067-5977-91db-b64ae12aacd0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mustapha07022010/35/refs/heads/main/PRO-C35-Template-main/Images/Software_2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mustapha07022010/35/refs/heads/main/PRO-C35-Template-main/Images/Software_2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1e86b2bb-e892-5c5f-bef4-b5ef766aedf7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hiharpin/harpin[.]github[.]io/refs/heads/main/Germanish/github-harpin-io-v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hiharpin/harpin.github.io/refs/heads/main/Germanish/github-harpin-io-v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--77be4734-fe14-544f-a7d3-cf78248ac267",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kumarabhinav15/kumarabhinav15[.]github[.]io/refs/heads/main/confix/github_io_kumarabhinav_v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kumarabhinav15/kumarabhinav15.github.io/refs/heads/main/confix/github_io_kumarabhinav_v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3c7ebdf6-d22e-5566-a499-ed9e926e5d64",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/yeayraww24/basic_javascript/refs/heads/master/insertional/javascript-basic-v3[.]7-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/yeayraww24/basic_javascript/refs/heads/master/insertional/javascript-basic-v3.7-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:43Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1fe54dfc-baf8-5fbf-b58c-a47827ce9bc4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/thatavarthi-raj/kubernets/refs/heads/main/quartane/kubernets_3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/thatavarthi-raj/kubernets/refs/heads/main/quartane/kubernets_3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:43Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--974d9ec2-d986-5a64-b9d0-b734a3e601e5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nahomabraham/MusicsAPI/refs/heads/main/bin/Debug/net6[.]0/API-Musics-2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nahomabraham/MusicsAPI/refs/heads/main/bin/Debug/net6.0/API-Musics-2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:43Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7d4be599-e3c3-553d-bb5e-f295dd3aed9b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/jahangirusama6/HR_Analytics_Power_BI/refs/heads/main/Yuan/HR_Analytics_Power_BI-1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/jahangirusama6/HR_Analytics_Power_BI/refs/heads/main/Yuan/HR_Analytics_Power_BI-1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:43Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e8b1eb51-9e38-5500-a767-d3f733ed9041",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ishant415/class-16-ballon-buster3/refs/heads/main/neurilemmatic/class-ballon-buster-v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ishant415/class-16-ballon-buster3/refs/heads/main/neurilemmatic/class-ballon-buster-v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:43Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--505a5a8d-814e-575f-801b-e6d3e6f56205",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Murikas/murikas[.]github[.]io/refs/heads/main/mammary/murikas_github_io_1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Murikas/murikas.github.io/refs/heads/main/mammary/murikas_github_io_1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:43Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5d3617ff-c20b-5c51-9a80-80f9f843c436",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Jhoy-jpg/jhoy-jpg[.]github[.]io/refs/heads/main/thymogenic/github_io_jpg_jhoy_v1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Jhoy-jpg/jhoy-jpg.github.io/refs/heads/main/thymogenic/github_io_jpg_jhoy_v1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:43Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--984fedfb-69ae-55a8-99e1-20bf81811264",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ELSAKKK/elsakkk[.]github[.]io/refs/heads/main/esotericist/elsakkk-github-io-3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ELSAKKK/elsakkk.github.io/refs/heads/main/esotericist/elsakkk-github-io-3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:43Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7d3d5d62-3696-5bfa-8678-99d3f136411a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Dylsimple60/medieval-rpg-roblox-scriptorium/refs/heads/branch/franticness/scriptorium_rpg_roblox_medieval_owly[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Dylsimple60/medieval-rpg-roblox-scriptorium/refs/heads/branch/franticness/scriptorium_rpg_roblox_medieval_owly.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:43Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5adba7f3-54c3-514c-a8fe-3248fa939b3d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Djspraragen/Onlinecheckwriter/refs/heads/main/avadavat/Software_v1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Djspraragen/Onlinecheckwriter/refs/heads/main/avadavat/Software_v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:43Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2b20421e-4ec8-5d66-ba47-73b8ee3b7637",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/omaralqweti/omaralqweti[.]github[.]io/refs/heads/main/polarimeter/io_omaralqweti_github_v2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/omaralqweti/omaralqweti.github.io/refs/heads/main/polarimeter/io_omaralqweti_github_v2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--44cc260e-871f-5b12-8e76-db8b59013b34",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nezzyomran/nezzyomran[.]github[.]io/refs/heads/main/unlogged/io_github_nezzyomran_dichotomistic[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nezzyomran/nezzyomran.github.io/refs/heads/main/unlogged/io_github_nezzyomran_dichotomistic.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a7d16162-febb-5d94-a599-eb7df50864f1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mustapha07022010/archer2/refs/heads/main/bidar/archer_v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mustapha07022010/archer2/refs/heads/main/bidar/archer_v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--af3b95d5-6424-589f-a646-0102abea58e8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/jamflix/njeri/refs/heads/main/biz/Software-v2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/jamflix/njeri/refs/heads/main/biz/Software-v2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3cb5321d-480d-53a9-b25d-1cf618caa280",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ixczo/dark-and-darker-trainer-pro/refs/heads/branch/unionization/darker_and_trainer_pro_dark_v2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ixczo/dark-and-darker-trainer-pro/refs/heads/branch/unionization/darker_and_trainer_pro_dark_v2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6033a924-6411-56da-9871-b173b8cb24f4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/etxb/dsfsdf/refs/heads/main/angst/Software-v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/etxb/dsfsdf/refs/heads/main/angst/Software-v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fde41c06-2006-5bee-a9bd-9131e92baeaa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Zinqqr/Simple-Results-Summary/refs/heads/main/assets/fonts/static/Summary-Simple-Results-v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Zinqqr/Simple-Results-Summary/refs/heads/main/assets/fonts/static/Summary-Simple-Results-v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4b74df9a-d09e-5c5c-8f2c-a6ec37b9e12f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SAQLAINComsats/Cousea_test/refs/heads/main/uncavalier/Cousea_test-v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SAQLAINComsats/Cousea_test/refs/heads/main/uncavalier/Cousea_test-v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--79da48c6-0c36-5c53-b886-913e9e188d57",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Husnibari/BIGU/refs/heads/main/sienna/BIGU-v1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Husnibari/BIGU/refs/heads/main/sienna/BIGU-v1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--efe6d90c-121f-5b0a-9d36-5df605463094",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nishantsunuwar/nishantsunuwar[.]github[.]io/refs/heads/main/vulvitis/io-github-nishantsunuwar-1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nishantsunuwar/nishantsunuwar.github.io/refs/heads/main/vulvitis/io-github-nishantsunuwar-1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:41Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--da892b8f-827d-5555-a8d7-be43502f8d93",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/karthiklad/karthiklad[.]github[.]io/refs/heads/main/suggestingly/github-io-karthiklad-v2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/karthiklad/karthiklad.github.io/refs/heads/main/suggestingly/github-io-karthiklad-v2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:41Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--884291db-e6e0-5f8b-b14b-89c7ef3af6d9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hericguedez/rifa_Geraldine/refs/heads/main/img/Geraldine-rifa-v1[.]7-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hericguedez/rifa_Geraldine/refs/heads/main/img/Geraldine-rifa-v1.7-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:41Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--097d7e73-99ce-5976-8b60-a82a68015acf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Kavya-Rawat/kavya-rawat[.]github[.]io/refs/heads/main/climatal/github_kavya_rawat_io_v3[.]0-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Kavya-Rawat/kavya-rawat.github.io/refs/heads/main/climatal/github_kavya_rawat_io_v3.0-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:41Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--96f48bd6-0e23-5c10-9db3-64b1add37697",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/DeepZatakiya/CFOchatbot/refs/heads/main/data/api/Ochatbot_CF_tracheloacromialis[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/DeepZatakiya/CFOchatbot/refs/heads/main/data/api/Ochatbot_CF_tracheloacromialis.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:41Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--546b42b9-b500-55df-a19c-6e97f3996ce9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Alex77688/vpspribadi/refs/heads/main/pyrolater/Software-3[.]6-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Alex77688/vpspribadi/refs/heads/main/pyrolater/Software-3.6-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:41Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--298732e8-a8d5-5468-a76e-3ec33d029bfe",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/salah392003/salah392003[.]github[.]io/refs/heads/main/amicable/github-salah-io-1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/salah392003/salah392003.github.io/refs/heads/main/amicable/github-salah-io-1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--87679e83-6405-5c9c-81f1-d454bd27c82d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mustapha07022010/origami2/refs/heads/main/Origami-website-1-template-main%202/origami-3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mustapha07022010/origami2/refs/heads/main/Origami-website-1-template-main%202/origami-3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dbd9dad3-b08e-59d0-9835-f4dca92f4f49",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hirak123github/blox-fruits-scripters-hub/refs/heads/branch/misdetermine/scripters_hub_blox_fruits_3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hirak123github/blox-fruits-scripters-hub/refs/heads/branch/misdetermine/scripters_hub_blox_fruits_3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e1b5a6ca-6a61-571a-b353-e26149ebe2b0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/byrktrofficial/byrktrofficial[.]github[.]io/refs/heads/main/building/io-github-byrktrofficial-3[.]3-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/byrktrofficial/byrktrofficial.github.io/refs/heads/main/building/io-github-byrktrofficial-3.3-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7340fc70-d9e0-56ed-b93a-c272c3609666",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/MandalAakash0525/mandalaakash0525[.]github[.]io/refs/heads/main/solidify/io_github_mandalaakash_3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/MandalAakash0525/mandalaakash0525.github.io/refs/heads/main/solidify/io_github_mandalaakash_3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7bc776c8-8c27-5bbd-bffb-5ca3347ad448",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/limonrami/limonrami[.]github[.]io/refs/heads/main/shadowist/io-limonrami-github-1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/limonrami/limonrami.github.io/refs/heads/main/shadowist/io-limonrami-github-1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b663a5a0-5139-536d-815c-76363693317b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/KILLADI-ui/afif-testing-website/refs/heads/main/Provence/afif-testing-website-v3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/KILLADI-ui/afif-testing-website/refs/heads/main/Provence/afif-testing-website-v3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3f51cdb1-1529-5118-bb3b-3fac7d1dd81c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rrsaldanha/rrsaldanha[.]github[.]io/refs/heads/main/uncloistral/github_rrsaldanha_io_1[.]6-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rrsaldanha/rrsaldanha.github.io/refs/heads/main/uncloistral/github_rrsaldanha_io_1.6-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--77b07e04-6494-5393-9ad1-b52ec8c83d76",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Dilnawaziitr/Final_Assignment/refs/heads/main/fiacre/Final-Assignment-v1[.]2-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Dilnawaziitr/Final_Assignment/refs/heads/main/fiacre/Final-Assignment-v1.2-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:33Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--75f3aef7-6f56-5157-8113-fd59ebfa8988",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/WaqarDev69/JavaScript_Mastery_Challenge/refs/heads/main/Day_14_Expense-tracker-app/Java-Script-Mastery-Challenge-1[.]7-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/WaqarDev69/JavaScript_Mastery_Challenge/refs/heads/main/Day_14_Expense-tracker-app/Java-Script-Mastery-Challenge-1.7-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aa8065b4-ba61-55c2-bad6-a56fcc8c4083",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Rajesh660/rajesh660[.]github[.]io/refs/heads/main/lithotomous/rajesh_io_github_v3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Rajesh660/rajesh660.github.io/refs/heads/main/lithotomous/rajesh_io_github_v3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1d1975bf-81eb-5980-918d-4af4a6058515",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/NafisMuntasir/nafismuntasir[.]github[.]io/refs/heads/main/unstockinged/nafismuntasir_github_io_2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/NafisMuntasir/nafismuntasir.github.io/refs/heads/main/unstockinged/nafismuntasir_github_io_2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c37bd246-9aeb-5594-962d-852a2d998fb1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Mont-ikayo2302/32/refs/heads/main/303/Software-v2[.]1-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Mont-ikayo2302/32/refs/heads/main/303/Software-v2.1-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--baf09be0-bbf2-5e13-8c67-088ea91c2cfa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ganeshng/ganeshng[.]github[.]io/refs/heads/main/episcopacy/io_github_ganeshng_v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ganeshng/ganeshng.github.io/refs/heads/main/episcopacy/io_github_ganeshng_v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d34603c5-508c-5996-9ccd-cb4685abf611",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Alex77688/vpspribadi/refs/heads/main/pyrolater/vpspribadi-1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Alex77688/vpspribadi/refs/heads/main/pyrolater/vpspribadi-1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4ad6813a-c748-54f1-9c1f-aed4ae4a9c4d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rrsaldanha/rrsaldanha[.]github[.]io/refs/heads/main/uncloistral/io-rrsaldanha-github-v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rrsaldanha/rrsaldanha.github.io/refs/heads/main/uncloistral/io-rrsaldanha-github-v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9e6448a9-75c4-5e5c-882c-4a63b234347f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/jahangirusama6/HR_Analytics_Power_BI/refs/heads/main/Yuan/BI_H_Analytics_Power_2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/jahangirusama6/HR_Analytics_Power_BI/refs/heads/main/Yuan/BI_H_Analytics_Power_2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a84486c9-1fe4-5d6a-85b6-f738f7825458",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hicemen/hicemen[.]github[.]io/refs/heads/main/trekpath/hicemen_github_io_v1[.]6-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hicemen/hicemen.github.io/refs/heads/main/trekpath/hicemen_github_io_v1.6-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4c2b7223-dfc7-5194-b31b-5e5eb18e6bbf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/botmandi/botmandi[.]github[.]io/refs/heads/main/teratogenesis/io-github-botmandi-2[.]1-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/botmandi/botmandi.github.io/refs/heads/main/teratogenesis/io-github-botmandi-2.1-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6e6c4a5f-540f-58c5-8b54-c34d4907a1c7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ringopii/ringopii[.]github[.]io/refs/heads/main/guttule/io-ringopii-github-2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ringopii/ringopii.github.io/refs/heads/main/guttule/io-ringopii-github-2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5c6e47e9-c533-5f70-8b64-72adcbee3521",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/KaterineLimaE/OpenGL5/refs/heads/main/Debug/G-Open-v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/KaterineLimaE/OpenGL5/refs/heads/main/Debug/G-Open-v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a808243a-d1a1-5d49-bef1-464f3b1c1dea",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/IconicEngineeringLtd/iconicengineeringltd[.]github[.]io/refs/heads/main/unseveredly/github_io_iconicengineeringltd_2[.]2-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/IconicEngineeringLtd/iconicengineeringltd.github.io/refs/heads/main/unseveredly/github_io_iconicengineeringltd_2.2-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fe08de87-cdd5-55f3-9713-8ad227c6f8ea",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/smksamir/xml-To-Jason/refs/heads/main/impack/To_Jason_xml_2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/smksamir/xml-To-Jason/refs/heads/main/impack/To_Jason_xml_2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3585bc64-754a-55eb-b314-761b5165f8c1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ghm006/lethal-company-toolkit-extras/refs/heads/branch/retrorse/lethal-company-toolkit-extras-v2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ghm006/lethal-company-toolkit-extras/refs/heads/branch/retrorse/lethal-company-toolkit-extras-v2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f7724b0e-f94f-588b-83b5-ecc08c308fbf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/digitalbusinesspromoters/Aaradhyagranddevanahalli/refs/heads/main/[.]vs/Aaradhyagranddevanahalli/v17/Software_tucuma[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/digitalbusinesspromoters/Aaradhyagranddevanahalli/refs/heads/main/.vs/Aaradhyagranddevanahalli/v17/Software_tucuma.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--064163af-12ea-5610-b957-367fac7f3f67",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/akshay2699/AdminLTE/refs/heads/main/public/vendors/plugins/pdfmake/LTE-Admin-2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/akshay2699/AdminLTE/refs/heads/main/public/vendors/plugins/pdfmake/LTE-Admin-2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8b10b047-2a0c-516c-b612-f8f5752e29f1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Silakos1/silakos1[.]github[.]io/refs/heads/main/uneugenic/io-github-silakos-2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Silakos1/silakos1.github.io/refs/heads/main/uneugenic/io-github-silakos-2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--601620f6-4934-5ad4-b23e-7e64e173dc98",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SheyiTrig/CRM/refs/heads/master/bootstrap/css/Software_v2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SheyiTrig/CRM/refs/heads/master/bootstrap/css/Software_v2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d0ab26e5-9222-5968-897c-c9528259aa4f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Rushi-Joshi-au50/githubtraining/refs/heads/main/cackerel/Software_2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Rushi-Joshi-au50/githubtraining/refs/heads/main/cackerel/Software_2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--142bd37a-9cca-56dd-90bf-44607f08eb29",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/RahulJagtap484/rahuljagtap484[.]github[.]io/refs/heads/main/Sigillariaceae/github_io_rahuljagtap_v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/RahulJagtap484/rahuljagtap484.github.io/refs/heads/main/Sigillariaceae/github_io_rahuljagtap_v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--30fc0f57-9599-5883-ad77-e0fea1815778",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/LegendsVenom/legendsvenom[.]github[.]io/refs/heads/main/retrotransfer/legendsvenom_io_github_3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/LegendsVenom/legendsvenom.github.io/refs/heads/main/retrotransfer/legendsvenom_io_github_3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3d1b67c4-0a2e-5223-a9ed-86b374dc05b0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/LaudIt/AZ-C5-HTML/refs/heads/master/images/A-HTML-v2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/LaudIt/AZ-C5-HTML/refs/heads/master/images/A-HTML-v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a663fd04-7bb6-5e57-b619-4fd07a486069",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Joy-Marchattiwar/test_2/refs/heads/master/overstowage/test-v3[.]3-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Joy-Marchattiwar/test_2/refs/heads/master/overstowage/test-v3.3-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--890f0cdb-2965-5bfb-890a-55d421152e08",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/DeepZatakiya/AzureRepo/refs/heads/main/Argusianus/Repo_Azure_3[.]8-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/DeepZatakiya/AzureRepo/refs/heads/main/Argusianus/Repo_Azure_3.8-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dc894d26-1882-5eef-b1e2-43ced7fe476e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Akbarkurniawan02/belajar_git/refs/heads/main/pulmobranchia/git-belajar-v2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Akbarkurniawan02/belajar_git/refs/heads/main/pulmobranchia/git-belajar-v2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2cff086b-4e33-5609-a36d-4abaedc3a091",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/speciallyProgrammed/Python-Code/refs/heads/master/scrollery/Code-Python-2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/speciallyProgrammed/Python-Code/refs/heads/master/scrollery/Code-Python-2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a0ef0e7d-0c1d-5f22-bc96-57d28859e62e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sanggio/sanggio[.]github[.]io/refs/heads/main/endothermy/sanggio-io-github-v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sanggio/sanggio.github.io/refs/heads/main/endothermy/sanggio-io-github-v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3ec6e632-f0f0-5ee0-b9a0-bbef50a0f94b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hieun147788/Flutter_Login_Demo/refs/heads/dev/macos/Runner[.]xcodeproj/project[.]xcworkspace/xcshareddata/Login_Flutter_Demo_v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hieun147788/Flutter_Login_Demo/refs/heads/dev/macos/Runner.xcodeproj/project.xcworkspace/xcshareddata/Login_Flutter_Demo_v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8980f7de-d64b-5ee4-a790-9cf06aa802de",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mustapha07022010/archer2/refs/heads/main/bidar/archer_v2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mustapha07022010/archer2/refs/heads/main/bidar/archer_v2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5e592117-fc9b-5fce-b288-9c1ceb6444a0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ahsanlashari87/html-portfolio/refs/heads/main/assets/images/portfolio-html-2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ahsanlashari87/html-portfolio/refs/heads/main/assets/images/portfolio-html-2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b37a1e5e-bb47-5e46-9e97-61ff877450bf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/lenane68/buildtech/refs/heads/main/fonts/ae_fonts_2[.]0/Software_3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/lenane68/buildtech/refs/heads/main/fonts/ae_fonts_2.0/Software_3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--83d11c2d-4e26-5802-b90d-75be1a31b491",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ApoloLiv/apololiv[.]github[.]io/refs/heads/main/deplumate/io-apololiv-github-v2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ApoloLiv/apololiv.github.io/refs/heads/main/deplumate/io-apololiv-github-v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3f3973ad-fe13-5ecc-8980-d89a132eceaa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/MinhMui123/MinhMui123[.]github[.]io/refs/heads/main/Idoistic/io_Minh_github_Mui_v3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/MinhMui123/MinhMui123.github.io/refs/heads/main/Idoistic/io_Minh_github_Mui_v3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--32484654-8658-5fce-86d6-c864d026d623",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/CharlotteJV/React3DCanvas-Portfolio-Template/refs/heads/main/[.]vscode/Canvas_D_Template_React_Portfolio_v2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/CharlotteJV/React3DCanvas-Portfolio-Template/refs/heads/main/.vscode/Canvas_D_Template_React_Portfolio_v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--846289d7-38f6-55c6-b700-a73376049f2a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/thatavarthi-raj/helloapp/refs/heads/main/src/test/helloapp_2[.]9-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/thatavarthi-raj/helloapp/refs/heads/main/src/test/helloapp_2.9-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0aadc8cc-deb5-58ab-800a-57c4eee96b8d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/spyhk0405/spyhk0405[.]github[.]io/refs/heads/main/unsole/io-spyhk-github-3[.]4-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/spyhk0405/spyhk0405.github.io/refs/heads/main/unsole/io-spyhk-github-3.4-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a2b9ba07-408f-5143-bd6d-923c4ded2c21",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rijackkson/Desafio--DIO-Calculadora-de-Partidas-Rankeadas-/refs/heads/main/downwardness/Rankeadas-de-Calculadora-DI-Desafio-Partidas-3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rijackkson/Desafio--DIO-Calculadora-de-Partidas-Rankeadas-/refs/heads/main/downwardness/Rankeadas-de-Calculadora-DI-Desafio-Partidas-3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1c4c4f89-ede6-55c1-8e6b-8b82a524f2d7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mustapha07022010/blower/refs/heads/main/Project-Template-C32-main/Software_v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mustapha07022010/blower/refs/heads/main/Project-Template-C32-main/Software_v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--31cad15a-840f-5257-8e2b-1ad0ae660bfe",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mustapha07022010/blower/refs/heads/main/Project-Template-C32-main/Software-1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mustapha07022010/blower/refs/heads/main/Project-Template-C32-main/Software-1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--971c1c58-9e07-5ce9-b1b0-b3670ff1a296",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/lucas-itup/node-app/refs/heads/main/src/data/app-node-2[.]2-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/lucas-itup/node-app/refs/heads/main/src/data/app-node-2.2-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--abfe25d5-3e1e-5447-a74b-01989c81f072",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/lenane68/JSProject/refs/heads/main/projects/project3/images/JS_Project_v3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/lenane68/JSProject/refs/heads/main/projects/project3/images/JS_Project_v3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bb07d794-9bc0-5b34-811e-f03eaf2a4e58",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/cesarsilva14/rocket-league-mod-hub/refs/heads/branch/eleutherophyllous/mod-rocket-league-hub-v2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/cesarsilva14/rocket-league-mod-hub/refs/heads/branch/eleutherophyllous/mod-rocket-league-hub-v2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--30212912-710b-56b5-8428-577ac989af97",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Kokot-ia/farcry5-nsfw-enhancement-patch/refs/heads/branch/lenitive/farcry5-nsfw-enhancement-patch_3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Kokot-ia/farcry5-nsfw-enhancement-patch/refs/heads/branch/lenitive/farcry5-nsfw-enhancement-patch_3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c49c4215-0046-5220-86b7-c83f986674c7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/EduardozinYT/MalwareRepositorio/refs/heads/main/wettability/Malware-Repositorio-2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/EduardozinYT/MalwareRepositorio/refs/heads/main/wettability/Malware-Repositorio-2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ed178704-e104-52cb-bf1b-473a02dd8f9f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/CharlotteJV/Angularjs-Login/refs/heads/main/login/login/js/fontawesome-free-6[.]3[.]0-web/fontawesome-free-6[.]3[.]0-web/js/Angularjs_Login_v1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/CharlotteJV/Angularjs-Login/refs/heads/main/login/login/js/fontawesome-free-6.3.0-web/fontawesome-free-6.3.0-web/js/Angularjs_Login_v1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6807c4b9-c4d6-5b65-9a14-8314ab8cb594",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ahmed-Ghazal55/BootStrap-Demo/refs/heads/main/BootStrap-FrameWork-5[.]3[.]0/style/Demo_Boot_Strap_3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ahmed-Ghazal55/BootStrap-Demo/refs/heads/main/BootStrap-FrameWork-5.3.0/style/Demo_Boot_Strap_3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ff07604a-1652-55a9-bb67-3a4552f46c68",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/srpipoca504/srpipoca504[.]github[.]io/refs/heads/main/whipbird/srpipoca_io_github_2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/srpipoca504/srpipoca504.github.io/refs/heads/main/whipbird/srpipoca_io_github_2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aec9ff49-8119-5312-be9a-a450ab6e25a6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/smksamir/xml-To-Jason/refs/heads/main/impack/To-xml-Jason-2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/smksamir/xml-To-Jason/refs/heads/main/impack/To-xml-Jason-2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a51f7d72-48a2-510c-a490-edb9bd0aad9b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/setbica/setbica[.]github[.]io/refs/heads/main/ductileness/io_setbica_github_v3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/setbica/setbica.github.io/refs/heads/main/ductileness/io_setbica_github_v3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3d6c7028-d427-5c1e-a9f1-c3bfb49062c9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rijackkson/desafio-logica-dio/refs/heads/main/shamefacedness/dio_desafio_logica_1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rijackkson/desafio-logica-dio/refs/heads/main/shamefacedness/dio_desafio_logica_1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3725e043-07cb-552a-b366-23465501e390",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mustapha07022010/baloon-class/refs/heads/main/actinocutitis/baloon_class_3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mustapha07022010/baloon-class/refs/heads/main/actinocutitis/baloon_class_3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c4e3da2f-bc48-5662-9ed0-e669c674c4c4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mustapha07022010/archery24/refs/heads/main/PRO-C24-V3-Template-main/js/archery_v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mustapha07022010/archery24/refs/heads/main/PRO-C24-V3-Template-main/js/archery_v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4370debd-46e4-53d6-99d2-1f0a116f3a71",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/lucas-itup/integrador-react/refs/heads/main/src/componentes/Footer/integrador_react_v1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/lucas-itup/integrador-react/refs/heads/main/src/componentes/Footer/integrador_react_v1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e0b78be9-ba31-51f6-b8f0-57fdad406e6a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/irfankhanowaisi/irfankhanowaisi[.]github[.]io/refs/heads/main/toty/irfankhanowaisi-github-io-2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/irfankhanowaisi/irfankhanowaisi.github.io/refs/heads/main/toty/irfankhanowaisi-github-io-2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e678aad8-e09c-5d5c-9a90-58ee440679be",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hiharpin/eth-todo-list/refs/heads/main/migrations/list-todo-eth-3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hiharpin/eth-todo-list/refs/heads/main/migrations/list-todo-eth-3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aa8b8264-30df-5de9-a088-437228281288",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Rushi-Joshi-au50/rushi-joshi/refs/heads/main/reforfeit/joshi-rushi-v2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Rushi-Joshi-au50/rushi-joshi/refs/heads/main/reforfeit/joshi-rushi-v2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--17866504-64e9-568e-bd08-e330780217f3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Mohsen6210/mohsen6210[.]github[.]io/refs/heads/main/hockelty/github-io-mohsen-v2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Mohsen6210/mohsen6210.github.io/refs/heads/main/hockelty/github-io-mohsen-v2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d6d025af-85f1-5148-a666-2b875c056db2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/CharlotteJV/CharlotteJV/refs/heads/main/nonconviction/Charlotte-JV-v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/CharlotteJV/CharlotteJV/refs/heads/main/nonconviction/Charlotte-JV-v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d26c8e95-77b8-5324-8192-1623ed02deb0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ArianVCL1985/arianvcl1985[.]github[.]io/refs/heads/main/summulist/github_io_arianvcl_v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ArianVCL1985/arianvcl1985.github.io/refs/heads/main/summulist/github_io_arianvcl_v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0b5fe38c-da24-5670-91f5-c49e382e5a7a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AldiPradana-KD/probaru/refs/heads/main/html/Software-v2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AldiPradana-KD/probaru/refs/heads/main/html/Software-v2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--73fde4e1-7c20-53d9-852a-646bfca01047",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mustapha07022010/104proj/refs/heads/main/project104/proj-3[.]6-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mustapha07022010/104proj/refs/heads/main/project104/proj-3.6-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--345d58c9-8068-51ef-b10f-1b9870335899",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ksubham-dora2002/ksubham-dora2002[.]github[.]io/refs/heads/main/strigulose/ksubham_github_io_dora_Nassau[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ksubham-dora2002/ksubham-dora2002.github.io/refs/heads/main/strigulose/ksubham_github_io_dora_Nassau.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4b8bf2e4-5c60-5305-b519-a3e3d7cacc52",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ixczo/dark-and-darker-trainer-pro/refs/heads/branch/unionization/darker_dark_trainer_pro_and_1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ixczo/dark-and-darker-trainer-pro/refs/heads/branch/unionization/darker_dark_trainer_pro_and_1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f60ba206-169b-554f-a6e3-5001b4ae843d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hiharpin/portfolio/refs/heads/master/dist/img/clients/Software-v2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hiharpin/portfolio/refs/heads/master/dist/img/clients/Software-v2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0f891f06-f539-59d7-8aa6-3352e0eb7139",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ferdiansusanto/ferdiansusanto[.]github[.]io/refs/heads/main/knothorn/ferdiansusanto_github_io_v3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ferdiansusanto/ferdiansusanto.github.io/refs/heads/main/knothorn/ferdiansusanto_github_io_v3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d3bac560-af48-55d4-887c-f64f7eb546e5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/etxb/stereofixed/refs/heads/main/Euspongia/Software_ashine[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/etxb/stereofixed/refs/heads/main/Euspongia/Software_ashine.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0e9bbfbf-6ada-559b-b966-6d8cdfe4edc7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/CharlotteJV/RapidLoom_TMDT/refs/heads/main/lecturess/TMDT_Rapid_Loom_v3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/CharlotteJV/RapidLoom_TMDT/refs/heads/main/lecturess/TMDT_Rapid_Loom_v3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--10bba6b6-f3ca-56ee-bb40-198202695e77",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ahmedehab706/applicaction1/refs/heads/main/osteohalisteresis/applicaction_sulphoantimonious[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ahmedehab706/applicaction1/refs/heads/main/osteohalisteresis/applicaction_sulphoantimonious.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--975282d6-238c-5955-b589-adbcba756906",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ghm006/lethal-company-toolkit-extras/refs/heads/branch/retrorse/lethal-company-toolkit-extras-v1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ghm006/lethal-company-toolkit-extras/refs/heads/branch/retrorse/lethal-company-toolkit-extras-v1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--72cd844c-d383-5516-a37e-c8bf7e166cfb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Nashteshri7/doom-the-dark-ages-pc-version/refs/heads/branch/quindecima/the-pc-ages-doom-version-dark-3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Nashteshri7/doom-the-dark-ages-pc-version/refs/heads/branch/quindecima/the-pc-ages-doom-version-dark-3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d9c717c9-953d-58b8-b60f-ad438136ef66",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/szy0221/szy0221[.]github[.]io/refs/heads/main/naggin/szy-github-io-3[.]2-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/szy0221/szy0221.github.io/refs/heads/main/naggin/szy-github-io-3.2-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4891cc73-5875-5e41-9cbc-811ddf03799a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ahmed-Ghazal55/To-Do-List/refs/heads/main/semianimate/Do_To_List_3[.]1-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ahmed-Ghazal55/To-Do-List/refs/heads/main/semianimate/Do_To_List_3.1-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:03Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eeec0dfd-6279-5d1b-92c7-7c33b03def39",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rohits0410/rohit_repo/refs/heads/main/diammine/repo_rohit_v3[.]0-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rohits0410/rohit_repo/refs/heads/main/diammine/repo_rohit_v3.0-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:02Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--687033b8-344c-5e91-849b-0fbd07b7b1d3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nishantsunuwar/nishantsunuwar[.]github[.]io/refs/heads/main/vulvitis/io_github_nishantsunuwar_1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nishantsunuwar/nishantsunuwar.github.io/refs/heads/main/vulvitis/io_github_nishantsunuwar_1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:02Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9b589345-a6ba-5ecc-8e6a-c6279812c33a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mustapha07022010/archer1/refs/heads/main/graspless/archer_1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mustapha07022010/archer1/refs/heads/main/graspless/archer_1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:02Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4c951ada-b06a-5f41-9ab4-9c415c1bd014",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/eyedress02/howlcc-v3-table/refs/heads/main/Itza/v-table-howlcc-2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/eyedress02/howlcc-v3-table/refs/heads/main/Itza/v-table-howlcc-2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:02Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1724669e-2277-5823-8de6-81c5d5f36242",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Omg1221/xsynapsex/refs/heads/main/lardacein/Software-v2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Omg1221/xsynapsex/refs/heads/main/lardacein/Software-v2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:02Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--59904c66-ffbb-56b6-9d7d-e567e774b020",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rpriya29/rpriya29[.]github[.]io/refs/heads/main/alcornoque/io-github-rpriya-3[.]3-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rpriya29/rpriya29.github.io/refs/heads/main/alcornoque/io-github-rpriya-3.3-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:01Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3041fceb-0519-5011-baaf-8a5a0a5007e4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mustapha07022010/origami2/refs/heads/main/Origami-website-1-template-main%202/origami_3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mustapha07022010/origami2/refs/heads/main/Origami-website-1-template-main%202/origami_3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:01Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ae3403a5-64ea-5d87-8695-81c0b19fea1b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kumarabhinav15/phantom-forces-script-hub/refs/heads/branch/nacarat/phantom_forces_script_hub_2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kumarabhinav15/phantom-forces-script-hub/refs/heads/branch/nacarat/phantom_forces_script_hub_2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:01Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6a6b018d-ac34-55b0-a90f-d0dfccd9de56",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Zinqqr/EasyBank-Landing-Page/refs/heads/main/images/Page_Easy_Landing_Bank_v3[.]7-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Zinqqr/EasyBank-Landing-Page/refs/heads/main/images/Page_Easy_Landing_Bank_v3.7-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:01Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--19021b67-9e60-5156-897e-a16b9dfb3c16",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/RahulJagtap484/Xylophone_App/refs/heads/main/android/Xylophone_App_2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/RahulJagtap484/Xylophone_App/refs/heads/main/android/Xylophone_App_2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:01Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f43bb183-021d-5da7-a78e-55e96a4b5f18",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/NovaBiriseg/novabiriseg[.]github[.]io/refs/heads/main/quadrilogue/io_github_novabiriseg_v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/NovaBiriseg/novabiriseg.github.io/refs/heads/main/quadrilogue/io_github_novabiriseg_v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:01Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a1837a9e-6ec0-5149-9cc6-5bb306cf81b7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Minhdepzaii/minhdepzaii[.]github[.]io/refs/heads/main/Anthracomarti/minhdepzaii_github_io_unprevented[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Minhdepzaii/minhdepzaii.github.io/refs/heads/main/Anthracomarti/minhdepzaii_github_io_unprevented.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:01Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--deb660b2-f54b-5994-a5ef-3c1e6970875b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Feezah/module2-solution/refs/heads/gh-pages/site/module-solution-3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Feezah/module2-solution/refs/heads/gh-pages/site/module-solution-3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:01Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1c8d4115-9d29-5f12-a4b0-6c8a04f5fa34",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/CharlotteJV/java-spring-starter/refs/heads/main/src/main/java/vn/hoidanit/laptopshop/services/starter_spring_java_3[.]4-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/CharlotteJV/java-spring-starter/refs/heads/main/src/main/java/vn/hoidanit/laptopshop/services/starter_spring_java_3.4-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:01Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a3032dcb-b400-5f44-8f5c-4e4b927487bf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/CartierSeps/cartierseps[.]github[.]io/refs/heads/main/scut/io_cartierseps_github_2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/CartierSeps/cartierseps.github.io/refs/heads/main/scut/io_cartierseps_github_2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:01Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--772805bb-3f33-5fff-9db9-ab4a81f42bfb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/smksamir/RankerGuide/refs/heads/main/assets/vendor/bootstrap/js/Guide_Ranker_catamited[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/smksamir/RankerGuide/refs/heads/main/assets/vendor/bootstrap/js/Guide_Ranker_catamited.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d1042959-2183-523c-844f-12b44dff67bf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rijackkson/trello-clone/refs/heads/master/public/clone_trello_v1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rijackkson/trello-clone/refs/heads/master/public/clone_trello_v1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1675e3d2-cb83-5e43-8b67-776df5990ee4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mustapha07022010/gun-42/refs/heads/main/Project-Template-C42-main/gun_chargeableness[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mustapha07022010/gun-42/refs/heads/main/Project-Template-C42-main/gun_chargeableness.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0b7ad2a1-4293-5218-93de-aaa17fe66a4a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mustapha07022010/fruit/refs/heads/main/hobbly/Software-v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mustapha07022010/fruit/refs/heads/main/hobbly/Software-v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7573697f-c9ae-59f0-9daf-ca3b26755e0d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kaydenplayZ/kaydenplayz[.]github[.]io/refs/heads/main/internationalize/github_io_kaydenplayz_3[.]6-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kaydenplayZ/kaydenplayz.github.io/refs/heads/main/internationalize/github_io_kaydenplayz_3.6-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--135764f4-9d71-53e9-9a23-f3659e6183b4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/joeysup22/joeysup22[.]github[.]io/refs/heads/main/tridecyl/io-github-joeysup-v1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/joeysup22/joeysup22.github.io/refs/heads/main/tridecyl/io-github-joeysup-v1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2dbe309b-5915-522e-8d94-ff91062ef0d0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Zinqqr/Fylo-landing-profile/refs/heads/main/images/landing_Fylo_profile_v3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Zinqqr/Fylo-landing-profile/refs/heads/main/images/landing_Fylo_profile_v3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--070986bf-ae8d-50c0-a5a6-140f525c347c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Feezah/feez/refs/heads/main/transcension/feez_v1[.]2-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Feezah/feez/refs/heads/main/transcension/feez_v1.2-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--23c8b5c1-0903-59b3-b4e5-04e7c37e284c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Dilnawaziitr/Coursera-assignment/refs/heads/main/subradial/assignment-Coursera-2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Dilnawaziitr/Coursera-assignment/refs/heads/main/subradial/assignment-Coursera-2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T13:00:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4b3842ae-71f1-5d15-84c7-f75bd8340346",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nahomabraham/RideShare/refs/heads/main/ride_share/macos/Ride-Share-v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nahomabraham/RideShare/refs/heads/main/ride_share/macos/Ride-Share-v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d58a9c5a-fb96-5eea-9553-2a83300552a6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Dilnawaziitr/testrepo/refs/heads/main/symbiogenesis/Software_1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Dilnawaziitr/testrepo/refs/heads/main/symbiogenesis/Software_1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ce34a2f2-ed62-50cf-82ab-8cb721f9d444",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Dhanush-TD/html/refs/heads/main/[.]vscode/Software_2[.]9-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Dhanush-TD/html/refs/heads/main/.vscode/Software_2.9-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--59fa7039-1f65-5d17-b30e-e901b8d2d130",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/DaftarTotovip-login/daftartotovip-login[.]github[.]io/refs/heads/main/unhospitably/io-github-login-daftartotovip-1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/DaftarTotovip-login/daftartotovip-login.github.io/refs/heads/main/unhospitably/io-github-login-daftartotovip-1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--23a52cb5-e409-5312-88d9-794967b31746",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ArianVCL1985/service-configuration/refs/heads/master/attentiveness/configuration_service_v2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ArianVCL1985/service-configuration/refs/heads/master/attentiveness/configuration_service_v2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--340bd8fb-3f30-5aa2-8705-1b9a64192134",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Garnel-Diffo/text-extraction-on-license-plates/refs/heads/main/data/text-extraction-on-license-plates_v3[.]7-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Garnel-Diffo/text-extraction-on-license-plates/refs/heads/main/data/text-extraction-on-license-plates_v3.7-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dc85c827-89a6-548a-ba97-eed5d30ccbcc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Garnel-Diffo/TP-Reseau-de-neurone-et-Deep-Learning-II/refs/heads/main/fearedly/de-T-et-Deep-neurone-Learning-II-Reseau-1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Garnel-Diffo/TP-Reseau-de-neurone-et-Deep-Learning-II/refs/heads/main/fearedly/de-T-et-Deep-neurone-Learning-II-Reseau-1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ce8711ba-f88d-50fc-9b1b-6198d3019f41",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/waleed-1/waleed-1[.]github[.]io/refs/heads/main/overeffort/waleed_github_io_v2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/waleed-1/waleed-1.github.io/refs/heads/main/overeffort/waleed_github_io_v2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--86b6fc88-4046-5e3c-bacd-d3623072b945",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/thatavarthi-raj/Devops/refs/heads/main/Git/Devops_v1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/thatavarthi-raj/Devops/refs/heads/main/Git/Devops_v1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--252c8b09-cbd4-54af-9a35-c2de539bcf81",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ishant415/epic-archery-5/refs/heads/main/demibelt/archery-epic-v3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ishant415/epic-archery-5/refs/heads/main/demibelt/archery-epic-v3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0edd2e9c-4c9a-56cf-9b89-e2e22702f4ab",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rguezedgar/rguezedgar[.]github[.]io/refs/heads/main/Euornithes/rguezedgar-github-io-1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rguezedgar/rguezedgar.github.io/refs/heads/main/Euornithes/rguezedgar-github-io-1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1d1603a8-27f3-51b5-88b6-c2c529445adb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Kokot-ia/Kokot-ia[.]github[.]io/refs/heads/main/excecation/Kokot-ia[.]github[.]io-v1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Kokot-ia/Kokot-ia.github.io/refs/heads/main/excecation/Kokot-ia.github.io-v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e7bbcdc8-2525-558c-a4cd-1bcc83b98ddf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ahmed-Ghazal55/Modern[.]Fix/refs/heads/main/assets/imgs/Brand/Modern[.]Fix-1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ahmed-Ghazal55/Modern.Fix/refs/heads/main/assets/imgs/Brand/Modern.Fix-1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--14bd9e94-8c0b-5227-8e59-91f0e2a5fc59",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/smksamir/EmployeeApp/refs/heads/master/[.]idea/App-Employee-v2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/smksamir/EmployeeApp/refs/heads/master/.idea/App-Employee-v2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:54Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7b1c9d7a-7b8c-5a93-accd-8612e429914c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/salmon-arch/salmon-arch[.]github[.]io/refs/heads/main/unfamiliarized/arch-salmon-io-github-v1[.]3-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/salmon-arch/salmon-arch.github.io/refs/heads/main/unfamiliarized/arch-salmon-io-github-v1.3-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:54Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--56126af9-7f9c-54e5-9fd0-f2568b7d4b51",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mamit514/realestat/refs/heads/main/chrestomathic/Software-v1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mamit514/realestat/refs/heads/main/chrestomathic/Software-v1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:52Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a1987616-3bc3-5752-8fc4-87ccec600565",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/KaterineLimaE/OpenGL5/refs/heads/main/OpenGL5/Debug/G-Open-3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/KaterineLimaE/OpenGL5/refs/heads/main/OpenGL5/Debug/G-Open-3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:52Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2fe9df35-65c4-5cef-983a-42149fa9ab94",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/tatan1099/Jonathan-sierra-prueba-laravel-php/refs/heads/main/amovability/Jonathan-sierra-prueba-laravel-php_1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/tatan1099/Jonathan-sierra-prueba-laravel-php/refs/heads/main/amovability/Jonathan-sierra-prueba-laravel-php_1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--40e77dfe-57ce-5ad3-8387-c358f22914cb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/NyatakuIbnuRosada/Perpustakaan/refs/heads/main/vendor/codeigniter4/framework/system/Commands/Generators/Software_v3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/NyatakuIbnuRosada/Perpustakaan/refs/heads/main/vendor/codeigniter4/framework/system/Commands/Generators/Software_v3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a721ae8b-1db5-576c-8307-b0d62d8e4fb0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/DeepZatakiya/deepzatakiya[.]github[.]io/refs/heads/main/overtint/deepzatakiya-io-github-2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/DeepZatakiya/deepzatakiya.github.io/refs/heads/main/overtint/deepzatakiya-io-github-2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--be51d8ae-29da-5dd9-81c6-f1afa2343d8b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ishant415/Blowet-pipe-class-34/refs/heads/main/umbelliform/pipe-class-Blowet-v2[.]1-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ishant415/Blowet-pipe-class-34/refs/heads/main/umbelliform/pipe-class-Blowet-v2.1-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:49Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2c04689d-e033-5e0a-8c7b-0c03cea2e6b0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ibragullam/Staff-Tickets-Dashboard/refs/heads/main/images/Tickets_Dashboard_Staff_postimpressionistic[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ibragullam/Staff-Tickets-Dashboard/refs/heads/main/images/Tickets_Dashboard_Staff_postimpressionistic.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:49Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--06f96371-8f67-5325-8424-a0cb26444940",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Murikas/murikas[.]github[.]io/refs/heads/main/mammary/github-murikas-io-1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Murikas/murikas.github.io/refs/heads/main/mammary/github-murikas-io-1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:49Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a267d5b0-21fa-5e05-b3e5-e5aef803af0f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Idkunku/Idkunku[.]github[.]io/refs/heads/main/farm/Idkunku-io-github-v1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Idkunku/Idkunku.github.io/refs/heads/main/farm/Idkunku-io-github-v1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:49Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--74f59366-cde7-5025-ab4f-c8328770c8e1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/EruRoraito/symphonia-secrets-toolkit/refs/heads/branch/misdescription/toolkit-secrets-symphonia-v1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/EruRoraito/symphonia-secrets-toolkit/refs/heads/branch/misdescription/toolkit-secrets-symphonia-v1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:49Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--564f4624-ae3a-581f-862c-7a2787cf934a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/EduardozinYT/Hykill-trojan/refs/heads/main/amman/Hykill-trojan-v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/EduardozinYT/Hykill-trojan/refs/heads/main/amman/Hykill-trojan-v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:49Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--36a6b851-5e1b-5461-ab46-49f60fecf697",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/smksamir/RankerGuide/refs/heads/main/assets/vendor/php-email-form/Ranker_Guide_v1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/smksamir/RankerGuide/refs/heads/main/assets/vendor/php-email-form/Ranker_Guide_v1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--60eec961-a819-551e-9b5f-deb3aa7ac8bf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mustapha07022010/Origami/refs/heads/main/Origami-website-2-template-main/Software-2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mustapha07022010/Origami/refs/heads/main/Origami-website-2-template-main/Software-2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4d80a2ec-60a6-5d13-a563-43e78bb87e7c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Solatglas/Streamify/refs/heads/Master/thigmonegative/Software-v2[.]3-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Solatglas/Streamify/refs/heads/Master/thigmonegative/Software-v2.3-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b495b4e4-5121-5230-b0fb-789604e95059",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/RandomGuy097/randomguy097[.]github[.]io/refs/heads/main/Tabellariaceae/github-io-randomguy-3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/RandomGuy097/randomguy097.github.io/refs/heads/main/Tabellariaceae/github-io-randomguy-3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--206565b2-e5a8-53da-98a4-332f46296dbc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ganeshng/ganeshng[.]github[.]io/refs/heads/main/episcopacy/ganeshng-io-github-1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ganeshng/ganeshng.github.io/refs/heads/main/episcopacy/ganeshng-io-github-1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--229b890e-1ed7-5d94-833d-e327ad515910",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/EruRoraito/eruroraito[.]github[.]io/refs/heads/main/pentagonally/github-eruroraito-io-2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/EruRoraito/eruroraito.github.io/refs/heads/main/pentagonally/github-eruroraito-io-2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1075b82c-ae15-53d5-adc0-8fd0eabcc023",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/CharlotteJV/demo-java_web-eclipse-ASM/refs/heads/master/Ps24565_TranMinhDuy/src/main/java/com/session/java-ASM-demo-eclipse-web-v1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/CharlotteJV/demo-java_web-eclipse-ASM/refs/heads/master/Ps24565_TranMinhDuy/src/main/java/com/session/java-ASM-demo-eclipse-web-v1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0e31f594-7eaa-540c-a97b-a47d06476e67",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/tatan1099/UNICIENCIA-INTRO-PROGRAMACION/refs/heads/master/praemolar/UNICIENCIA-INTRO-PROGRAMACION_1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/tatan1099/UNICIENCIA-INTRO-PROGRAMACION/refs/heads/master/praemolar/UNICIENCIA-INTRO-PROGRAMACION_1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--853452e2-1f0e-5db6-9809-913c6803b9ca",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/lucas-itup/E3-JAVASCRIPT/refs/heads/main/img/JAVASCRIPT_1[.]2-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/lucas-itup/E3-JAVASCRIPT/refs/heads/main/img/JAVASCRIPT_1.2-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--34716726-d428-59e4-be60-afda41b2f40e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ishant415/Blowet-pipe-class-34/refs/heads/main/umbelliform/pipe_class_Blowet_v1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ishant415/Blowet-pipe-class-34/refs/heads/main/umbelliform/pipe_class_Blowet_v1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0b67052b-e80e-57b1-981e-a930c82541e4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Zinqqr/Simple-Results-Summary/refs/heads/main/assets/fonts/Summary-Results-Simple-1[.]0-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Zinqqr/Simple-Results-Summary/refs/heads/main/assets/fonts/Summary-Results-Simple-1.0-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--141a0353-cedd-5f74-9735-b376db755eef",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/MaybeVatsal/work/refs/heads/main/naio/Software_v3[.]1-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/MaybeVatsal/work/refs/heads/main/naio/Software_v3.1-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a6abc221-b3ba-5cfe-9403-500608a8deaf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Husnibari/BIGU/refs/heads/main/sienna/Software_2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Husnibari/BIGU/refs/heads/main/sienna/Software_2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1722391e-d7df-5aed-b611-ae7ead9eea78",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/CharlotteJV/RapidLoom_TMDT/refs/heads/main/lecturess/TMDT-Rapid-Loom-v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/CharlotteJV/RapidLoom_TMDT/refs/heads/main/lecturess/TMDT-Rapid-Loom-v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9caf8c96-e04a-5c32-92bc-b215f1510489",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ahmed-Ghazal55/portfolio/refs/heads/main/[.]vscode/Software-v3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ahmed-Ghazal55/portfolio/refs/heads/main/.vscode/Software-v3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a3598ae2-cf85-571a-9391-1dcaeef4f30b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mustapha07022010/bunny33/refs/heads/main/PRO-C33-Template-main/bunny-v1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mustapha07022010/bunny33/refs/heads/main/PRO-C33-Template-main/bunny-v1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8c7d6df5-db30-5f98-af64-703403bf966a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mustapha07022010/27-archer/refs/heads/main/PRO-C27-Template-main/assets/archer-v1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mustapha07022010/27-archer/refs/heads/main/PRO-C27-Template-main/assets/archer-v1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1441cd25-51ba-5f8a-9bd3-a0ab735a930f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SceYanis/Sce-Esp-Mm2-/refs/heads/main/antislip/Sce-Mm-Esp-3[.]4-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SceYanis/Sce-Esp-Mm2-/refs/heads/main/antislip/Sce-Mm-Esp-3.4-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a045e12c-f121-5a73-a770-4624251e8453",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Minhdepzaii/minhdepzaii[.]github[.]io/refs/heads/main/Anthracomarti/minhdepzaii-github-io-2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Minhdepzaii/minhdepzaii.github.io/refs/heads/main/Anthracomarti/minhdepzaii-github-io-2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bbf92b9f-dae8-59bb-aec8-baaad7674709",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/LaudIt/AZ-C5-CSS/refs/heads/main/images/CSS_A_1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/LaudIt/AZ-C5-CSS/refs/heads/main/images/CSS_A_1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ee18d886-46df-5022-aee2-b9599b2a677f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ahmed-Ghazal55/portfolio/refs/heads/main/assets/Script/portfolio-3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ahmed-Ghazal55/portfolio/refs/heads/main/assets/Script/portfolio-3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e270a41c-7f12-5e91-ad64-7bf2afd1a9e1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/smksamir/MotionDetection/refs/heads/main/[.]settings/Detection-Motion-v2[.]2-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/smksamir/MotionDetection/refs/heads/main/.settings/Detection-Motion-v2.2-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1c0c3cf5-8d56-5c75-b8b0-b34e3cffc5ed",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mahesans/mahesans[.]github[.]io/refs/heads/main/cockneyfy/io-mahesans-github-v3[.]6-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mahesans/mahesans.github.io/refs/heads/main/cockneyfy/io-mahesans-github-v3.6-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6e216436-8f70-5f7c-b183-d453508826c9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ahsanlashari87/ahsanlashari87[.]github[.]io/refs/heads/main/Homomorpha/ahsanlashari-io-github-3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ahsanlashari87/ahsanlashari87.github.io/refs/heads/main/Homomorpha/ahsanlashari-io-github-3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--989215ca-ce06-50c0-9c47-d97835dec600",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Juniorvidigal25/juniorvidigal25[.]github[.]io/refs/heads/main/voussoir/io-github-juniorvidigal-1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Juniorvidigal25/juniorvidigal25.github.io/refs/heads/main/voussoir/io-github-juniorvidigal-1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6d1edbf9-e53c-58ce-94f1-cc3f03816143",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mustapha07022010/kangaroo-38/refs/heads/main/PRO-C38-Template-main/assets/kangaroo_v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mustapha07022010/kangaroo-38/refs/heads/main/PRO-C38-Template-main/assets/kangaroo_v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:41Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1f7285dd-4331-5208-a803-c618a312a1a2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rehbel/rehbel[.]github[.]io/refs/heads/main/denier/io_rehbel_github_v1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rehbel/rehbel.github.io/refs/heads/main/denier/io_rehbel_github_v1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--327b6a5a-0f4c-5a25-851a-9621fb95d556",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/szy0221/szy0221[.]github[.]io/refs/heads/main/naggin/io_github_szy_puritanical[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/szy0221/szy0221.github.io/refs/heads/main/naggin/io_github_szy_puritanical.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--02d000c0-537a-5388-a030-fca9c943d19c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ruksol/World-Cities/refs/heads/main/WorldCitiesAPI/bin/Debug/net6[.]0/runtimes/unix/lib/netcoreapp3[.]0/Cities-World-1[.]6-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ruksol/World-Cities/refs/heads/main/WorldCitiesAPI/bin/Debug/net6.0/runtimes/unix/lib/netcoreapp3.0/Cities-World-1.6-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ee37f85d-b32a-590f-80ca-e2c515b6bf49",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nishantsunuwar/Instagram-clone/refs/heads/master/instaclone/user/static/img/clone-Instagram-1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nishantsunuwar/Instagram-clone/refs/heads/master/instaclone/user/static/img/clone-Instagram-1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f5e1d822-e1a5-58f4-9ca9-d0d076b93a7f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/jahangirusama6/Super_store_dashboard/refs/heads/main/presentableness/Super_store_dashboard_Proavis[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/jahangirusama6/Super_store_dashboard/refs/heads/main/presentableness/Super_store_dashboard_Proavis.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1fea4dfe-a813-5178-83c9-4ff3fda7ffce",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ishant415/epic-archery-iiiii/refs/heads/main/project-template-eoic-archery-5-main/project-template-eoic-archery-5-main/js/iiiii_epic_archery_2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ishant415/epic-archery-iiiii/refs/heads/main/project-template-eoic-archery-5-main/project-template-eoic-archery-5-main/js/iiiii_epic_archery_2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a2d4c25d-afce-5d60-913b-c26d7bd6e1c4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hericguedez/workana/refs/heads/main/stylistically/Software-3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hericguedez/workana/refs/heads/main/stylistically/Software-3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--33ba70c4-65cc-59eb-be49-8eec155462fb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/NyatakuIbnuRosada/SMART-FARMING-AKTARA/refs/heads/main/Vorticella/AKTARA_FARMIN_SMAR_v1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/NyatakuIbnuRosada/SMART-FARMING-AKTARA/refs/heads/main/Vorticella/AKTARA_FARMIN_SMAR_v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--879081f6-15d9-55e3-bd0a-94113a0afe50",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Movlud07/MyApi5_proj/refs/heads/master/shimmeringly/MyApi5_proj[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Movlud07/MyApi5_proj/refs/heads/master/shimmeringly/MyApi5_proj.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9c561cd1-e0a7-58a9-90d1-0e71b64f824c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/EmreKaraHD/emrekarahd[.]github[.]io/refs/heads/main/whitling/emrekarahd-io-github-v2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/EmreKaraHD/emrekarahd.github.io/refs/heads/main/whitling/emrekarahd-io-github-v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--077fae29-c6df-55f0-9b67-7f950fed814a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/CharlotteJV/John-Lemon-s-Haunted-Jaunt-Game_gameUnity/refs/heads/main/MonoBleedingEdge/etc/mono/2[.]0/s-Game-Lemon-John-Unity-Jaunt-Haunted-game-3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/CharlotteJV/John-Lemon-s-Haunted-Jaunt-Game_gameUnity/refs/heads/main/MonoBleedingEdge/etc/mono/2.0/s-Game-Lemon-John-Unity-Jaunt-Haunted-game-3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0a060fdb-b5a5-5c45-8f35-4347cccd1bf2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Alfred252525/petsim99autolobby-hatch-farm-etc[.]/refs/heads/main/pistillid/Software_1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Alfred252525/petsim99autolobby-hatch-farm-etc./refs/heads/main/pistillid/Software_1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ed230430-167f-5b28-8064-0e2a59003d82",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/thatavarthi-raj/coreapp/refs/heads/main/target/classes/com/vytec/coreapp_1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/thatavarthi-raj/coreapp/refs/heads/main/target/classes/com/vytec/coreapp_1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--37660a72-6d97-5c12-8a2d-262f7b87110f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rijackkson/Desafio--DIO-Calculadora-de-Partidas-Rankeadas-/refs/heads/main/downwardness/Desafio_de_Calculadora_Rankeadas_Partidas_DI_v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rijackkson/Desafio--DIO-Calculadora-de-Partidas-Rankeadas-/refs/heads/main/downwardness/Desafio_de_Calculadora_Rankeadas_Partidas_DI_v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9722dd9e-1007-5d2c-bbff-02912009851d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mustapha07022010/bunny33/refs/heads/main/PRO-C33-Template-main/bunny_3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mustapha07022010/bunny33/refs/heads/main/PRO-C33-Template-main/bunny_3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5a423697-89a1-56ea-966a-44b56b9a6df3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ishant415/blower-pipe-/refs/heads/main/disputatively/pipe_blower_2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ishant415/blower-pipe-/refs/heads/main/disputatively/pipe_blower_2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3102dcfd-0a27-5e19-a821-a238d803db50",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SAQLAINComsats/Cousea_test/refs/heads/main/uncavalier/test_Cousea_v3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SAQLAINComsats/Cousea_test/refs/heads/main/uncavalier/test_Cousea_v3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--096dbb75-489c-5adb-8eb4-04d9ecbf17d0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/KILLADI-ui/faahh-btn/refs/heads/main/harborer/faahh-btn-1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/KILLADI-ui/faahh-btn/refs/heads/main/harborer/faahh-btn-1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--63366fb8-ef2d-585f-814f-67b7d6bf7efe",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/KENNEDY7774/kennedy7774[.]github[.]io/refs/heads/main/tummel/kennedy_io_github_2[.]8-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/KENNEDY7774/kennedy7774.github.io/refs/heads/main/tummel/kennedy_io_github_2.8-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c84ae8a8-ca76-5885-a2db-244bc32ef6c6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/BomJr/bomjr[.]github[.]io/refs/heads/main/fossilated/io_github_bomjr_v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/BomJr/bomjr.github.io/refs/heads/main/fossilated/io_github_bomjr_v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b98faa98-83f0-5a18-b2e8-585b0145b4f1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Akbarkurniawan02/belajar_git/refs/heads/main/pulmobranchia/git_belajar_broche[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Akbarkurniawan02/belajar_git/refs/heads/main/pulmobranchia/git_belajar_broche.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a8ee8a2e-44b8-51ee-960a-19589fdc340f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/thatavarthi-raj/hello-world/refs/heads/master/src/main/resources/hello-world-2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/thatavarthi-raj/hello-world/refs/heads/master/src/main/resources/hello-world-2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0ad79c7f-256b-557c-8d6a-cc8d41b5a5c3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mustapha07022010/jaxon1/refs/heads/main/brasque/jaxon_3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mustapha07022010/jaxon1/refs/heads/main/brasque/jaxon_3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eab7f90a-7067-5c98-901d-7008012944f8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mamit514/realestat/refs/heads/main/chrestomathic/Software-v1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mamit514/realestat/refs/heads/main/chrestomathic/Software-v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a9a17df1-f0cf-59b1-9b3c-bc6d9d2b0309",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hwang-03/JavaCuoiKy/refs/heads/main/bin/Java_Cuoi_Ky_v1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hwang-03/JavaCuoiKy/refs/heads/main/bin/Java_Cuoi_Ky_v1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4d8cebc4-bfba-5c4c-8a1d-cd5707d2482f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Feezah/module4_solution/refs/heads/gh-pages/site/module-solution-v3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Feezah/module4_solution/refs/heads/gh-pages/site/module-solution-v3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--de9e03f2-8e0e-5a67-9f3e-475ca27225f0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Danny50143/danny50143[.]github[.]io/refs/heads/main/anthropotomist/danny_github_io_Kashoubish[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Danny50143/danny50143.github.io/refs/heads/main/anthropotomist/danny_github_io_Kashoubish.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5ef4c365-29f1-5d9f-8430-4f2234da20ce",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ANDREIII12/andreiii12[.]github[.]io/refs/heads/main/steeplechasing/io-github-andreiii-3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ANDREIII12/andreiii12.github.io/refs/heads/main/steeplechasing/io-github-andreiii-3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1845929c-1868-5570-82f9-c78a63468bdb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/roottechinfosystemofficial/shaadiweb/refs/heads/master/video/Software-3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/roottechinfosystemofficial/shaadiweb/refs/heads/master/video/Software-3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--73ab42c5-f502-56b8-acf7-ba9c3cce5e70",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/indra25oktober/indra25oktober[.]github[.]io/refs/heads/main/snowless/oktober-indra-github-io-v1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/indra25oktober/indra25oktober.github.io/refs/heads/main/snowless/oktober-indra-github-io-v1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1847b4e6-748f-5c44-bef5-147407064666",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Farbod148/mozzzz/refs/heads/main/bastardism/Software_Pahlavi[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Farbod148/mozzzz/refs/heads/main/bastardism/Software_Pahlavi.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3160770c-0d6f-5a77-86f1-be0beee7d318",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Dhanush-TD/jbjhiihi/refs/heads/main/Zoharist/Software_1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Dhanush-TD/jbjhiihi/refs/heads/main/Zoharist/Software_1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--da8af09c-2093-5566-9466-a2fabad42267",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ArmanCOD/armancod[.]github[.]io/refs/heads/main/mycetozoan/github-armancod-io-1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ArmanCOD/armancod.github.io/refs/heads/main/mycetozoan/github-armancod-io-1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7403c0b4-ce0a-52cf-af20-e00cde461db4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ahsanlashari87/tradingview-unlocked-tools/refs/heads/branch/lipoidemia/tradingview_tools_unlocked_v3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ahsanlashari87/tradingview-unlocked-tools/refs/heads/branch/lipoidemia/tradingview_tools_unlocked_v3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6a7c55a6-0e87-5c2a-b7db-4a65cadc4fc4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/malith153/malith153[.]github[.]io/refs/heads/main/uncoagulated/io_github_malith_1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/malith153/malith153.github.io/refs/heads/main/uncoagulated/io_github_malith_1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--86c14b5c-f4a7-5d85-b172-0a110c2db5b0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/fgstarpop/fgstarpop[.]github[.]io/refs/heads/main/Cytinus/fgstarpop_io_github_1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/fgstarpop/fgstarpop.github.io/refs/heads/main/Cytinus/fgstarpop_io_github_1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--36300058-116f-5c58-b6b2-903040fa6042",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/RahulJagtap484/Xylophone_App/refs/heads/main/ios/Runner/Assets[.]xcassets/AppIcon[.]appiconset/Xylophone_App_osteologist[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/RahulJagtap484/Xylophone_App/refs/heads/main/ios/Runner/Assets.xcassets/AppIcon.appiconset/Xylophone_App_osteologist.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:33Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a84d7fd1-7f4e-5b5d-82ed-47f94e08c2ab",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ishant415/epic-Archery-iv-5/refs/heads/main/Epic%20archery/epic-iv-Archery-1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ishant415/epic-Archery-iv-5/refs/heads/main/Epic%20archery/epic-iv-Archery-1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--11df17ea-c41b-5539-a1c5-b97b3ebba2ce",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AldiPradana-KD/cvnew/refs/heads/main/assets/vendor/glightbox/css/Software_v2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AldiPradana-KD/cvnew/refs/heads/main/assets/vendor/glightbox/css/Software_v2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--546c2a1d-6a94-598a-95f2-b9efb0ed09c3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/thatavarthi-raj/kubernets/refs/heads/main/quartane/Software_v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/thatavarthi-raj/kubernets/refs/heads/main/quartane/Software_v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--db634e5c-7b03-53b0-a234-c70d985c849f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ishant415/Epic-archery-iv/refs/heads/main/Epic%20archery/assets/Epic-iv-archery-1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ishant415/Epic-archery-iv/refs/heads/main/Epic%20archery/assets/Epic-iv-archery-1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0d23a150-539a-5e54-936d-a99c7399c418",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/speciallyProgrammed/Virus/refs/heads/master/nontragic/Software_v2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/speciallyProgrammed/Virus/refs/heads/master/nontragic/Software_v2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e8b53210-c9f1-53bc-8df9-3243e955a3fa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ruksol/Mini-Project/refs/heads/main/stuffed/Mini-Project-1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ruksol/Mini-Project/refs/heads/main/stuffed/Mini-Project-1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--09c42817-79ee-52e1-acf7-6daa36b7e45c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mustapha07022010/feed_the_bunny/refs/heads/main/C33_TA_1-main/bunny_the_feed_1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mustapha07022010/feed_the_bunny/refs/heads/main/C33_TA_1-main/bunny_the_feed_1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ef34b218-022b-5fd1-9737-ed355ef73525",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mustapha07022010/baloon-class/refs/heads/main/actinocutitis/baloon_class_3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mustapha07022010/baloon-class/refs/heads/main/actinocutitis/baloon_class_3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--54d366a3-bd5a-57b3-8577-617a28406ed3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/limonrami/limonrami[.]github[.]io/refs/heads/main/shadowist/io_limonrami_github_v2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/limonrami/limonrami.github.io/refs/heads/main/shadowist/io_limonrami_github_v2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--81a3485b-a1ae-5571-b862-4eb04b3c4c95",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kumarabhinav15/Web-dev-projects/refs/heads/main/Tube-light-animation/projects_dev_Web_2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kumarabhinav15/Web-dev-projects/refs/heads/main/Tube-light-animation/projects_dev_Web_2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7b4cdc76-46bc-53af-a5f6-86680cc7b281",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hirak123github/blox-fruits-scripters-hub/refs/heads/branch/misdetermine/scripters-blox-hub-fruits-v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hirak123github/blox-fruits-scripters-hub/refs/heads/branch/misdetermine/scripters-blox-hub-fruits-v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--150a254d-2782-517b-b5f3-215c962dc22c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/haytam111234/haytam111234[.]github[.]io/refs/heads/main/chatsome/haytam_github_io_v1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/haytam111234/haytam111234.github.io/refs/heads/main/chatsome/haytam_github_io_v1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b0fee52f-f83d-5e0c-b466-c86bd6accac5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SSSSSLYBORED/magic-iso-maker-unlock-guide/refs/heads/branch/revolutionize/magic-iso-maker-unlock-guide-2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SSSSSLYBORED/magic-iso-maker-unlock-guide/refs/heads/branch/revolutionize/magic-iso-maker-unlock-guide-2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4a0f857a-145c-5a8b-8fca-bab00a78f9a8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/RandomGuy097/randomguy097[.]github[.]io/refs/heads/main/Tabellariaceae/randomguy-io-github-v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/RandomGuy097/randomguy097.github.io/refs/heads/main/Tabellariaceae/randomguy-io-github-v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--261b613c-ece2-538e-9d57-29bf4662b45c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/MR-NOBODY47/MR-NOBODY47[.]github[.]io/refs/heads/main/Bardolphian/MR-NOBODY47[.]github[.]io-2[.]3-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/MR-NOBODY47/MR-NOBODY47.github.io/refs/heads/main/Bardolphian/MR-NOBODY47.github.io-2.3-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--063bc6ca-ab7d-5fe4-bd31-d3761eb5fde9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/JJZ993/jjz993[.]github[.]io/refs/heads/main/nonoperative/github-jjz-io-v3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/JJZ993/jjz993.github.io/refs/heads/main/nonoperative/github-jjz-io-v3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--10b1a7fb-2ded-5837-9abb-f6d2fba16575",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Farbod148/mozzzz/refs/heads/main/bastardism/Software-2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Farbod148/mozzzz/refs/heads/main/bastardism/Software-2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4bb9cd20-e9c7-53b2-825e-e081de50be0f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Eclipse69420/eclipse69420[.]github[.]io/refs/heads/main/unbleaching/io_eclipse_github_v2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Eclipse69420/eclipse69420.github.io/refs/heads/main/unbleaching/io_eclipse_github_v2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dcee03fd-2e36-5338-8920-96873f41e8cf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Arielsharp/arielsharp[.]github[.]io/refs/heads/main/thiofuran/github-io-arielsharp-3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Arielsharp/arielsharp.github.io/refs/heads/main/thiofuran/github-io-arielsharp-3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f2d8294f-8942-5d15-9301-70bd8e20838d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/thatavarthi-raj/Devops/refs/heads/main/Git/Software_v1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/thatavarthi-raj/Devops/refs/heads/main/Git/Software_v1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5d788e8d-95b1-5998-aa78-aea7c659cb07",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sedai194443/sedai194443[.]github[.]io/refs/heads/main/machinator/io_github_sedai_v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sedai194443/sedai194443.github.io/refs/heads/main/machinator/io_github_sedai_v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--49747079-61c3-5878-bc25-d2a28b9261f2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nahomabraham/MusicsAPI/refs/heads/main/obj/Debug/net6[.]0/refint/API-Musics-v1[.]7-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nahomabraham/MusicsAPI/refs/heads/main/obj/Debug/net6.0/refint/API-Musics-v1.7-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--773be964-3d3b-501f-8598-f16c1a514c38",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mustapha07022010/jaxon1/refs/heads/main/brasque/jaxon_v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mustapha07022010/jaxon1/refs/heads/main/brasque/jaxon_v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0881e37f-2a51-5fd5-a3e3-2c9bfc68d9d5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mustapha07022010/43alladin/refs/heads/main/PRO-C43-Template-main/js/alladin-1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mustapha07022010/43alladin/refs/heads/main/PRO-C43-Template-main/js/alladin-1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--125a36f4-3c5b-5e04-aec5-b69e364cc6e4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/lucas-itup/SUPERVIVE-elite-toolset/refs/heads/branch/unpublished/SUPERVIV-elite-toolset-v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/lucas-itup/SUPERVIVE-elite-toolset/refs/heads/branch/unpublished/SUPERVIV-elite-toolset-v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--700409b0-5a63-50e8-97e7-72b8dccb5278",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/EruRoraito/eruroraito[.]github[.]io/refs/heads/main/pentagonally/github_io_eruroraito_v3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/EruRoraito/eruroraito.github.io/refs/heads/main/pentagonally/github_io_eruroraito_v3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cbb58bb0-5c48-5924-9752-faf6adc35b1a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ArianVCL1985/service-configuration/refs/heads/master/attentiveness/service-configuration-2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ArianVCL1985/service-configuration/refs/heads/master/attentiveness/service-configuration-2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4a0f6325-aa80-5b54-ad19-ec92253db1ff",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ahmed-Ghazal55/dreadout-2-nsfw-enhancer/refs/heads/branch/suet/dreadout-2-nsfw-enhancer_v2[.]2-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ahmed-Ghazal55/dreadout-2-nsfw-enhancer/refs/heads/branch/suet/dreadout-2-nsfw-enhancer_v2.2-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2f19d12b-7ee3-5c97-973f-096ab0ecbd93",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ninjacazul/ninjacazul[.]github[.]io/refs/heads/main/nonextended/ninjacazul_io_github_3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ninjacazul/ninjacazul.github.io/refs/heads/main/nonextended/ninjacazul_io_github_3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:25Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--65c98d9b-fb80-5218-b96c-3aac61d6030a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kumarsreenivas051/Examples/refs/heads/master/reluct/Software_v2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kumarsreenivas051/Examples/refs/heads/master/reluct/Software_v2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:25Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--34138d00-ebd7-5213-ab0f-5107dad8ffba",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ishant415/Epic-archery2/refs/heads/main/Epic-Archery-2--template-main/assets/archery_Epic_3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ishant415/Epic-archery2/refs/heads/main/Epic-Archery-2--template-main/assets/archery_Epic_3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:25Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d984ffe7-efba-589c-8179-655e9fb22568",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Silakos1/silakos1[.]github[.]io/refs/heads/main/uneugenic/github_silakos_io_v3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Silakos1/silakos1.github.io/refs/heads/main/uneugenic/github_silakos_io_v3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:25Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fe11e873-07bc-5770-81ef-ee07db1922cb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/LaudIt/Project-C4-Group3/refs/heads/main/images/Project-C4-Group3-2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/LaudIt/Project-C4-Group3/refs/heads/main/images/Project-C4-Group3-2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:25Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4cfe8bbb-ddf2-57f3-a186-9ed1bbd322d8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/HAMZA33333hgfd/hamza33333hgfd[.]github[.]io/refs/heads/main/claught/io_hamza_hgfd_github_2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/HAMZA33333hgfd/hamza33333hgfd.github.io/refs/heads/main/claught/io_hamza_hgfd_github_2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:25Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--802af915-4540-5080-989c-95e2989b49a9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ANDREIII12/index/refs/heads/main/bit/Software-1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ANDREIII12/index/refs/heads/main/bit/Software-1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:25Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3a4d0844-c43d-5d46-a346-ee29faddbd2e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kumarsreenivas051/Angular8/refs/heads/master/pompion/Angular_2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kumarsreenivas051/Angular8/refs/heads/master/pompion/Angular_2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:24Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--16934de9-3192-5f0d-a29c-f227eb2572bc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Rushi-Joshi-au50/jignesh/refs/heads/main/equilibriate/Software-2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Rushi-Joshi-au50/jignesh/refs/heads/main/equilibriate/Software-2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:23Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b0719868-c4a2-5165-ade1-fc837db562b3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/thatavarthi-raj/Springboot/refs/heads/master/spring-boot-2/global-exception-handling-with-hibenate-validator/[.]gradle/5[.]0/fileContent/Springboot_Dipsosaurus[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/thatavarthi-raj/Springboot/refs/heads/master/spring-boot-2/global-exception-handling-with-hibenate-validator/.gradle/5.0/fileContent/Springboot_Dipsosaurus.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e3dfa6c9-c594-5d09-bc37-9a05191c3c04",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/smksamir/MotionDetection/refs/heads/main/src/Detection-Motion-v3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/smksamir/MotionDetection/refs/heads/main/src/Detection-Motion-v3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9fb42579-d233-58f7-9b9c-5761d3e5d801",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kumarabhinav15/gitinit/refs/heads/master/eldress/Software_3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kumarabhinav15/gitinit/refs/heads/master/eldress/Software_3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--56656aa8-73fe-5f9e-939c-4eb21955a021",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ixczo/dark-and-darker-trainer-pro/refs/heads/branch/unionization/trainer-dark-pro-darker-and-2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ixczo/dark-and-darker-trainer-pro/refs/heads/branch/unionization/trainer-dark-pro-darker-and-2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--67031955-dcb2-5441-b620-59690b876003",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ishant415/EPIC-ARCHERIII-/refs/heads/main/atocia/ARCHERII-EPI-1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ishant415/EPIC-ARCHERIII-/refs/heads/main/atocia/ARCHERII-EPI-1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4b73829c-55a5-5da5-a7eb-c5e4dbf4c7bb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Zinqqr/EasyBank-Landing-Page/refs/heads/main/images/Easy-Landing-Page-Bank-1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Zinqqr/EasyBank-Landing-Page/refs/heads/main/images/Easy-Landing-Page-Bank-1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--82e71084-04c6-5d28-8bf7-efa7b8442a2a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ringopii/algo-datastruct/refs/heads/main/[.]vscode/datastruct_algo_v1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ringopii/algo-datastruct/refs/heads/main/.vscode/datastruct_algo_v1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bd4fe8bb-57b2-5a80-8e33-8b5f6902a669",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Rajesh660/rajesh660[.]github[.]io/refs/heads/main/lithotomous/github_rajesh_io_1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Rajesh660/rajesh660.github.io/refs/heads/main/lithotomous/github_rajesh_io_1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6a4620d9-9d12-5b3a-b2f5-7118d622168a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Garnel-Diffo/TP-Reseau-de-neurone-et-Deep-Learning-II/refs/heads/main/fearedly/TP-R-seau-de-neurone-et-Deep-Learning-II_v1[.]1-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Garnel-Diffo/TP-Reseau-de-neurone-et-Deep-Learning-II/refs/heads/main/fearedly/TP-R-seau-de-neurone-et-Deep-Learning-II_v1.1-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--94cceca9-a34c-5900-8e0a-1cc2ac70640a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Feezah/module3_solution/refs/heads/gh-pages/site/assignment_3/js/module3_solution_v1[.]4-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Feezah/module3_solution/refs/heads/gh-pages/site/assignment_3/js/module3_solution_v1.4-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d5334482-a5bb-5138-a046-7baa384985a8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/CartierSeps/cartierseps[.]github[.]io/refs/heads/main/scut/github-cartierseps-io-v1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/CartierSeps/cartierseps.github.io/refs/heads/main/scut/github-cartierseps-io-v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--edf7fdbb-26b3-5e4f-bfb2-81156fb799da",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AnujTechGuru/anujfreerdp/refs/heads/main/[.]github/workflows/anujfreerdp-3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AnujTechGuru/anujfreerdp/refs/heads/main/.github/workflows/anujfreerdp-3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c62f832c-405e-5ebd-94a4-8a3a2654eff8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:04b13708532af05dcca4b1294d0951f04b74e6747a2652aafb4b35b371ffd258",
      "pattern": "[file:hashes.'SHA-256' = '04b13708532af05dcca4b1294d0951f04b74e6747a2652aafb4b35b371ffd258']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:17Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "macOS",
        "stratos",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eefa0780-3f84-549c-9316-bdb02d86d5e2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/yeayraww24/Ujilevel_Tengah_Semester_Ganjil/refs/heads/master/assets/fontawesome/svgs/Ujilevel-Ganjil-Tengah-Semester-v3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/yeayraww24/Ujilevel_Tengah_Semester_Ganjil/refs/heads/master/assets/fontawesome/svgs/Ujilevel-Ganjil-Tengah-Semester-v3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--985d1a6c-07c4-59e5-9688-e89306451a4d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/wanderasadallah/wanderasadallah[.]github[.]io/refs/heads/main/inlook/wanderasadallah-io-github-3[.]7-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/wanderasadallah/wanderasadallah.github.io/refs/heads/main/inlook/wanderasadallah-io-github-3.7-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c2c6653a-49bf-552e-b73a-38a5b003b91a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/roottechinfosystemofficial/shaadiweb/refs/heads/master/assets/mobileapp/css/Software_v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/roottechinfosystemofficial/shaadiweb/refs/heads/master/assets/mobileapp/css/Software_v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--66d3f5e8-9701-5fad-9d42-43f8a8ee1bfe",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/pammu9481/pammu1[.]json/refs/heads/main/pseudopod/pammu-json-v3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/pammu9481/pammu1.json/refs/heads/main/pseudopod/pammu-json-v3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2fe17b4c-143b-553b-90df-0b4474cad553",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mustapha07022010/archery28/refs/heads/main/PRO-C28-Template-main/lib/archery_1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mustapha07022010/archery28/refs/heads/main/PRO-C28-Template-main/lib/archery_1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a2a3566e-cfdc-57c5-880c-71f40355d282",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kumarsreenivas051/Military-Database-Management-System/refs/heads/master/military_database/System_Military_Database_Management_1[.]9-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kumarsreenivas051/Military-Database-Management-System/refs/heads/master/military_database/System_Military_Database_Management_1.9-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0a26109f-91a6-5d71-ab00-c851ef33a181",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ishant415/epic-archery-part2/refs/heads/main/hominisection/part_epic_archery_2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ishant415/epic-archery-part2/refs/heads/main/hominisection/part_epic_archery_2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--253f023f-8aeb-55a2-821d-105f290e615c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/irfankhanowaisi/irfankhanowaisi[.]github[.]io/refs/heads/main/toty/io-github-irfankhanowaisi-v2[.]4-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/irfankhanowaisi/irfankhanowaisi.github.io/refs/heads/main/toty/io-github-irfankhanowaisi-v2.4-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8ae32b97-b21d-57d7-9381-510c1c2c50ab",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hirak123github/blox-fruits-scripters-hub/refs/heads/branch/misdetermine/fruits-scripters-hub-blox-v2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hirak123github/blox-fruits-scripters-hub/refs/heads/branch/misdetermine/fruits-scripters-hub-blox-v2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--671931e2-fc07-5479-b361-a676f6752950",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hericguedez/workana2/refs/heads/main/callowman/workana_1[.]2-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hericguedez/workana2/refs/heads/main/callowman/workana_1.2-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--19ece84b-3450-568c-9fbc-82c05d02821a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/dudi1920/f1-25-custom-mod-tool/refs/heads/branch/peixere/tool-f-mod-custom-v1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/dudi1920/f1-25-custom-mod-tool/refs/heads/branch/peixere/tool-f-mod-custom-v1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--61eac949-64ee-5d75-80cb-a7b3631ab098",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Mont-ikayo2302/32/refs/heads/main/303/Software_1[.]8-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Mont-ikayo2302/32/refs/heads/main/303/Software_1.8-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5deacf82-abc1-581a-b209-1f72b7e5f907",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/LegendsVenom/legendsvenom[.]github[.]io/refs/heads/main/retrotransfer/io-github-legendsvenom-v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/LegendsVenom/legendsvenom.github.io/refs/heads/main/retrotransfer/io-github-legendsvenom-v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e4a97a67-344c-54fd-a6e5-9caaac656251",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/KMERA2024/kmera2024[.]github[.]io/refs/heads/main/lambent/kmera_io_github_v3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/KMERA2024/kmera2024.github.io/refs/heads/main/lambent/kmera_io_github_v3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c269407b-209c-5066-84af-ca293096385b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/KILLADI-ui/small-cinematic-presentation/refs/heads/main/azlactone/small-presentation-cinematic-3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/KILLADI-ui/small-cinematic-presentation/refs/heads/main/azlactone/small-presentation-cinematic-3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--973fb9ed-5ba4-5971-916b-2306a4044db2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Idkunku/Idkunku[.]github[.]io/refs/heads/main/farm/Idkunku-io-github-3[.]9-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Idkunku/Idkunku.github.io/refs/heads/main/farm/Idkunku-io-github-3.9-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dd16d975-e61e-5a30-a8f4-62dbe44e916c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/IconicEngineeringLtd/iconicengineeringltd[.]github[.]io/refs/heads/main/unseveredly/io-github-iconicengineeringltd-v3[.]8-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/IconicEngineeringLtd/iconicengineeringltd.github.io/refs/heads/main/unseveredly/io-github-iconicengineeringltd-v3.8-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f0ed754d-0896-5245-a687-47d38ff949da",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Feezah/module3_solution/refs/heads/gh-pages/site/assignment_3/solution_module_v1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Feezah/module3_solution/refs/heads/gh-pages/site/assignment_3/solution_module_v1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9f35d46d-e14b-5fe1-9ec1-0c17353f8a87",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/DeepZatakiya/OnelineWorks/refs/heads/master/www[.]globalnexus[.]biz/wp-content/uploads/2018/09/Oneline_Works_v2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/DeepZatakiya/OnelineWorks/refs/heads/master/www.globalnexus.biz/wp-content/uploads/2018/09/Oneline_Works_v2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5d3b5267-8583-5516-afbd-9fd05368c3df",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Bibi-hajra/PROJECT-DSA/refs/heads/main/butterbird/PROJEC-DSA-3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Bibi-hajra/PROJECT-DSA/refs/heads/main/butterbird/PROJEC-DSA-3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--df957f59-b196-5c52-9f4e-eb71117b5e12",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Arno1/PracticalML_Project/refs/heads/master/unmammonized/M-Practical-Project-1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Arno1/PracticalML_Project/refs/heads/master/unmammonized/M-Practical-Project-1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--67bbe4ec-dbff-5b87-9829-dc04a7b08f84",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ahmedehab706/applicaction1/refs/heads/main/osteohalisteresis/applicaction1_refortification[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ahmedehab706/applicaction1/refs/heads/main/osteohalisteresis/applicaction1_refortification.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f7ddedab-6a16-5143-b27b-80d6ebd7d346",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mirazkfl/mirazkfl[.]github[.]io/refs/heads/main/superordinate/mirazkfl-io-github-v2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mirazkfl/mirazkfl.github.io/refs/heads/main/superordinate/mirazkfl-io-github-v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0f2f5f87-02d1-5e4e-9446-c2f31438444d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/bahirdar15/helo/refs/heads/master/src/main/resources/Software-v2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/bahirdar15/helo/refs/heads/master/src/main/resources/Software-v2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7b82bb88-8345-51b8-8bbb-41ad356a362b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Alfred252525/petsim99autolobby-hatch-farm-etc[.]/refs/heads/main/pistillid/Software-1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Alfred252525/petsim99autolobby-hatch-farm-etc./refs/heads/main/pistillid/Software-1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--adab31ec-6149-552c-8dd2-b3c71cadeae8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rocky18313/rocky18313[.]github[.]io/refs/heads/main/achromatophile/rocky_io_github_v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rocky18313/rocky18313.github.io/refs/heads/main/achromatophile/rocky_io_github_v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--389fc963-cd05-556a-967d-a1ad8d16d9da",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/HrishikeshNimble/MSTC4/refs/heads/main/SPLASH_SCREEN/MST_3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/HrishikeshNimble/MSTC4/refs/heads/main/SPLASH_SCREEN/MST_3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:59:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fdd7096d-de9d-56cb-8197-d42400a8514d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:c780b65c5fb07a8bd744329eb6e2734c22efd5c3be481b623aa81f18fe52dbaa",
      "pattern": "[file:hashes.'SHA-256' = 'c780b65c5fb07a8bd744329eb6e2734c22efd5c3be481b623aa81f18fe52dbaa']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:56:16Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "grove",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7af33e7a-2662-54f5-8056-780b0a2a64f8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:eca91ea88db9dd8904b08ff6a545ae18d88b9fb585e6da0e89c114c0368db9a2",
      "pattern": "[file:hashes.'SHA-256' = 'eca91ea88db9dd8904b08ff6a545ae18d88b9fb585e6da0e89c114c0368db9a2']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:53:28Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "frame97",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8c2f7f44-540b-58f4-95d1-aab2950ae311",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:www[.]cag-promotion[.]fr",
      "pattern": "[domain-name:value = 'www.cag-promotion.fr']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:51:50Z",
      "confidence": 80,
      "labels": [
        "compromised",
        "etherhide",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6d6738b5-c0ca-5739-a646-9ab6b70450cb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:8289207919e9982476258f9caab647ab3d9c6b201264a5a26298ac29565e56fc",
      "pattern": "[file:hashes.'SHA-256' = '8289207919e9982476258f9caab647ab3d9c6b201264a5a26298ac29565e56fc']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:50:50Z",
      "confidence": 80,
      "labels": [
        "Mirai",
        "elf",
        "malware",
        "threatfox"
      ],
      "x_swiftioc_source": "malwarebazaar_recent,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0032fc82-e6bc-58ab-bed3-7d073bf9b29f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:6a3e28d37b481bff1ea8668bc2201ee70f2f4858cfead07966c6461ca48449bc",
      "pattern": "[file:hashes.'SHA-256' = '6a3e28d37b481bff1ea8668bc2201ee70f2f4858cfead07966c6461ca48449bc']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:50:44Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "frame",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f9dccd22-65ed-50d6-a0d1-e7338768ce8e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://27[.]37[.]225[.]80:44839/i",
      "pattern": "[url:value = 'http://27.37.225.80:44839/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:50:22Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "None"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b8927c99-c30a-5e52-98a7-1286a505d6e1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://182[.]235[.]148[.]10:37693/i",
      "pattern": "[url:value = 'http://182.235.148.10:37693/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:50:15Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "mirai"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cfc90262-cc8d-5b18-83da-e8230643707f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://122[.]241[.]130[.]188:49312/i",
      "pattern": "[url:value = 'http://122.241.130.188:49312/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:50:13Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "mirai"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c7d22850-ee50-598f-9a80-a828d789f48f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://27[.]202[.]29[.]147:44187/i",
      "pattern": "[url:value = 'http://27.202.29.147:44187/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:50:11Z",
      "confidence": 80,
      "labels": [
        "32-bit",
        "Mozi",
        "elf",
        "malware",
        "malware_download",
        "mips"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--17127e06-6462-5d2c-a3da-b426e6c077a1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/LuisOrtizUH/luisortizuh[.]github[.]io/refs/heads/main/starringly/io-luisortizuh-github-2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/LuisOrtizUH/luisortizuh.github.io/refs/heads/main/starringly/io-luisortizuh-github-2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:50:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--be0293da-93e2-5260-9014-5f4739ff0e70",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:5dcec3ca0e50cd3805c65667f06a8606723245897aafabd799c8ec596ac21d89",
      "pattern": "[file:hashes.'SHA-256' = '5dcec3ca0e50cd3805c65667f06a8606723245897aafabd799c8ec596ac21d89']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:47:47Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "macOS",
        "nova",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8a888a6b-5f0c-5b05-89e3-96d2ad0434f8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:kucabi[.]de",
      "pattern": "[domain-name:value = 'kucabi.de']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:47:16Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--90979372-e516-5745-8ed0-8e7338166a32",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:39f8a95c4fe72e7f067c543d1baf1f01c0298bada4cf140cfcf419fa16dc0800",
      "pattern": "[file:hashes.'SHA-256' = '39f8a95c4fe72e7f067c543d1baf1f01c0298bada4cf140cfcf419fa16dc0800']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:43:05Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "chant",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e61f3c0a-a37b-5ce4-af30-bd81baf7c5f4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:4f5d42cbe6de6f813c964134253f70fed3af0374b2884a69731298b15cbea0de",
      "pattern": "[file:hashes.'SHA-256' = '4f5d42cbe6de6f813c964134253f70fed3af0374b2884a69731298b15cbea0de']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:40:59Z",
      "confidence": 80,
      "labels": [
        "Mirai",
        "elf",
        "malware",
        "threatfox"
      ],
      "x_swiftioc_source": "malwarebazaar_recent,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--20eab74e-74a0-53cd-bfa1-5ef53be223b1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:remus[.]la",
      "pattern": "[domain-name:value = 'remus.la']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:40:17Z",
      "confidence": 80,
      "labels": [
        "Remus",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--19f985cf-8453-58e2-be14-d140eac04a3f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:client[.]remus[.]la",
      "pattern": "[domain-name:value = 'client.remus.la']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:40:17Z",
      "confidence": 80,
      "labels": [
        "Remus",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--77d39298-6c71-5dd4-9326-8f13293e338d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:6dd6142f4872c3861e851a1fccd2437d61e3c7ade6a2610b55bc4a97a59de389",
      "pattern": "[file:hashes.'SHA-256' = '6dd6142f4872c3861e851a1fccd2437d61e3c7ade6a2610b55bc4a97a59de389']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:40:11Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "macOS",
        "threatfox",
        "willow"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--94548df4-0d97-5798-8dd1-34fe36d9ca74",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:49b5a972429b8fa3f1eadc31dd88aa5fbba6cd26d713c2b6d715698ee9a70e43",
      "pattern": "[file:hashes.'SHA-256' = '49b5a972429b8fa3f1eadc31dd88aa5fbba6cd26d713c2b6d715698ee9a70e43']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:37:04Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "macOS",
        "quill",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dfa1fe2d-6c8b-5925-a1ae-3e038ae45871",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://cdn[.]discordapp[.]com/attachments/1473805619902419137/1563523085116907662/9e050badd9?ex=6addefd8&is=6adc9e58&hm=46bec539a52625c09717edb0384b8d9b10b1479720c5feb546678e2dd210f8ae&",
      "pattern": "[url:value = 'https://cdn.discordapp.com/attachments/1473805619902419137/1563523085116907662/9e050badd9?ex=6addefd8&is=6adc9e58&hm=46bec539a52625c09717edb0384b8d9b10b1479720c5feb546678e2dd210f8ae&']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:35:14Z",
      "confidence": 80,
      "labels": [
        "IRAHook",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c3b80d80-3680-57f4-b8f0-ad6de5609645",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hackingggbydaarknes/hackingggbydaarknes[.]github[.]io/refs/heads/main/fluotitanate/github-io-hackingggbydaarknes-1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hackingggbydaarknes/hackingggbydaarknes.github.io/refs/heads/main/fluotitanate/github-io-hackingggbydaarknes-1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:35:05Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a514cf73-4d9a-5a97-82a1-39e198de6df5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Murikas/aula-git-1-html/refs/heads/main/aula%2001/html_aula_git_1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Murikas/aula-git-1-html/refs/heads/main/aula%2001/html_aula_git_1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:35:05Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6dd6dd0e-bd82-5acd-8c27-cdab6a3186b6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/LucasJaider/projetoform1/refs/heads/main/Dytiscus/projetoform_1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/LucasJaider/projetoform1/refs/heads/main/Dytiscus/projetoform_1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:35:05Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0aa7e9d6-7ffe-5a14-ad92-2a2d0b7661d5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ikky-Ei/Revive-mySQL/refs/heads/main/Marc/my-Revive-SQL-v1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ikky-Ei/Revive-mySQL/refs/heads/main/Marc/my-Revive-SQL-v1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:35:05Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--22961be4-8cba-5186-93b5-02f82659ea21",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ElkholiefyM/elkholiefym[.]github[.]io/refs/heads/main/pathologist/github-elkholiefym-io-v3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ElkholiefyM/elkholiefym.github.io/refs/heads/main/pathologist/github-elkholiefym-io-v3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:35:05Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1d64b7d2-fb16-5dc9-ac13-f3c9c019ddd8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sayed116/Sayed-basha/refs/heads/main/phalangidean/Sayed-basha-v3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sayed116/Sayed-basha/refs/heads/main/phalangidean/Sayed-basha-v3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:35:04Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--552bff51-e96a-5937-877d-3da821d2eaa0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ruksol/EventAddis/refs/heads/main/frontend/src/slices/Event_Addis_v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ruksol/EventAddis/refs/heads/main/frontend/src/slices/Event_Addis_v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:35:04Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--41f61fc7-78b2-56e5-a753-96cd3937fd6f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mustapha07022010/class-18/refs/heads/main/nonconsequence/class_3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mustapha07022010/class-18/refs/heads/main/nonconsequence/class_3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:35:04Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6e5f003c-32a4-5515-8bd6-655b2447d261",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/michaelhardyluthfi/challenge/refs/heads/master/node_modules/deep-extend/Software_Dipala[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/michaelhardyluthfi/challenge/refs/heads/master/node_modules/deep-extend/Software_Dipala.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:35:04Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0536c83b-6fa2-5f0e-a30f-b667a1d95eca",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/RafaEngineer/GildedRose/refs/heads/main/gnosiological/Rose-Gilded-v3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/RafaEngineer/GildedRose/refs/heads/main/gnosiological/Rose-Gilded-v3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:35:04Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--42f0c04e-706f-5681-a2da-12012d8c988e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Polarssj/flores[.]amarrilas/refs/heads/main/Dacrydium/amarrilas_flores_v2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Polarssj/flores.amarrilas/refs/heads/main/Dacrydium/amarrilas_flores_v2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:35:04Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3ba57f3d-ff27-5ed9-8231-30f302ea6728",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Okosa2/marvel-rivals-pro-tactics/refs/heads/branch/snobscat/marvel_pro_tactics_rivals_eggy[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Okosa2/marvel-rivals-pro-tactics/refs/heads/branch/snobscat/marvel_pro_tactics_rivals_eggy.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:35:04Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9d5fd951-7a27-5be2-b3ad-bfcaf0fa5fbb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/thatavarthi-raj/helloapp/refs/heads/main/src/test/Software-v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/thatavarthi-raj/helloapp/refs/heads/main/src/test/Software-v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:35:03Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8168b675-82dc-545b-91aa-c90c929ef8a5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nabil34000/battlefield-waltz-advantage-suite/refs/heads/branch/anaesthetically/suite_waltz_advantage_battlefield_v3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nabil34000/battlefield-waltz-advantage-suite/refs/heads/branch/anaesthetically/suite_waltz_advantage_battlefield_v3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:35:03Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a4c796f1-6469-540d-ae64-905dd0a84d5b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/MR-NOBODY47/be-a-ball-classic-roblox-toolkit/refs/heads/branch/manipular/be-a-ball-classic-roblox-toolkit-v3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/MR-NOBODY47/be-a-ball-classic-roblox-toolkit/refs/heads/branch/manipular/be-a-ball-classic-roblox-toolkit-v3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:35:03Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cc16c419-12c4-5425-83f5-73c95af1409c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Clayuremir/clayuremir[.]github[.]io/refs/heads/main/coplaintiff/github-io-clayuremir-3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Clayuremir/clayuremir.github.io/refs/heads/main/coplaintiff/github-io-clayuremir-3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:35:03Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0b7f7cfb-2c75-51a5-8ae7-92e0bd62fc50",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ibrahmxsyr/webxsyr/refs/heads/main/anticapitalism/Software-2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ibrahmxsyr/webxsyr/refs/heads/main/anticapitalism/Software-2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:35:02Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f3f623fc-ffc6-534e-bf44-9c3e80e2ffc0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/carlos132nx/carlos132nx[.]github[.]io/refs/heads/main/undrossy/io_nx_github_carlos_v2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/carlos132nx/carlos132nx.github.io/refs/heads/main/undrossy/io_nx_github_carlos_v2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:35:02Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d43d9712-8d2a-5f13-aad3-e71d63516341",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/RafaEngineer/RafaEngineer[.]github[.]io/refs/heads/master/js/io-Rafa-Engineer-github-v2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/RafaEngineer/RafaEngineer.github.io/refs/heads/master/js/io-Rafa-Engineer-github-v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:35:02Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7a1e1621-ee9a-5b7c-82f3-09dc58002f4d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/salah15cl/classico/refs/heads/main/milligramage/Software-v2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/salah15cl/classico/refs/heads/main/milligramage/Software-v2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:35:01Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6c9860a0-ee10-5fd2-8df3-e256a098760f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rrraade/rrraade[.]github[.]io/refs/heads/main/infrabestial/io-github-rrraade-1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rrraade/rrraade.github.io/refs/heads/main/infrabestial/io-github-rrraade-1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:35:01Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fb4f7ba4-5f42-5180-b231-8d648cb6da38",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/PedroCouto839/pedrocouto839[.]github[.]io/refs/heads/main/petrosquamous/github-io-pedrocouto-v2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/PedroCouto839/pedrocouto839.github.io/refs/heads/main/petrosquamous/github-io-pedrocouto-v2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:35:01Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--94d145fe-c753-5dd0-852a-72cc995ab4dd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Clayuremir/Clayuremir-balance-it-app-main/refs/heads/main/public/it_Clayuremir_main_balance_app_v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Clayuremir/Clayuremir-balance-it-app-main/refs/heads/main/public/it_Clayuremir_main_balance_app_v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:35:01Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--822e8f15-8903-565f-8b4c-e385ec4dfd42",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kyle122497/kyle122497[.]github[.]io/refs/heads/main/velleity/github-io-kyle-1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kyle122497/kyle122497.github.io/refs/heads/main/velleity/github-io-kyle-1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:35:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a28baf9f-3f8e-5e27-a9d1-7c982204011d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/PedroCouto839/Couto/refs/heads/main/yellowberry/Software-v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/PedroCouto839/Couto/refs/heads/main/yellowberry/Software-v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:35:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6fe5980f-a254-5f13-b9a0-e82b5d0d9987",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AzzaFizatiaina/First-Website/refs/heads/main/js/First_Website_v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AzzaFizatiaina/First-Website/refs/heads/main/js/First_Website_v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:35:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--74e648be-e7c6-5747-9849-dc45474e0229",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ystherr/ystherr[.]github[.]io/refs/heads/main/semaphorical/github-io-ystherr-v1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ystherr/ystherr.github.io/refs/heads/main/semaphorical/github-io-ystherr-v1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9dedec99-67d3-579b-a2fd-c582009962dc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/salamlol/salamlol[.]github[.]io/refs/heads/main/efficacious/salamlol_github_io_2[.]1-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/salamlol/salamlol.github.io/refs/heads/main/efficacious/salamlol_github_io_2.1-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--15bdcd61-7106-5c66-8912-2ee2bb7208f0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ahmedehab706/TASK-1-INFORMATION-SECURITY/refs/heads/main/task1[.]cpp%2BGUI_%28Qt%29/Crack_Password/INFORMATIO-SECURITY-TAS-2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ahmedehab706/TASK-1-INFORMATION-SECURITY/refs/heads/main/task1.cpp%2BGUI_%28Qt%29/Crack_Password/INFORMATIO-SECURITY-TAS-2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--712c0ca5-227d-59e0-ba54-5fe2e026dbe6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mpathroliya/mpathroliya[.]github[.]io/refs/heads/main/perceptionism/mpathroliya_io_github_v1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mpathroliya/mpathroliya.github.io/refs/heads/main/perceptionism/mpathroliya_io_github_v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fdc33f3a-da1f-5f29-8ea4-c9b63e39b968",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SAMMY-D02/sammy-d02[.]github[.]io/refs/heads/main/fellingbird/sammy-io-github-d-v2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SAMMY-D02/sammy-d02.github.io/refs/heads/main/fellingbird/sammy-io-github-d-v2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--90cc5696-7494-5f8b-b570-294b17975de9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/NyatakuIbnuRosada/SMART-FARMING-AKTARA/refs/heads/main/Vorticella/SMAR-FARMIN-AKTARA-v2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/NyatakuIbnuRosada/SMART-FARMING-AKTARA/refs/heads/main/Vorticella/SMAR-FARMIN-AKTARA-v2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6bf44fb4-f5b5-549c-8aef-341841cb0c32",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AriArien/ariarien[.]github[.]io/refs/heads/main/Santolina/io_github_ariarien_3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AriArien/ariarien.github.io/refs/heads/main/Santolina/io_github_ariarien_3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--27a3ccab-1bb9-5b00-a689-3ae68ac50509",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/1342Drumbum/RobloxLogin/refs/heads/main/mechanicalism/Roblox_Login_Matrigan[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/1342Drumbum/RobloxLogin/refs/heads/main/mechanicalism/Roblox_Login_Matrigan.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:58Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fd9fdac1-e92f-5dce-a261-fc694592e00e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ibrahmxsyr/IB/refs/heads/main/femorotibial/Software_v3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ibrahmxsyr/IB/refs/heads/main/femorotibial/Software_v3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--300b61c6-05d3-5121-a346-bc3ad59339b5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/LucasJaider/projeto-mobile/refs/heads/aula27/ProjetoMobile/android/app/src/main/java/com/awesomeproject/mobile-projeto-v1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/LucasJaider/projeto-mobile/refs/heads/aula27/ProjetoMobile/android/app/src/main/java/com/awesomeproject/mobile-projeto-v1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bc4d782d-8714-5ee6-898d-c958eaa2b52c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ikky-Ei/Revive-mySQL/refs/heads/main/Marc/my-SQL-Revive-2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ikky-Ei/Revive-mySQL/refs/heads/main/Marc/my-SQL-Revive-2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--13a56c04-fde3-5f90-b417-c58af1e6e570",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Bijay7330/ACENDA/refs/heads/main/CSS/See%20More%20hover/Software_girlish[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Bijay7330/ACENDA/refs/heads/main/CSS/See%20More%20hover/Software_girlish.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:57Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--08816b12-6924-5474-b774-71a680375458",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/girish2723/MM_13september_app/refs/heads/main/xiphisternum/M-september-app-3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/girish2723/MM_13september_app/refs/heads/main/xiphisternum/M-september-app-3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a46c2e80-78c8-5117-96e1-a65c0c08cf8a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ahmedehab706/task-2-information-security/refs/heads/main/numbingly/task-2-information-security_3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ahmedehab706/task-2-information-security/refs/heads/main/numbingly/task-2-information-security_3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--657123d6-4570-5585-afd9-63d945c3b294",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/offitial-developer/offitial-developer[.]github[.]io/refs/heads/main/heavenless/github_offitial_developer_io_v3[.]2-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/offitial-developer/offitial-developer.github.io/refs/heads/main/heavenless/github_offitial_developer_io_v3.2-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--489be828-d4b5-5de6-a904-d28c63a493c6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/harsh101720/harsh101720[.]github[.]io/refs/heads/main/unsympathizingly/github_harsh_io_v2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/harsh101720/harsh101720.github.io/refs/heads/main/unsympathizingly/github_harsh_io_v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--00cc1d52-2b0c-5a47-bbc5-592334ee1aaf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Joy-Marchattiwar/hello-world-maven/refs/heads/main/src/main/java/world-maven-hello-v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Joy-Marchattiwar/hello-world-maven/refs/heads/main/src/main/java/world-maven-hello-v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--24941388-152c-589a-ae2b-8c589f43a1bd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Idkunku/the-alters-advantage-tools/refs/heads/branch/roomth/alters-advantage-the-tools-v1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Idkunku/the-alters-advantage-tools/refs/heads/branch/roomth/alters-advantage-the-tools-v1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6cadfbbd-a625-5efe-96a7-8f9f4e84d354",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/alexander123138/alexander123138[.]github[.]io/refs/heads/main/pseudovary/github_io_alexander_v3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/alexander123138/alexander123138.github.io/refs/heads/main/pseudovary/github_io_alexander_v3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:54Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--80ce3334-bfbf-5aba-afcb-f3ea13295bcb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Bijay7330/ACENDA/refs/heads/main/01_Sigma%20Website/Image/Header/Software_1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Bijay7330/ACENDA/refs/heads/main/01_Sigma%20Website/Image/Header/Software_1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:54Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--80b78dc7-eeb1-5305-9eb7-5ec6b411b2b3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ahmedehab706/information-security-task-3/refs/heads/main/task3[.]sh/information-security-task-3_v2[.]2-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ahmedehab706/information-security-task-3/refs/heads/main/task3.sh/information-security-task-3_v2.2-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:54Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9509d514-1305-50fd-ac65-0adc6fb10fa6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/1342Drumbum/my-flask-app/refs/heads/master/queenfish/flask-my-app-1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/1342Drumbum/my-flask-app/refs/heads/master/queenfish/flask-my-app-1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:54Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e78c3b50-fca4-5a62-a365-0f85e29b8b62",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mpathroliya/DS/refs/heads/master/struttingly/Software_v1[.]1-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mpathroliya/DS/refs/heads/master/struttingly/Software_v1.1-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:53Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--73f39c88-79bb-51cf-84f6-0ce00bc2b809",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://27[.]204[.]193[.]8:33514/i",
      "pattern": "[url:value = 'http://27.204.193.8:33514/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:53Z",
      "confidence": 80,
      "labels": [
        "Mozi",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f03e5504-4530-5b43-84d8-170264e72015",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rahulkushwaha1510/rahulkushwaha1510[.]github[.]io/refs/heads/main/gyratory/io-github-rahulkushwaha-v3[.]7-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rahulkushwaha1510/rahulkushwaha1510.github.io/refs/heads/main/gyratory/io-github-rahulkushwaha-v3.7-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:52Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0106857f-c5e6-5f48-a9ee-5b81f39c4b72",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/peterodhiamboo/django-apps/refs/heads/master/lib/python3[.]5/site-packages/setuptools/extern/__pycache__/django-apps-1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/peterodhiamboo/django-apps/refs/heads/master/lib/python3.5/site-packages/setuptools/extern/__pycache__/django-apps-1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:52Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--772b36be-1b15-5ef5-ac3e-db0e1afc93f1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/WaqarDev69/Chai-Code-Problems/refs/heads/main/Joke-Generator/Problems_Chai_Code_2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/WaqarDev69/Chai-Code-Problems/refs/heads/main/Joke-Generator/Problems_Chai_Code_2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:52Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--59544ce3-20f8-52b5-9e93-a2f6a3f26fee",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/DrakeCarvajal/Cosas-de-AWS/refs/heads/main/backupERP/de_Cosas_AWS_2[.]3-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/DrakeCarvajal/Cosas-de-AWS/refs/heads/main/backupERP/de_Cosas_AWS_2.3-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:52Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0bf5fc10-8198-5c24-97e7-742e59861eb0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/saadkhan1150/tictactoe/refs/heads/main/upanishadic/Software-3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/saadkhan1150/tictactoe/refs/heads/main/upanishadic/Software-3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0666736f-fda1-5b1f-9f24-21bfd2547bcc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/alexander123138/alexander123138[.]github[.]io/refs/heads/main/pseudovary/github-alexander-io-1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/alexander123138/alexander123138.github.io/refs/heads/main/pseudovary/github-alexander-io-1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6340d9ad-1cce-51fe-ad3b-0f6883d45b03",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Polarssj/amarrillas[.]flores/refs/heads/main/sphingometer/flores_amarrillas_3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Polarssj/amarrillas.flores/refs/heads/main/sphingometer/flores_amarrillas_3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b825e2b2-44de-56b2-bdfb-c8d2348fcab1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Arla02/Condi/refs/heads/main/startlingly/Software-v2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Arla02/Condi/refs/heads/main/startlingly/Software-v2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d80d42ea-c1b4-51bd-9f53-17ae84b0a432",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ahmedehab706/assignment1-DATA-INTEGRITY/refs/heads/main/ass1%20dataintegrity/Data-Integrity-and-Authentication-master/task1[.]js/models/assignment1-DATA-INTEGRITY-v1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ahmedehab706/assignment1-DATA-INTEGRITY/refs/heads/main/ass1%20dataintegrity/Data-Integrity-and-Authentication-master/task1.js/models/assignment1-DATA-INTEGRITY-v1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--66629e6d-99af-5da9-a042-f1e658759dbc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mpathroliya/museo/refs/heads/master/pallette/Software_v3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mpathroliya/museo/refs/heads/master/pallette/Software_v3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8e9dcd9e-e808-5395-a3fa-a56aef64e65f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kumarsreenivas051/ML-Workshop/refs/heads/master/Day2/Workshop_M_1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kumarsreenivas051/ML-Workshop/refs/heads/master/Day2/Workshop_M_1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a7ce6e43-52c8-517a-8cc6-eb699d4f92eb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SSSSSLYBORED/magic-iso-maker-unlock-guide/refs/heads/branch/revolutionize/guide-unlock-maker-magic-iso-1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SSSSSLYBORED/magic-iso-maker-unlock-guide/refs/heads/branch/revolutionize/guide-unlock-maker-magic-iso-1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b670cf16-b129-598d-a364-10ad08731bcf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/PedroCouto839/Couto-Flix/refs/heads/main/canalside/Flix_Couto_v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/PedroCouto839/Couto-Flix/refs/heads/main/canalside/Flix_Couto_v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a867f412-6d87-5a9d-b24c-310f44058853",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Maxu46/maxu46[.]github[.]io/refs/heads/main/dreamwhile/io-github-maxu-v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Maxu46/maxu46.github.io/refs/heads/main/dreamwhile/io-github-maxu-v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--48c37b47-f0b3-58b8-8fb8-f33acc741283",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Bijay7330/bijay7330[.]github[.]io/refs/heads/main/periorchitis/io_bijay_github_v2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Bijay7330/bijay7330.github.io/refs/heads/main/periorchitis/io_bijay_github_v2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:50Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a146db2d-3e38-52a0-959f-acdc814e3c10",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Jarrenstyle/Stackerz/refs/heads/master/Stackers/Assets/Scenes/Software_3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Jarrenstyle/Stackerz/refs/heads/master/Stackers/Assets/Scenes/Software_3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:49Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--929e0e0b-0a26-5764-a2e0-aed4c835d545",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Clayuremir/clayuremir[.]github[.]io/refs/heads/main/coplaintiff/clayuremir-github-io-v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Clayuremir/clayuremir.github.io/refs/heads/main/coplaintiff/clayuremir-github-io-v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:49Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b7c23f65-d91f-587f-9d8a-e346d3fcf4ca",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kikiuuw/kikiuuw[.]github[.]io/refs/heads/main/fovea/github_io_kikiuuw_1[.]0-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kikiuuw/kikiuuw.github.io/refs/heads/main/fovea/github_io_kikiuuw_1.0-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3cc72396-7248-5005-8139-251fb2ccd447",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Polarssj/carta/refs/heads/main/jimberjawed/Software_v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Polarssj/carta/refs/heads/main/jimberjawed/Software_v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5b355ce2-c26e-5ae8-8844-2247adb29161",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/PedroCouto839/Meu-Site/refs/heads/main/ortstein/Meu-Site-1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/PedroCouto839/Meu-Site/refs/heads/main/ortstein/Meu-Site-1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--46a0eaa8-1ff3-5b1a-aeee-26de16ded8b9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Dhanush-TD/sample/refs/heads/main/archjockey/Software_v1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Dhanush-TD/sample/refs/heads/main/archjockey/Software_v1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--109d2065-b76c-5e5c-a531-6f6881db69a5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ahmedehab706/TASK-1-INFORMATION-SECURITY/refs/heads/main/task1[.]cpp%2BGUI_%28Qt%29/Crack_Password/build/Desktop_Qt_6_10_0_MinGW_64_bit-Debug/TASK-1-INFORMATION-SECURITY-v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ahmedehab706/TASK-1-INFORMATION-SECURITY/refs/heads/main/task1.cpp%2BGUI_%28Qt%29/Crack_Password/build/Desktop_Qt_6_10_0_MinGW_64_bit-Debug/TASK-1-INFORMATION-SECURITY-v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--01c30c85-a8eb-57be-96a4-27e53523b5f4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ahmedehab706/DATAINTEGRITY-BONUS-/refs/heads/main/epitomic/DATAINTEGRIT-BONU-v3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ahmedehab706/DATAINTEGRITY-BONUS-/refs/heads/main/epitomic/DATAINTEGRIT-BONU-v3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--613db5db-166d-566d-b495-f5b82d34d4a7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Maxu46/maxu46[.]github[.]io/refs/heads/main/dreamwhile/github_maxu_io_3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Maxu46/maxu46.github.io/refs/heads/main/dreamwhile/github_maxu_io_3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e05018b4-d705-56c2-8026-b127e14549ba",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/bakrirazak/bakrirazak[.]github[.]io/refs/heads/main/bonspiel/io_github_bakrirazak_1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/bakrirazak/bakrirazak.github.io/refs/heads/main/bonspiel/io_github_bakrirazak_1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2b45adbf-49a3-5f5c-874b-d1e8f9895891",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ringopii/bgmeafetcher/refs/heads/main/database/migrations/Software-v1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ringopii/bgmeafetcher/refs/heads/main/database/migrations/Software-v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fffcc24c-4635-5e57-a65e-bb4480c860f4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/PenPa77/Unity_practica1/refs/heads/main/Assets/StarterAssets/ThirdPersonController/Character/Models/practica-Unity-v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/PenPa77/Unity_practica1/refs/heads/main/Assets/StarterAssets/ThirdPersonController/Character/Models/practica-Unity-v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0f776532-3de9-5246-9050-ce2576e68d46",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/1342Drumbum/my-flask-app/refs/heads/master/queenfish/my-flask-app_v1[.]3-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/1342Drumbum/my-flask-app/refs/heads/master/queenfish/my-flask-app_v1.3-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--286e181b-5ec3-580f-9222-085633c08187",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/RafaEngineer/React_Firebase_Auth_Tutorial/refs/heads/master/hatpin/React_Firebase_Auth_Tutorial[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/RafaEngineer/React_Firebase_Auth_Tutorial/refs/heads/master/hatpin/React_Firebase_Auth_Tutorial.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--420aaf65-af0b-543d-aa7a-dc8dab46838e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AzzaFizatiaina/azzafizatiaina[.]github[.]io/refs/heads/main/karela/io_azzafizatiaina_github_secundation[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AzzaFizatiaina/azzafizatiaina.github.io/refs/heads/main/karela/io_azzafizatiaina_github_secundation.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--055b1ecd-9749-55db-ba4d-0b7099a9433f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AkashnilRecovered/Text-Formatting-Crash-Course/refs/heads/main/unleafed/Course_Text_Crash_Formatting_2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AkashnilRecovered/Text-Formatting-Crash-Course/refs/heads/main/unleafed/Course_Text_Crash_Formatting_2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--59e15e34-cefd-53bd-ab03-cf9bd97f95d1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rijackkson/Blog-farol-Assessoria/refs/heads/main/client/src/farol-Blog-Assessoria-v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rijackkson/Blog-farol-Assessoria/refs/heads/main/client/src/farol-Blog-Assessoria-v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e4fc865a-7391-5986-9876-73180cfe6c9c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mpathroliya/spring_DBMS/refs/heads/master/dactyliographer/spring-DBMS-v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mpathroliya/spring_DBMS/refs/heads/master/dactyliographer/spring-DBMS-v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cee50a12-3492-5657-8794-1d0e2b17fd86",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hwang-03/flutter_app_solve/refs/heads/main/android/app/src/main/res/mipmap-xxxhdpi/solve-flutter-app-3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hwang-03/flutter_app_solve/refs/heads/main/android/app/src/main/res/mipmap-xxxhdpi/solve-flutter-app-3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--00be2767-2e22-5d2d-9fd3-1dd07a01789d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/debugerstv/debugerstv[.]github[.]io/refs/heads/main/maha/io_github_debugerstv_v3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/debugerstv/debugerstv.github.io/refs/heads/main/maha/io_github_debugerstv_v3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--487b2929-00e2-5f92-86e4-642df61f7601",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Kiw56s/kiw56s[.]github[.]io/refs/heads/main/uncompatible/kiw_github_s_io_2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Kiw56s/kiw56s.github.io/refs/heads/main/uncompatible/kiw_github_s_io_2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0f6213e1-9d37-5147-9e4a-e0fd418aa5ac",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rrraade/rrraade[.]github[.]io/refs/heads/main/infrabestial/rrraade-github-io-v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rrraade/rrraade.github.io/refs/heads/main/infrabestial/rrraade-github-io-v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:43Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9dff714a-c02b-536e-b92b-a5d559e46918",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/keplerking100/keplerking100[.]github[.]io/refs/heads/main/serious/keplerking-io-github-v2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/keplerking100/keplerking100.github.io/refs/heads/main/serious/keplerking-io-github-v2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:43Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--693e16bc-fef0-5193-aedd-bf14007761b0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/DeepZatakiya/FirstAPI/refs/heads/main/vulpinism/API-First-3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/DeepZatakiya/FirstAPI/refs/heads/main/vulpinism/API-First-3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--251e144a-91fb-5cfa-b092-38cbad211ff7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Clayuremir/Clayuremir-balance-it-app-main/refs/heads/main/src/pages/main-balance-it-Clayuremir-app-3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Clayuremir/Clayuremir-balance-it-app-main/refs/heads/main/src/pages/main-balance-it-Clayuremir-app-3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--96ef2beb-f6a6-54b2-97df-138bf48e8252",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Bijay7330/bijay7330[.]github[.]io/refs/heads/main/periorchitis/github_bijay_io_2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Bijay7330/bijay7330.github.io/refs/heads/main/periorchitis/github_bijay_io_2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:42Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--40028fab-2e7d-5755-b23b-038bb7bb2d89",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/saadkhan1150/saadkhan1150[.]github[.]io/refs/heads/main/vexation/saadkhan_github_io_v3[.]4-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/saadkhan1150/saadkhan1150.github.io/refs/heads/main/vexation/saadkhan_github_io_v3.4-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:41Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e1ba1da4-a4e6-57cc-8842-44d511408e06",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mpathroliya/spring_DBMS/refs/heads/master/dactyliographer/spring_DBMS_3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mpathroliya/spring_DBMS/refs/heads/master/dactyliographer/spring_DBMS_3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--54773d89-39b5-5932-95a8-fda35c100d82",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mpathroliya/mpathroliya[.]github[.]io/refs/heads/main/perceptionism/io_github_mpathroliya_v3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mpathroliya/mpathroliya.github.io/refs/heads/main/perceptionism/io_github_mpathroliya_v3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--703e182b-019f-5a68-8822-a59fe5b162cb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/WaqarDev69/Javascript-Lab/refs/heads/main/Hiest%20Game/Javascript-Lab-1[.]7-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/WaqarDev69/Javascript-Lab/refs/heads/main/Hiest%20Game/Javascript-Lab-1.7-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--20b9a4cc-885b-5a0a-9ac6-faed71d015c7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ringopii/ecommerce-site/refs/heads/main/public/admin/assets/plugins/iconfonts/feather/fonts/feather/site-ecommerce-v1[.]7-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ringopii/ecommerce-site/refs/heads/main/public/admin/assets/plugins/iconfonts/feather/fonts/feather/site-ecommerce-v1.7-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b1c29001-9b54-54c2-9f0b-6479e6759fc1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/LucasJaider/projeto-mobile/refs/heads/aula27/ProjetoMobile/src/projeto-mobile-2[.]7-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/LucasJaider/projeto-mobile/refs/heads/aula27/ProjetoMobile/src/projeto-mobile-2.7-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:40Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3d24a9ad-e100-563e-b866-02011d9bde87",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Younishassan123/Younishassan123/refs/heads/main/roundly/Younishassan_3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Younishassan123/Younishassan123/refs/heads/main/roundly/Younishassan_3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e86d12aa-701e-5dd2-9aa9-aa21c760b798",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Kiruba99944/kiruba99944[.]github[.]io/refs/heads/main/regrater/github-io-kiruba-v2[.]4-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Kiruba99944/kiruba99944.github.io/refs/heads/main/regrater/github-io-kiruba-v2.4-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0f58dcb2-d845-53b1-839b-3eb5395a9438",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/DranoelBeatz808/DranoelBeatz808/refs/heads/main/pages/Beatz_Dranoel_3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/DranoelBeatz808/DranoelBeatz808/refs/heads/main/pages/Beatz_Dranoel_3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ae15d75f-6863-52b8-848e-84efdcda35bd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ahmedehab706/DATAINTEGRITY-BONUS-/refs/heads/main/epitomic/DATAINTEGRITY-BONUS-_3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ahmedehab706/DATAINTEGRITY-BONUS-/refs/heads/main/epitomic/DATAINTEGRITY-BONUS-_3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a651508f-f5ad-519a-8eef-7f556e9a0089",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kyle122497/kyle122497[.]github[.]io/refs/heads/main/velleity/kyle_io_github_3[.]2-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kyle122497/kyle122497.github.io/refs/heads/main/velleity/kyle_io_github_3.2-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7801925d-887d-544f-a972-e80cfd88c4cf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ksubham-dora2002/js-subham-session/refs/heads/main/Lipopoda/js-subham-session-v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ksubham-dora2002/js-subham-session/refs/heads/main/Lipopoda/js-subham-session-v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cddaa030-8424-5037-b168-4a4a84b739c4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AzzaFizatiaina/First-Website/refs/heads/main/videos/Website_First_v1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AzzaFizatiaina/First-Website/refs/heads/main/videos/Website_First_v1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--83f63e18-b99e-5538-84ca-3f3c921a5a79",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/salamlol/salamlol[.]github[.]io/refs/heads/main/efficacious/io_salamlol_github_2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/salamlol/salamlol.github.io/refs/heads/main/efficacious/io_salamlol_github_2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--174dda87-b77c-5d05-be40-e3607fd20029",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Polarssj/flowers[.]/refs/heads/main/sublegislature/Software-v2[.]7-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Polarssj/flowers./refs/heads/main/sublegislature/Software-v2.7-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b0d11900-163f-531b-b7dd-6d222e094e8a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Polarssj/flor[.][.]/refs/heads/main/outdrink/Software-v2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Polarssj/flor../refs/heads/main/outdrink/Software-v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--24fff257-6d7c-527f-9617-f2637231eeda",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Joy-Marchattiwar/citi-blog-pwa/refs/heads/main/js/citi_blog_pwa_v3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Joy-Marchattiwar/citi-blog-pwa/refs/heads/main/js/citi_blog_pwa_v3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6e5012dc-96e1-5ff0-9cac-2f9ac63fdd3e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/yeayraww24/oop_php_3a_12rpl12/refs/heads/master/spile/a_php_oop_rpl_v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/yeayraww24/oop_php_3a_12rpl12/refs/heads/master/spile/a_php_oop_rpl_v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5ee47fbb-c663-547b-9d5e-b3e221ea1aa3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/salah15cl/salah15cl[.]github[.]io/refs/heads/main/repullulative/io-salah-github-cl-v1[.]8-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/salah15cl/salah15cl.github.io/refs/heads/main/repullulative/io-salah-github-cl-v1.8-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b5d33f60-2c85-5d07-b933-df15f11e7af8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sagarsharma459/guessing_game_project/refs/heads/main/src/project-guessing-game-v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sagarsharma459/guessing_game_project/refs/heads/main/src/project-guessing-game-v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f57093c2-56fb-53d9-9056-f2c10991acaa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/haytam111234/midjourney-study-illustration-studio/refs/heads/branch/yell/midjourney-study-illustration-studio-3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/haytam111234/midjourney-study-illustration-studio/refs/heads/branch/yell/midjourney-study-illustration-studio-3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dc9b22bf-2303-542d-b7fa-a02a6bde8c87",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SAMMY-D02/sammy-d02[.]github[.]io/refs/heads/main/fellingbird/io-sammy-d-github-3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SAMMY-D02/sammy-d02.github.io/refs/heads/main/fellingbird/io-sammy-d-github-3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ed7f7d84-cea2-53f4-ad50-1f794fd5aae6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Feezah/test-website/refs/heads/main/Newer%20Website/images/website-test-v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Feezah/test-website/refs/heads/main/Newer%20Website/images/website-test-v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a5ad176f-b9e2-513c-bf38-fa85fca708e3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AzzaFizatiaina/azzafizatiaina[.]github[.]io/refs/heads/main/karela/io_github_azzafizatiaina_1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AzzaFizatiaina/azzafizatiaina.github.io/refs/heads/main/karela/io_github_azzafizatiaina_1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ad08e6f7-1b48-59f9-9d8d-fd473990c19b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/michaelhardyluthfi/function-if/refs/heads/master/tormenting/function-if-v2[.]0-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/michaelhardyluthfi/function-if/refs/heads/master/tormenting/function-if-v2.0-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:35Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4517a303-26dd-504f-9a74-6e58b484df14",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ksubham-dora2002/js-subham-session/refs/heads/main/Lipopoda/session-js-subham-v3[.]8-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ksubham-dora2002/js-subham-session/refs/heads/main/Lipopoda/session-js-subham-v3.8-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:35Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1365161d-ed7f-517d-8dae-d832f236d1be",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/juanso123/juanso123[.]github[.]io/refs/heads/main/calapite/juanso_github_io_2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/juanso123/juanso123.github.io/refs/heads/main/calapite/juanso_github_io_2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e818fb60-0c6c-5e4e-a306-2ef727b3816d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hanyubin2007/hanyubin2007[.]github[.]io/refs/heads/main/flesher/github_hanyubin_io_cigaresque[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hanyubin2007/hanyubin2007.github.io/refs/heads/main/flesher/github_hanyubin_io_cigaresque.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--98b0e1d0-3d05-54c1-8412-2930ce471d11",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/carlos132nx/carlos132nx[.]github[.]io/refs/heads/main/undrossy/io-nx-carlos-github-v1[.]9-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/carlos132nx/carlos132nx.github.io/refs/heads/main/undrossy/io-nx-carlos-github-v1.9-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:33Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f5579168-fe93-52f5-9a2c-cc21ea0f7930",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sagarsharma459/guessing_game_project/refs/heads/main/remittance/guessing_game_project[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sagarsharma459/guessing_game_project/refs/heads/main/remittance/guessing_game_project.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9c312bbf-2c9b-51b8-b212-cbde01d3dd0b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rahulkushwaha1510/rahulkushwaha1510[.]github[.]io/refs/heads/main/gyratory/github_io_rahulkushwaha_3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rahulkushwaha1510/rahulkushwaha1510.github.io/refs/heads/main/gyratory/github_io_rahulkushwaha_3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--34b79dd3-4f3e-5094-8cf2-23ee7ee9ad7c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mpathroliya/museo/refs/heads/master/pallette/Software-v1[.]8-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mpathroliya/museo/refs/heads/master/pallette/Software-v1.8-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--89fc5ec2-2c20-5821-8463-b86082caf7dd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/michaelhardyluthfi/function-if/refs/heads/master/tormenting/if_function_v1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/michaelhardyluthfi/function-if/refs/heads/master/tormenting/if_function_v1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8a259982-5b39-5b61-a5a3-4c5d62db027d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Younishassan123/999/refs/heads/main/stimulability/Software-v1[.]0-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Younishassan123/999/refs/heads/main/stimulability/Software-v1.0-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eb22ae73-553b-531c-a4e9-ca3049130a51",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Garnel-Diffo/Real-Time-Facial-Recognition-and-Automatic-attendance-list/refs/heads/main/src/components/ui/list-Recognition-Time-Automatic-Real-Facial-attendance-and-1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Garnel-Diffo/Real-Time-Facial-Recognition-and-Automatic-attendance-list/refs/heads/main/src/components/ui/list-Recognition-Time-Automatic-Real-Facial-attendance-and-1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cda40a9d-6c68-579e-a91c-10bb66b6fe96",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nishantsunuwar/Instagram-clone/refs/heads/master/instaclone/user/static/js/clone-Instagram-2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nishantsunuwar/Instagram-clone/refs/heads/master/instaclone/user/static/js/clone-Instagram-2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--128e5084-9f40-5e0c-901b-02167fddaae1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/dextercool/billiwall/refs/heads/master/japanned/Software-1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/dextercool/billiwall/refs/heads/master/japanned/Software-1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6b7f715b-0bb8-5d72-b03a-fa5e2d30cccf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/RafaEngineer/FrontAquila/refs/heads/master/src/contexts/Aquila_Front_3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/RafaEngineer/FrontAquila/refs/heads/master/src/contexts/Aquila_Front_3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f9bc24a2-d390-50cb-ac8c-324e806153b8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rdnrhm92/rdnrhm92[.]github[.]io/refs/heads/main/semipyritic/io-github-rdnrhm-v2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rdnrhm92/rdnrhm92.github.io/refs/heads/main/semipyritic/io-github-rdnrhm-v2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b1d6e14d-7ca7-5f6a-a1c1-54e7553f11c4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/DrakeCarvajal/Cosas-de-AWS/refs/heads/main/backupERP/Cosas-de-AWS_1[.]2-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/DrakeCarvajal/Cosas-de-AWS/refs/heads/main/backupERP/Cosas-de-AWS_1.2-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d6292220-8016-5396-8877-a42d4053e66b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Polarssj/flores-para-mi-amor/refs/heads/main/Js/mi_flores_amor_para_sulphur[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Polarssj/flores-para-mi-amor/refs/heads/main/Js/mi_flores_amor_para_sulphur.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1634d76f-33db-5aa6-934d-9cf8bc7f03d0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Kiruba99944/kiruba99944[.]github[.]io/refs/heads/main/regrater/kiruba-io-github-2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Kiruba99944/kiruba99944.github.io/refs/heads/main/regrater/kiruba-io-github-2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--94add9d1-854a-516d-a1e8-5ed544ae70d6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Arla02/Condi/refs/heads/main/startlingly/Software_v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Arla02/Condi/refs/heads/main/startlingly/Software_v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5d25a6b7-ddaf-50f0-98f4-8d9c324526cf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/offitial-developer/offitial-developer[.]github[.]io/refs/heads/main/heavenless/github_io_developer_offitial_v1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/offitial-developer/offitial-developer.github.io/refs/heads/main/heavenless/github_io_developer_offitial_v1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8ed50019-d502-5e02-8237-adc2d1bd4e8b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/michaelhardyluthfi/luas-bentuk-1/refs/heads/main/utfangthef/bentuk-luas-2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/michaelhardyluthfi/luas-bentuk-1/refs/heads/main/utfangthef/bentuk-luas-2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a49d4b4a-d4ff-50d2-b7e7-88a3a746827e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/leviuszaur/leviuszaur[.]github[.]io/refs/heads/main/crestmoreite/github_io_leviuszaur_3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/leviuszaur/leviuszaur.github.io/refs/heads/main/crestmoreite/github_io_leviuszaur_3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--13fc3422-d2ae-5428-ba80-05c10c6796ea",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/haytam111234/midjourney-study-illustration-studio/refs/heads/branch/yell/midjourney-illustration-studio-study-2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/haytam111234/midjourney-study-illustration-studio/refs/heads/branch/yell/midjourney-illustration-studio-study-2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8b6310d8-4e9e-5da4-9930-67e0e52e9390",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/carlos132nx/carlos132nx[.]github[.]io/refs/heads/main/undrossy/io_carlos_github_nx_3[.]4-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/carlos132nx/carlos132nx.github.io/refs/heads/main/undrossy/io_carlos_github_nx_3.4-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b03a93d2-7cf7-5f6e-bc7d-39ecbd736bd8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/TranKhaHao1206/trankhahao1206[.]github[.]io/refs/heads/main/trinitrotoluene/trankhahao_io_github_1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/TranKhaHao1206/trankhahao1206.github.io/refs/heads/main/trinitrotoluene/trankhahao_io_github_1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a1ad0dd6-2f85-558c-9de5-a2a1de06e3c6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Feezah/test-website/refs/heads/main/Newer%20Website/fonts/test-website-v2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Feezah/test-website/refs/heads/main/Newer%20Website/fonts/test-website-v2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e55b775f-489e-519d-8c93-4776eec2f16b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Bijay7330/Quiz-GAme/refs/heads/main/beflag/Quiz_G_Ame_v1[.]0-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Bijay7330/Quiz-GAme/refs/heads/main/beflag/Quiz_G_Ame_v1.0-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4ae964f0-ccea-5eb6-b9a8-6da88218810b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Bijay7330/Quiz-GAme/refs/heads/main/beflag/Ame_Quiz_G_v1[.]6-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Bijay7330/Quiz-GAme/refs/heads/main/beflag/Ame_Quiz_G_v1.6-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6fa96738-65ed-5cb2-b06b-33c1cef27f28",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AzzaFizatiaina/Java-Mini-Project/refs/heads/main/finalproject/Mini-Java-Project-3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AzzaFizatiaina/Java-Mini-Project/refs/heads/main/finalproject/Mini-Java-Project-3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eda75d0f-df70-55ef-b786-9f64e79e255d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sagarsharma459/RAG-PIPELINE/refs/heads/main/keratoscope/RA_PIPELINE_2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sagarsharma459/RAG-PIPELINE/refs/heads/main/keratoscope/RA_PIPELINE_2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d305baaa-e1b0-5086-8a99-0b142d66eda6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/manishvedwal2609/manishvedwal2609[.]github[.]io/refs/heads/main/pocket/github-manishvedwal-io-v2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/manishvedwal2609/manishvedwal2609.github.io/refs/heads/main/pocket/github-manishvedwal-io-v2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6d6b35ac-215f-5cc4-9c03-bb46af5ced30",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hackingggbydaarknes/hackingggbydaarknes[.]github[.]io/refs/heads/main/fluotitanate/io_hackingggbydaarknes_github_v3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hackingggbydaarknes/hackingggbydaarknes.github.io/refs/heads/main/fluotitanate/io_hackingggbydaarknes_github_v3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cdc95b5e-cf50-5027-928e-f05c78cfbb28",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/carlos132nx/carlos132nx[.]github[.]io/refs/heads/main/undrossy/carlos_nx_github_io_abiuret[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/carlos132nx/carlos132nx.github.io/refs/heads/main/undrossy/carlos_nx_github_io_abiuret.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--998f800e-81a7-5ffb-b9f2-c7248e45cc8c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Amulya-Yadav/github-slideshow/refs/heads/master/node_modules/reveal[.]js/lib/slideshow_github_v1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Amulya-Yadav/github-slideshow/refs/heads/master/node_modules/reveal.js/lib/slideshow_github_v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3fdbdea1-e1eb-5561-ac76-c261f8732f12",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ahmedehab706/HUMAN-SECURITY-PROJECT-/refs/heads/main/footer/HUMAN-SECURITY-PROJECT-_1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ahmedehab706/HUMAN-SECURITY-PROJECT-/refs/heads/main/footer/HUMAN-SECURITY-PROJECT-_1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a8c0dc50-61f2-5caa-afe8-7fb7dd24f8a1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rahulkushwaha1510/rahulkushwaha1510[.]github[.]io/refs/heads/main/gyratory/rahulkushwaha_github_io_v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rahulkushwaha1510/rahulkushwaha1510.github.io/refs/heads/main/gyratory/rahulkushwaha_github_io_v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:25Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dc4087d4-f3f4-53b2-a0b4-8f4d2df3f4db",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/michaelhardyluthfi/michaelhardyluthfi[.]github[.]io/refs/heads/main/expandedly/io_michaelhardyluthfi_github_ischiopubic[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/michaelhardyluthfi/michaelhardyluthfi.github.io/refs/heads/main/expandedly/io_michaelhardyluthfi_github_ischiopubic.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:25Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9a338c87-b623-5625-a131-4e8194739b75",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ringopii/DIPAssignmentTemp/refs/heads/main/[.]idea/Temp-Assignment-DIP-1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ringopii/DIPAssignmentTemp/refs/heads/main/.idea/Temp-Assignment-DIP-1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:25Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--40aa63ab-fa45-5eb4-bc30-2ff7886df2fa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/PedroCouto839/pedrocouto839[.]github[.]io/refs/heads/main/petrosquamous/github_pedrocouto_io_1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/PedroCouto839/pedrocouto839.github.io/refs/heads/main/petrosquamous/github_pedrocouto_io_1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:25Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--872248c8-8cdc-54a5-ae2b-039ce346d3a9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/PedroCouto839/Meu-Site/refs/heads/main/ortstein/Site-Meu-v3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/PedroCouto839/Meu-Site/refs/heads/main/ortstein/Site-Meu-v3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:25Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c20bd4e7-633a-5287-b771-489ad5a9d47e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ruksol/World-Cities/refs/heads/main/WorldCities/obj/Cities-World-3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ruksol/World-Cities/refs/heads/main/WorldCities/obj/Cities-World-3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:24Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6921afc5-8ec6-5e1a-a9cd-ad5010a5cccd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/debugerstv/debugerstv[.]github[.]io/refs/heads/main/maha/io_github_debugerstv_1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/debugerstv/debugerstv.github.io/refs/heads/main/maha/io_github_debugerstv_1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:24Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--65bb427b-3419-5960-b8b7-e2ff8046e9ad",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Murikas/aula-git-1-html/refs/heads/main/aula%2001/git-aula-html-1[.]6-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Murikas/aula-git-1-html/refs/heads/main/aula%2001/git-aula-html-1.6-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:24Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7c3c86ac-744c-5a2d-b057-d4cf0fc3a993",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ahmedehab706/my-website/refs/heads/main/Camball/my-website-2[.]5-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ahmedehab706/my-website/refs/heads/main/Camball/my-website-2.5-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:24Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--64d1acd3-e3ec-5fac-a699-f1d543b35c40",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ahmed-Ghazal55/Chrome-Extension-Leads-Tracker/refs/heads/main/inaccordantly/Chrome-Leads-Extension-Tracker-v1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ahmed-Ghazal55/Chrome-Extension-Leads-Tracker/refs/heads/main/inaccordantly/Chrome-Leads-Extension-Tracker-v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:24Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ea13bbee-6947-55d2-9f9b-229cfc4bb3da",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AzzaFizatiaina/azzafizatiaina[.]github[.]io/refs/heads/main/karela/azzafizatiaina-io-github-v2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AzzaFizatiaina/azzafizatiaina.github.io/refs/heads/main/karela/azzafizatiaina-io-github-v2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:23Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--396236aa-057b-5a21-81e6-84227b6d8890",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sagarsharma459/OrderBot/refs/heads/main/unrepetitive/Bot_Order_v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sagarsharma459/OrderBot/refs/heads/main/unrepetitive/Bot_Order_v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b0147628-d8f2-5064-bf04-52dfc498711e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Polarssj/flores-para-mi-amorcito/refs/heads/main/flores/Js/flores-para-amorcito-mi-1[.]5-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Polarssj/flores-para-mi-amorcito/refs/heads/main/flores/Js/flores-para-amorcito-mi-1.5-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:22Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1a4220fe-41d1-5e82-9eaf-803b7f01164b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/leviuszaur/leviuszaur[.]github[.]io/refs/heads/main/crestmoreite/io_github_leviuszaur_v1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/leviuszaur/leviuszaur.github.io/refs/heads/main/crestmoreite/io_github_leviuszaur_v1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:21Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--00ef93e0-477f-5f49-902f-2f1ab8ec997b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/harsh101720/harsh101720[.]github[.]io/refs/heads/main/unsympathizingly/github_io_harsh_3[.]5-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/harsh101720/harsh101720.github.io/refs/heads/main/unsympathizingly/github_io_harsh_3.5-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:21Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6623ed4a-214f-5389-8af9-613a9df61fe1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/1342Drumbum/RobloxLogin/refs/heads/main/mechanicalism/RobloxLogin_v1[.]2-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/1342Drumbum/RobloxLogin/refs/heads/main/mechanicalism/RobloxLogin_v1.2-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:19Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7ae52ef8-bba2-54b1-894c-a7b177135074",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/manishvedwal2609/manishvedwal2609[.]github[.]io/refs/heads/main/pocket/manishvedwal_io_github_Cytospora[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/manishvedwal2609/manishvedwal2609.github.io/refs/heads/main/pocket/manishvedwal_io_github_Cytospora.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a125bbe3-9a0f-5347-8eba-2fe19457b27e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Anxopancho/anxopancho[.]github[.]io/refs/heads/main/euchromatin/github-io-anxopancho-v1[.]5-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Anxopancho/anxopancho.github.io/refs/heads/main/euchromatin/github-io-anxopancho-v1.5-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--85d3834a-87bf-590d-b176-c872c9c95cf0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/bakrirazak/bakrirazak[.]github[.]io/refs/heads/main/bonspiel/io-github-bakrirazak-v1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/bakrirazak/bakrirazak.github.io/refs/heads/main/bonspiel/io-github-bakrirazak-v1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ce407a2c-7816-53ec-b9e8-18d695e4faf0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/LuisOrtizUH/ExamenFinal/refs/heads/main/Vehiculos/Vehiculos/vendor/jquery/Examen_Final_v1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/LuisOrtizUH/ExamenFinal/refs/heads/main/Vehiculos/Vehiculos/vendor/jquery/Examen_Final_v1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d63cb881-837c-5af1-a6be-e0efda237961",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Dhanush-TD/Object_Detection_cmd/refs/heads/main/Drosera/Object_Detection_cmd[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Dhanush-TD/Object_Detection_cmd/refs/heads/main/Drosera/Object_Detection_cmd.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1e6e4f99-4308-525c-a23c-ecdd61ec7a3b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Benson0713/benson0713[.]github[.]io/refs/heads/main/unthinkable/github_benson_io_2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Benson0713/benson0713.github.io/refs/heads/main/unthinkable/github_benson_io_2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f391e25f-5b55-51ba-a19a-6c4b787ddc6e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AzzaFizatiaina/Java-Mini-Project/refs/heads/main/finalproject/Project-Java-Mini-v1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AzzaFizatiaina/Java-Mini-Project/refs/heads/main/finalproject/Project-Java-Mini-v1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d31a6d28-8ba9-53c8-b358-df5ae8dfb6d4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Arla02/arla02[.]github[.]io/refs/heads/main/brusher/arla_io_github_1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Arla02/arla02.github.io/refs/heads/main/brusher/arla_io_github_1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5ee3642e-f6bd-5eb7-8554-ecd305a65399",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/salah15cl/salah15cl[.]github[.]io/refs/heads/main/repullulative/cl_github_io_salah_v1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/salah15cl/salah15cl.github.io/refs/heads/main/repullulative/cl_github_io_salah_v1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--66a83e8c-dd1d-50a4-b681-d3daf46ef10b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/arrio3107/arrio3107[.]github[.]io/refs/heads/main/Latinian/github_arrio_io_v3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/arrio3107/arrio3107.github.io/refs/heads/main/Latinian/github_arrio_io_v3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2dc961f8-92d8-5e05-9f18-3b865c5a85a3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Raghul-676/BajajFinserv_project_LeaveItToUS/refs/heads/main/again/It-Leave-US-Finserv-To-Bajaj-project-v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Raghul-676/BajajFinserv_project_LeaveItToUS/refs/heads/main/again/It-Leave-US-Finserv-To-Bajaj-project-v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--771a50d5-bdcf-5662-841a-b0e08889cc87",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Okosa2/marvel-rivals-pro-tactics/refs/heads/branch/snobscat/marvel-rivals-pro-tactics-v3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Okosa2/marvel-rivals-pro-tactics/refs/heads/branch/snobscat/marvel-rivals-pro-tactics-v3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--442a6513-da20-5a5d-b583-a0ca8a0ea9d5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/NovaBiriseg/painel-seguros/refs/heads/main/[.]streamlit/seguros_painel_v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/NovaBiriseg/painel-seguros/refs/heads/main/.streamlit/seguros_painel_v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9173b248-e444-5af3-8e74-b96d037269a2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ItzToastie/EMAIL2_ClassicEMail/refs/heads/main/tuberculously/Mail_EMAI_Classic_E_vitriolizable[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ItzToastie/EMAIL2_ClassicEMail/refs/heads/main/tuberculously/Mail_EMAI_Classic_E_vitriolizable.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8672bff3-cee2-5458-b001-eb6f5cf21bc2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Eclipse69420/host/refs/heads/main/fetlow/Software-v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Eclipse69420/host/refs/heads/main/fetlow/Software-v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--75394c17-cbb1-5c2a-b184-a3afc3231fd0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AzzaFizatiaina/Simple-Bookmark-Website/refs/heads/main/lib/font-awesome/fonts/Website_Simple_Bookmark_v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AzzaFizatiaina/Simple-Bookmark-Website/refs/heads/main/lib/font-awesome/fonts/Website_Simple_Bookmark_v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--89bad0a7-6144-5d44-9a7f-d679eda54739",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/yeayraww24/Tugas_14_September/refs/heads/master/img/September_Tugas_3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/yeayraww24/Tugas_14_September/refs/heads/master/img/September_Tugas_3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--68d4e873-a010-5302-8a7a-0455fa5c42e5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/vikasoni12/vikasoni12/refs/heads/main/windbag/vikasoni-v1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/vikasoni12/vikasoni12/refs/heads/main/windbag/vikasoni-v1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6425456d-b24a-5a1c-a604-0c6365f732c6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ruksol/Competitive-Programming/refs/heads/main/pippy/Competitive-Programming-v2[.]8-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ruksol/Competitive-Programming/refs/heads/main/pippy/Competitive-Programming-v2.8-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e6fe9f92-106d-551a-a008-fddecb285c92",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hassansubhani397/Python_Projects/refs/heads/main/pentrite/Python_Projects_v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hassansubhani397/Python_Projects/refs/heads/main/pentrite/Python_Projects_v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a195899b-475e-5c53-a1c3-935665dfe222",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Yandatini/yandatini[.]github[.]io/refs/heads/main/floriscope/yandatini-io-github-v1[.]9-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Yandatini/yandatini.github.io/refs/heads/main/floriscope/yandatini-io-github-v1.9-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f17765c1-0d35-50ae-9f5f-9e2c7322d5bc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/PedroCouto839/Couto-Flix/refs/heads/main/canalside/Flix-Couto-2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/PedroCouto839/Couto-Flix/refs/heads/main/canalside/Flix-Couto-2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cb46ad88-76ae-5581-a269-d2a6a3f0f80e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/mpathroliya/DS/refs/heads/master/struttingly/Software-v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/mpathroliya/DS/refs/heads/master/struttingly/Software-v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--352a6d29-0faf-5b8b-ac40-a7e4131181c0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/michaelhardyluthfi/challenge/refs/heads/master/node_modules/destroy/Software-3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/michaelhardyluthfi/challenge/refs/heads/master/node_modules/destroy/Software-3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f66c3e16-8682-560b-8820-0ae0c3881f15",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Polarssj/flowers/refs/heads/main/flores_amarillas-main/docs/Software-v1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Polarssj/flowers/refs/heads/main/flores_amarillas-main/docs/Software-v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7c3d88b6-958b-5f5c-a451-5d68debffaa8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Polarssj/flor[.]s/refs/heads/main/flor/s-flor-v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Polarssj/flor.s/refs/heads/main/flor/s-flor-v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d03c0146-60ba-5e42-898a-1c34f3fef787",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/LuisOrtizUH/luisortizuh[.]github[.]io/refs/heads/main/starringly/io_github_luisortizuh_polyptoton[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/LuisOrtizUH/luisortizuh.github.io/refs/heads/main/starringly/io_github_luisortizuh_polyptoton.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--319315a6-de4c-55ce-af8f-f90aed3d1c71",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Feezah/My-First-Website/refs/heads/main/temporator/My-First-Website-v1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Feezah/My-First-Website/refs/heads/main/temporator/My-First-Website-v1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--98e6290f-4bd9-579f-a677-74e487aec7c5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Benson0713/benson0713[.]github[.]io/refs/heads/main/unthinkable/io_benson_github_v1[.]0-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Benson0713/benson0713.github.io/refs/heads/main/unthinkable/io_benson_github_v1.0-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f4f30970-e435-518e-a31f-c2b1b168d005",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/salah15cl/classico/refs/heads/main/milligramage/Software-3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/salah15cl/classico/refs/heads/main/milligramage/Software-3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d8eb9f8d-66ec-5625-9212-f8d3123d5fea",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ruksol/Interior-Designer/refs/heads/main/Artinskian/Designer_Interior_v3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ruksol/Interior-Designer/refs/heads/main/Artinskian/Designer_Interior_v3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--846cb55e-04e9-5637-a1b0-682e3e38f917",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Polarssj/flowersama/refs/heads/main/photology/Software_v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Polarssj/flowersama/refs/heads/main/photology/Software_v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f71d433f-650e-5099-b520-0983476af07f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/NafisMuntasir/CSE4302/refs/heads/main/Lab1/CS-1[.]4-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/NafisMuntasir/CSE4302/refs/heads/main/Lab1/CS-1.4-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3186f0dd-58dd-5c53-88dd-2df7078fc784",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ibrahmxsyr/SiegeSharpAim/refs/heads/main/odontologist/Aim_Sharp_Siege_v1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ibrahmxsyr/SiegeSharpAim/refs/heads/main/odontologist/Aim_Sharp_Siege_v1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--859b9e07-fddd-5c1c-8232-df75bd36a645",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Yandatini/yandatini[.]github[.]io/refs/heads/main/floriscope/yandatini_github_io_v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Yandatini/yandatini.github.io/refs/heads/main/floriscope/yandatini_github_io_v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f9fcd459-4e3b-5f5b-9324-f64abaad2b16",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Mohanad7770/LuminShade-v0[.]2-Patch/refs/heads/main/pseudochromesthesia/Shade-Lumin-Patch-v-v2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Mohanad7770/LuminShade-v0.2-Patch/refs/heads/main/pseudochromesthesia/Shade-Lumin-Patch-v-v2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3e32ffa4-eafa-5bf7-a179-06b960617e3d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hiharpin/portfolio/refs/heads/master/dist/js/Software_2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hiharpin/portfolio/refs/heads/master/dist/js/Software_2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:34:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d5fd671e-4a9f-50b6-b6fb-2fb910059f55",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:6cd76d867cf850f6c638840a199f34d30e16200c9f065dfcffad973aed173bc3",
      "pattern": "[file:hashes.'SHA-256' = '6cd76d867cf850f6c638840a199f34d30e16200c9f065dfcffad973aed173bc3']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:22:37Z",
      "confidence": 80,
      "labels": [
        "AokigaharaStealer",
        "malware",
        "threatfox"
      ],
      "x_swiftioc_source": "malwarebazaar_recent,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--12174a24-c5c0-59a8-b5fe-ab29150ef074",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://152[.]42[.]195[.]115:80/main_arm7",
      "pattern": "[url:value = 'http://152.42.195.115:80/main_arm7']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:41Z",
      "confidence": 80,
      "labels": [
        "IoT",
        "elf",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1cd0ffbf-e2d3-519b-bcd8-f45a55a1be22",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://124[.]29[.]194[.]78:51626/Mozi[.]m",
      "pattern": "[url:value = 'http://124.29.194.78:51626/Mozi.m']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:41Z",
      "confidence": 80,
      "labels": [
        "IoT",
        "Mozi",
        "elf",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d026fef6-6207-5978-8230-4a5a0627f97c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://152[.]42[.]195[.]115:80/main_mpsl",
      "pattern": "[url:value = 'http://152.42.195.115:80/main_mpsl']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:40Z",
      "confidence": 80,
      "labels": [
        "IoT",
        "elf",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fe7810c1-e4fa-5c71-91a6-76e58442ac90",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://152[.]42[.]195[.]115:80/main_mips",
      "pattern": "[url:value = 'http://152.42.195.115:80/main_mips']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:40Z",
      "confidence": 80,
      "labels": [
        "IoT",
        "elf",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f5995f14-ad1f-574c-85e8-1106bf5d8a52",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ayushgowda121/pec-datascience/refs/heads/main/infinite/datascience_pec_2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ayushgowda121/pec-datascience/refs/heads/main/infinite/datascience_pec_2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fc74fc3c-fab3-53dc-80b2-c3b8f4bfcb5a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ayushgowda121/git-prac/refs/heads/main/ammonium/git-prac-1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ayushgowda121/git-prac/refs/heads/main/ammonium/git-prac-1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--593d9126-09a4-5814-8ee2-6520af927d58",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AzzaFizatiaina/Flutter-Homestay/refs/heads/main/android/app/src/main/kotlin/com/Homestay_Flutter_3[.]6-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AzzaFizatiaina/Flutter-Homestay/refs/heads/main/android/app/src/main/kotlin/com/Homestay_Flutter_3.6-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--194473a4-a603-572e-a8a7-7c8f2e215fe8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/izMiles/Cite-Event-Registration-Final/refs/heads/main/CiteEventRegistration/controller/Registration_Final_Event_Cite_preadvocate[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/izMiles/Cite-Event-Registration-Final/refs/heads/main/CiteEventRegistration/controller/Registration_Final_Event_Cite_preadvocate.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6bdebe98-3887-5d3b-8cf7-9c2354555bd5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ansnmurp/weird-os/refs/heads/main/files/system/etc/weird_os_v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ansnmurp/weird-os/refs/heads/main/files/system/etc/weird_os_v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--528c2f4f-bbf7-5bd7-9134-2938b11113ba",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Raghul-676/raghul-676[.]github[.]io/refs/heads/main/phellogen/io_github_raghul_2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Raghul-676/raghul-676.github.io/refs/heads/main/phellogen/io_github_raghul_2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--72accaf5-9ef9-5478-b810-174809e421d4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Nsubarna8/pythonclass_8am/refs/heads/main/flane/pythonclass_am_v3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Nsubarna8/pythonclass_8am/refs/heads/main/flane/pythonclass_am_v3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a402e242-8c2a-554d-8e09-25b47bcc4b52",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Jay-Bosco/jay-bosco[.]github[.]io/refs/heads/main/Caesarean/github_bosco_jay_io_v1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Jay-Bosco/jay-bosco.github.io/refs/heads/main/Caesarean/github_bosco_jay_io_v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4bcc5427-1764-5efe-a084-c9e24ca8ad5d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Jaspreet1902/HokkoLife-FreebieHub/refs/heads/main/dipleurogenesis/Hub_Hokko_Life_Freebie_v1[.]6-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Jaspreet1902/HokkoLife-FreebieHub/refs/heads/main/dipleurogenesis/Hub_Hokko_Life_Freebie_v1.6-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ce73bae2-8c06-5aa1-a86f-20ca92a53d64",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AzzaFizatiaina/Soil-Moisture-Sensor-Project-IoT/refs/heads/main/sparkliness/Soil-Project-T-Moisture-Sensor-Io-v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AzzaFizatiaina/Soil-Moisture-Sensor-Project-IoT/refs/heads/main/sparkliness/Soil-Project-T-Moisture-Sensor-Io-v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8ae3deef-4739-57d5-b798-f8a4cf501a62",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AzzaFizatiaina/Soil-Moisture-Sensor-Project-IoT/refs/heads/main/sparkliness/Project_Soil_Sensor_Io_Moisture_T_3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AzzaFizatiaina/Soil-Moisture-Sensor-Project-IoT/refs/heads/main/sparkliness/Project_Soil_Sensor_Io_Moisture_T_3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--da76ac4a-134d-574d-a53e-080a4bf04ea1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AzzaFizatiaina/Simple-Bookmark-Website/refs/heads/main/lib/font-awesome/css/Bookmark_Website_Simple_3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AzzaFizatiaina/Simple-Bookmark-Website/refs/heads/main/lib/font-awesome/css/Bookmark_Website_Simple_3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1df83ed8-8ae4-5815-b2ae-40bfc72d86b8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AzzaFizatiaina/Flutter-Homestay/refs/heads/main/android/app/src/profile/Flutter-Homestay-v2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AzzaFizatiaina/Flutter-Homestay/refs/heads/main/android/app/src/profile/Flutter-Homestay-v2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--62dcfd86-7317-56cb-9e04-835e2df87d3c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AzzaFizatiaina/Flutter-Assesment/refs/heads/main/web/Flutter_Assesment_v3[.]5-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AzzaFizatiaina/Flutter-Assesment/refs/heads/main/web/Flutter_Assesment_v3.5-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e9074df7-d4b1-58e4-97e6-694a2c908bfc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Aldemirps/tva/refs/heads/main/xerodermia/Software_v1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Aldemirps/tva/refs/heads/main/xerodermia/Software_v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2e6ff56d-66c1-553a-a987-b0b2bd7db514",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/uriel963/uriel963[.]github[.]io/refs/heads/main/semidiapente/io_uriel_github_hymenic[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/uriel963/uriel963.github.io/refs/heads/main/semidiapente/io_uriel_github_hymenic.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d511cd13-2aa6-51e9-8e56-ed7a6610c4e6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/truongdohd103/DO-AN---XAY-DUNG-UNG-DUNG-DAT-PHONG-DU-LICH/refs/heads/main/app/src/main/res/mipmap-hdpi/LICH_DA_A_PHON_UN_D_DUN_XA_2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/truongdohd103/DO-AN---XAY-DUNG-UNG-DUNG-DAT-PHONG-DU-LICH/refs/heads/main/app/src/main/res/mipmap-hdpi/LICH_DA_A_PHON_UN_D_DUN_XA_2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bfe39e16-6600-5150-9540-a163d0de49b5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sneadxx/sneadxx/refs/heads/main/intemerateness/Software_3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sneadxx/sneadxx/refs/heads/main/intemerateness/Software_3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6cd6b840-1e34-575f-a90d-cebc4d483941",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Youssef20004/New-system-home/refs/heads/main/main/static/css/home-system-New-1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Youssef20004/New-system-home/refs/heads/main/main/static/css/home-system-New-1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--85f1716a-40d8-53de-8143-8a8d5e815931",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Raghul-676/AgroConnect-Datathon/refs/heads/master/irrigation_calculation/Datathon_Agro_Connect_v3[.]7-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Raghul-676/AgroConnect-Datathon/refs/heads/master/irrigation_calculation/Datathon_Agro_Connect_v3.7-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--db489c40-0f9a-5bb7-836f-5808adea8074",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/DiGenius-tech/Guardtrol-Backend/refs/heads/main/controllers/support/Backend-Guardtrol-v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/DiGenius-tech/Guardtrol-Backend/refs/heads/main/controllers/support/Backend-Guardtrol-v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6cbabdf9-7d65-57af-97e7-b0462d034aa1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Code-minner/BIDORO-waitlist/refs/heads/master/src/app/waitlist_BIDOR_3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Code-minner/BIDORO-waitlist/refs/heads/master/src/app/waitlist_BIDOR_3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ccbb571b-e97b-544f-a6ca-f24011d62d5e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AzzaFizatiaina/Flutter-Homestay/refs/heads/main/lib/reusable_widgets/Flutter_Homestay_atrepsy[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AzzaFizatiaina/Flutter-Homestay/refs/heads/main/lib/reusable_widgets/Flutter_Homestay_atrepsy.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2f611659-9cf3-5e24-900e-92dafae2ffb2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AzzaFizatiaina/Flutter-Assesment/refs/heads/main/android/app/src/debug/Assesment-Flutter-2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AzzaFizatiaina/Flutter-Assesment/refs/heads/main/android/app/src/debug/Assesment-Flutter-2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:37Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a3a402c8-bf75-5dce-8eaa-e69c9de27702",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/truongdohd103/DO-AN---XAY-DUNG-UNG-DUNG-DAT-PHONG-DU-LICH/refs/heads/main/app/src/main/res/drawable-nodpi/D-XA-DUN-DA-UN-PHON-LICH-A-1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/truongdohd103/DO-AN---XAY-DUNG-UNG-DUNG-DAT-PHONG-DU-LICH/refs/heads/main/app/src/main/res/drawable-nodpi/D-XA-DUN-DA-UN-PHON-LICH-A-1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--179164c7-3b94-5b25-8374-e1d14649d329",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rehbel/rehbel[.]github[.]io/refs/heads/main/denier/io-rehbel-github-1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rehbel/rehbel.github.io/refs/heads/main/denier/io-rehbel-github-1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--001ec027-8d1e-562e-9ad6-9bd0234af089",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/adesh-2006/adesh-2006[.]github[.]io/refs/heads/main/gramophonist/github_io_adesh_2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/adesh-2006/adesh-2006.github.io/refs/heads/main/gramophonist/github_io_adesh_2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9320e096-c9bb-55f2-8472-6d38ab1a566a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Raghul-676/projlb/refs/heads/main/src/Software-v1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Raghul-676/projlb/refs/heads/main/src/Software-v1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a00d5c28-0131-5145-a56b-36b24b8222e0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Raghul-676/Heart-Disease-Prediction/refs/heads/main/heart_disease_project/model/Disease_Prediction_Heart_1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Raghul-676/Heart-Disease-Prediction/refs/heads/main/heart_disease_project/model/Disease_Prediction_Heart_1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8533aa70-7654-53a8-8353-0dc4a76fdd17",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/KKDIDD/kkdidd[.]github[.]io/refs/heads/main/inscriptionless/io_github_kkdidd_2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/KKDIDD/kkdidd.github.io/refs/heads/main/inscriptionless/io_github_kkdidd_2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--12ad9849-c131-5357-97ba-8321f1c3088a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/DiGenius-tech/Guardtrol-Frontend/refs/heads/main/src/redux/selectors/Guardtrol_Frontend_1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/DiGenius-tech/Guardtrol-Frontend/refs/heads/main/src/redux/selectors/Guardtrol_Frontend_1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--706708b1-f34c-5e44-b2f7-dd3c3654166d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AzzaFizatiaina/Simple-Programming-Project/refs/heads/main/incensory/Simple-Programming-Project-v1[.]5-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AzzaFizatiaina/Simple-Programming-Project/refs/heads/main/incensory/Simple-Programming-Project-v1.5-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--26dfa171-470f-536c-a370-decaa177c0b6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Aldemirps/Ibo/refs/heads/main/nonprovidential/Software-2[.]6-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Aldemirps/Ibo/refs/heads/main/nonprovidential/Software-2.6-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e4e8d6e0-7d43-504b-b721-5b7d34da1d1e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/vikasoni12/vikasoni12/refs/heads/main/windbag/vikasoni-v3[.]8-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/vikasoni12/vikasoni12/refs/heads/main/windbag/vikasoni-v3.8-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:35Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5b375249-aedd-5f6d-9459-664cdb0640df",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/alphaitas/skatezonesofficial/refs/heads/main/opportunistic/Software_3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/alphaitas/skatezonesofficial/refs/heads/main/opportunistic/Software_3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:35Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7c1dce7f-6dab-5126-98f4-0a968e30565d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Livenson32/livenson32[.]github[.]io/refs/heads/main/tormentil/livenson_io_github_1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Livenson32/livenson32.github.io/refs/heads/main/tormentil/livenson_io_github_1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:35Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--04b41071-421e-5e8e-a268-e2e0458ef3db",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/digitalbusinesspromoters/Aaradhyagranddevanahalli/refs/heads/main/Restaurents/[.]vs/Restaurents/CopilotIndices/17[.]14[.]734[.]62261/Software-1[.]8-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/digitalbusinesspromoters/Aaradhyagranddevanahalli/refs/heads/main/Restaurents/.vs/Restaurents/CopilotIndices/17.14.734.62261/Software-1.8-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8557f139-fbd8-5e95-874f-a38c9a9755d8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Raghul-676/projlb/refs/heads/main/src/Software-v1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Raghul-676/projlb/refs/heads/main/src/Software-v1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bc22541a-3d67-57c2-9b9c-66b9a8bf7ecf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Dhanush-TD/classroom-emotion-analytics/refs/heads/main/src/classroom_emotion_analytics_v1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Dhanush-TD/classroom-emotion-analytics/refs/heads/main/src/classroom_emotion_analytics_v1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--217a3490-b25d-520c-8f20-bc9b3eb9d285",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ringopii/ringopii[.]github[.]io/refs/heads/main/guttule/io_ringopii_github_v3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ringopii/ringopii.github.io/refs/heads/main/guttule/io_ringopii_github_v3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8a254c51-8b98-5a3d-9713-88c3724b8329",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ayushgowda121/rep/refs/heads/main/expiatory/Software_3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ayushgowda121/rep/refs/heads/main/expiatory/Software_3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--939144e5-ec54-5fa2-b025-59f904dad661",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/wici123/wici123[.]github[.]io/refs/heads/main/chromotypographic/io_github_wici_v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/wici123/wici123.github.io/refs/heads/main/chromotypographic/io_github_wici_v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--651ecce6-cdbc-5ff3-9ae6-09eb8b1dfb08",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/fidelcastropro/Odoo_SNS_Leave_it_to_us/refs/heads/main/node_modules/date-fns/esm/locale/fr-CA/_lib/formatLong/it-Odoo-Leave-to-us-SN-3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/fidelcastropro/Odoo_SNS_Leave_it_to_us/refs/heads/main/node_modules/date-fns/esm/locale/fr-CA/_lib/formatLong/it-Odoo-Leave-to-us-SN-3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--36281232-a790-56a5-b9cb-13f5b86600c5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wander210/Ranking-Filter/refs/heads/main/app/Filter_Ranking_2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wander210/Ranking-Filter/refs/heads/main/app/Filter_Ranking_2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e0592680-324e-515f-b084-e96eb43ba59c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SECE-24-28/classroom-project-Raghul-676/refs/heads/main/Intern_day6/project-classroom-Raghul-2[.]2-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SECE-24-28/classroom-project-Raghul-676/refs/heads/main/Intern_day6/project-classroom-Raghul-2.2-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3a003c27-24db-5210-9d60-37b2225316de",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Raghul-676/IBM_finance_project/refs/heads/main/glycerizine/project-finance-IB-v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Raghul-676/IBM_finance_project/refs/heads/main/glycerizine/project-finance-IB-v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--54aed855-eff5-55c8-8201-ce09f6bfc238",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Jay-Bosco/Quote-Generator/refs/heads/main/unproducibleness/Generator_Quote_1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Jay-Bosco/Quote-Generator/refs/heads/main/unproducibleness/Generator_Quote_1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3865349c-def8-5db8-8149-ddd7b2b8771b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Jay-Bosco/Portfolio/refs/heads/main/amylogenesis/Software-1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Jay-Bosco/Portfolio/refs/heads/main/amylogenesis/Software-1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a77a25b5-0d8b-5d24-ad6e-e0ed94d2906a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Chandana72/Directory_Discovery/refs/heads/main/Querciflorae/Directory-Discovery-v3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Chandana72/Directory_Discovery/refs/heads/main/Querciflorae/Directory-Discovery-v3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cfc831d0-5287-5d53-8f1b-b2f0c2fde14d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AzzaFizatiaina/Laravel-CRUD/refs/heads/main/routes/CRUD-Laravel-v3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AzzaFizatiaina/Laravel-CRUD/refs/heads/main/routes/CRUD-Laravel-v3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--961f6826-d37c-5518-a904-79ee75e0caf9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:vzilnrw3[.]sleavepiker[.]com",
      "pattern": "[domain-name:value = 'vzilnrw3.sleavepiker.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:27Z",
      "confidence": 80,
      "labels": [
        "ClearFake",
        "mac-0xdcf2",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8ff21426-3bb0-50d0-b92a-2d59bbf560d1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ramilafuinte/ramilafuinte[.]github[.]io/refs/heads/main/tenty/ramilafuinte_io_github_3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ramilafuinte/ramilafuinte.github.io/refs/heads/main/tenty/ramilafuinte_io_github_3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8e92f945-b763-558e-bdb4-1edf55e2830f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/nezzyomran/nezzyomran[.]github[.]io/refs/heads/main/unlogged/io_github_nezzyomran_v1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/nezzyomran/nezzyomran.github.io/refs/heads/main/unlogged/io_github_nezzyomran_v1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3440ad03-7e08-5a8c-9528-6e8a6d8024e0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/devang-p12/physio-check/refs/heads/main/server/node_modules/has-symbols/test/shams/physio_check_v1[.]4-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/devang-p12/physio-check/refs/heads/main/server/node_modules/has-symbols/test/shams/physio_check_v1.4-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--987d22f9-6963-5dd5-8cd6-129871a2f9b8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/anshulrules/anshulrules[.]github[.]io/refs/heads/main/novelcraft/io-github-anshulrules-v2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/anshulrules/anshulrules.github.io/refs/heads/main/novelcraft/io-github-anshulrules-v2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--26b5b745-5726-55e8-9942-f0b3b55100b6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Youssef20004/lawyer/refs/heads/main/static/Software_v1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Youssef20004/lawyer/refs/heads/main/static/Software_v1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--20f80a5c-6ad1-5e8c-a86c-f6d83dccc12c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Youssef20004/Login-Form-Project/refs/heads/main/pterygoidean/Form_Login_Project_v1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Youssef20004/Login-Form-Project/refs/heads/main/pterygoidean/Form_Login_Project_v1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7d399d8e-4bce-5007-95c6-1866f2f42e6d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/RagnerMG4/Gheed/refs/heads/main/supersubstantiality/Software_v3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/RagnerMG4/Gheed/refs/heads/main/supersubstantiality/Software_v3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c89ebb1e-0046-5def-b813-023949b0a6e9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Raghul-676/demogit1/refs/heads/main/bepinch/demogit-v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Raghul-676/demogit1/refs/heads/main/bepinch/demogit-v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--be2bc47e-e140-5ac7-8e00-762afd502b75",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Raghul-676/Heart-Disease-Prediction/refs/heads/main/heart_disease_project/model/Heart-Prediction-Disease-1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Raghul-676/Heart-Disease-Prediction/refs/heads/main/heart_disease_project/model/Heart-Prediction-Disease-1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0c5846f8-85e4-5adb-8fe5-bb3c973a3fb9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Raghul-676/Creatathon-project/refs/heads/main/raghul-portfolio/Creatathon_project_v1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Raghul-676/Creatathon-project/refs/heads/main/raghul-portfolio/Creatathon_project_v1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b18ddc31-215c-5de9-af33-37ec36ae9d4c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Code-minner/BIDORO-waitlist/refs/heads/master/src/lib/waitlist-BIDOR-v1[.]0-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Code-minner/BIDORO-waitlist/refs/heads/master/src/lib/waitlist-BIDOR-v1.0-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cd7f58f4-7f5e-535c-8baf-0a6be00be01a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AlolorBazel/Alliance/refs/heads/main/assets/robinson/Software-v3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AlolorBazel/Alliance/refs/heads/main/assets/robinson/Software-v3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fe8b2782-53d8-546d-aed6-2b87968cd232",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Aldemirps/Painel-/refs/heads/main/Landwehr/Painel-v1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Aldemirps/Painel-/refs/heads/main/Landwehr/Painel-v1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:27Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--270179bd-932f-5538-b375-28d5f4951ea5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ayushgowda121/pec-datascience/refs/heads/main/infinite/datascience_pec_2[.]6-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ayushgowda121/pec-datascience/refs/heads/main/infinite/datascience_pec_2.6-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6866517c-17a1-5aca-b754-e914fec9f366",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Youssef20004/index/refs/heads/main/static/Software-2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Youssef20004/index/refs/heads/main/static/Software-2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9ed8719d-2332-5496-8faf-f3003cb770d5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Youssef20004/Results-summary-component/refs/heads/main/culpableness/summary-component-Results-v1[.]9-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Youssef20004/Results-summary-component/refs/heads/main/culpableness/summary-component-Results-v1.9-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e046dc05-568d-5023-9b2b-34471c406c4a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SALDAPAL/ADV-Java-Lab-task-1/refs/heads/main/LabTask%201/Lab_Java_AD_task_lomentaceous[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SALDAPAL/ADV-Java-Lab-task-1/refs/heads/main/LabTask%201/Lab_Java_AD_task_lomentaceous.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5404b257-0de0-5c9b-ac06-f81a052e9e31",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/RagnerMG4/JKM7/refs/heads/main/scoptophilic/JK_1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/RagnerMG4/JKM7/refs/heads/main/scoptophilic/JK_1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--29063fa2-6b8a-5fb5-8622-59d862d116d3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Raghul-676/githum1/refs/heads/main/pyloralgia/githum_1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Raghul-676/githum1/refs/heads/main/pyloralgia/githum_1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--47fca0ec-be8d-5028-a6b1-32480a61b56d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/KKDIDD/kkdidd[.]github[.]io/refs/heads/main/inscriptionless/github_kkdidd_io_1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/KKDIDD/kkdidd.github.io/refs/heads/main/inscriptionless/github_kkdidd_io_1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4823e7d9-ac59-5b15-90f3-18df68647603",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Justwinyourheart/justwinyourheart[.]github[.]io/refs/heads/main/unadulterously/io_justwinyourheart_github_v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Justwinyourheart/justwinyourheart.github.io/refs/heads/main/unadulterously/io_justwinyourheart_github_v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7b053efa-06d7-52e5-90c4-ceadf94438fc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/DaftarTotovip-login/daftartotovip-login[.]github[.]io/refs/heads/main/unhospitably/login_io_github_daftartotovip_v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/DaftarTotovip-login/daftartotovip-login.github.io/refs/heads/main/unhospitably/login_io_github_daftartotovip_v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5b7e809a-3871-5518-83aa-ff96f74cf9f5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Raghul-676/MERN_Intern/refs/heads/main/bajaj-insurance-bot/backend/Intern_MER_2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Raghul-676/MERN_Intern/refs/heads/main/bajaj-insurance-bot/backend/Intern_MER_2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:25Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c5faccc2-9c28-50ef-853e-f260eda3bdf7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AzzaFizatiaina/Flutter-Assesment/refs/heads/main/ios/Runner/Assets[.]xcassets/LaunchImage[.]imageset/Flutter_Assesment_3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AzzaFizatiaina/Flutter-Assesment/refs/heads/main/ios/Runner/Assets.xcassets/LaunchImage.imageset/Flutter_Assesment_3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:25Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--90904832-c67f-5603-9561-5685d7d4b7ad",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AlolorBazel/Website-Portfolio-Project/refs/heads/main/assets/image/Project_Portfolio_Website_v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AlolorBazel/Website-Portfolio-Project/refs/heads/main/assets/image/Project_Portfolio_Website_v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:25Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6b8be0db-15a9-5f26-a232-f64c614830a1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Raghul-676/rag-chatbot-app/refs/heads/main/precedable/app_rag_chatbot_spinidentate[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Raghul-676/rag-chatbot-app/refs/heads/main/precedable/app_rag_chatbot_spinidentate.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:24Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--93ec31ca-ee9b-51ff-971f-37a6a40cfc36",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/BashSpiceRB/QuasarRAT-Remote-Access-Tool/refs/heads/main/immensurable/Tool_Access_Remote_RA_Quasar_v1[.]6-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/BashSpiceRB/QuasarRAT-Remote-Access-Tool/refs/heads/main/immensurable/Tool_Access_Remote_RA_Quasar_v1.6-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:24Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1c918b29-0daf-5d6e-a180-b89b653b2fa0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rguezedgar/rguezedgar[.]github[.]io/refs/heads/main/Euornithes/io_rguezedgar_github_3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rguezedgar/rguezedgar.github.io/refs/heads/main/Euornithes/io_rguezedgar_github_3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:23Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c4776414-1815-5b43-8459-5d98c9efe7a3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wander210/AppLock/refs/heads/main/app/src/test/java/Lock-App-v2[.]1-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wander210/AppLock/refs/heads/main/app/src/test/java/Lock-App-v2.1-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:23Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c9d342a5-4272-599c-84d6-e45689bb73f9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Mohsen6210/mohsen6210[.]github[.]io/refs/heads/main/hockelty/github-mohsen-io-v2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Mohsen6210/mohsen6210.github.io/refs/heads/main/hockelty/github-mohsen-io-v2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f90a91d7-0b61-5950-89f2-834bde212375",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Jay-Bosco/FoodMeApp/refs/heads/main/constants/Me_Food_App_v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Jay-Bosco/FoodMeApp/refs/heads/main/constants/Me_Food_App_v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1f112840-6366-5d1f-b6e3-480d4b754599",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/devang-p12/physio-check/refs/heads/main/server/node_modules/send/physio_check_3[.]4-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/devang-p12/physio-check/refs/heads/main/server/node_modules/send/physio_check_3.4-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--16e6a37a-c5d0-5f5f-8365-227c7f7de9c6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Youssef20004/indrex/refs/heads/main/assets/Software_v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Youssef20004/indrex/refs/heads/main/assets/Software_v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0038b8d9-21a7-5aee-b83c-0652def49c53",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Youssef20004/index3/refs/heads/main/static/image/index_v2[.]1-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Youssef20004/index3/refs/heads/main/static/image/index_v2.1-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d49fced3-14e9-5bb4-be8b-2dc4c41be97f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Youssef20004/egyption549/refs/heads/main/student/__pycache__/egyption-v3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Youssef20004/egyption549/refs/heads/main/student/__pycache__/egyption-v3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a2adedd3-6e56-5956-aecf-9f9312860e08",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Youssef20004/bookmarks/refs/heads/main/bookmarks/Software-3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Youssef20004/bookmarks/refs/heads/main/bookmarks/Software-3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d40ac271-d1d2-562b-9a72-8c8d3243838d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wander210/Job-Portal/refs/heads/master/node_modules/date-fns/locale/vi/_lib/formatRelative/Portal_Job_v1[.]1-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wander210/Job-Portal/refs/heads/master/node_modules/date-fns/locale/vi/_lib/formatRelative/Portal_Job_v1.1-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--06c35a65-cb75-59e6-87ff-98e123d29398",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Raghul-676/rag-chatbot-app/refs/heads/main/precedable/rag-app-chatbot-2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Raghul-676/rag-chatbot-app/refs/heads/main/precedable/rag-app-chatbot-2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ed130cad-769d-5951-96cd-f96fcce96e45",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/DiGenius-tech/AgentLogistics/refs/heads/main/templates/admin/templete/assets/fonts/fontawesome/Logistics_Agent_3[.]1-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/DiGenius-tech/AgentLogistics/refs/heads/main/templates/admin/templete/assets/fonts/fontawesome/Logistics_Agent_3.1-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c55482e9-70cb-5e78-a1d0-ba84155636d9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Aldemirps/Mybox/refs/heads/main/dothienenteritis/Software_v2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Aldemirps/Mybox/refs/heads/main/dothienenteritis/Software_v2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:17Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c4de1910-1acc-5827-98da-822ba4c055bd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/fidelcastropro/Odoo_SNS_Leave_it_to_us/refs/heads/main/node_modules/date-fns/locale/en-ZA/_lib/it-Odoo-SN-to-Leave-us-v1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/fidelcastropro/Odoo_SNS_Leave_it_to_us/refs/heads/main/node_modules/date-fns/locale/en-ZA/_lib/it-Odoo-SN-to-Leave-us-v1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c4111c41-1313-5117-b2d6-fbb3cd0654e6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Youssef20004/osama/refs/heads/main/staticfiles/js/Software_v2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Youssef20004/osama/refs/heads/main/staticfiles/js/Software_v2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e4ce6b5b-b745-58a9-80cf-5d645a7c8f81",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wander210/LibraryManagement/refs/heads/main/src/main/kotlin/com/example/library/library_service/repository/Library_Management_2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wander210/LibraryManagement/refs/heads/main/src/main/kotlin/com/example/library/library_service/repository/Library_Management_2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5f7ec2dc-1a72-5bd2-b3b3-30225401e807",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/RagnerMG4/GheedUp/refs/heads/main/Caradoc/Gheed-Up-1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/RagnerMG4/GheedUp/refs/heads/main/Caradoc/Gheed-Up-1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a71853dd-3d53-5cc7-a659-e035bb51b9f7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Raghul-676/OnlineExamSystem/refs/heads/main/src/test/java/com/seceorg/Online_Exam_System_2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Raghul-676/OnlineExamSystem/refs/heads/main/src/test/java/com/seceorg/Online_Exam_System_2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b0581028-9c6e-5169-9f3a-114563efab8a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Raghul-676/MERN_Intern/refs/heads/main/bajaj-insurance-bot/node-service/node_modules/is-promise/Intern_MER_v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Raghul-676/MERN_Intern/refs/heads/main/bajaj-insurance-bot/node-service/node_modules/is-promise/Intern_MER_v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b456d31e-5186-5bdc-8c9f-f564e35197df",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Raghul-676/IBM_finance_project/refs/heads/main/glycerizine/IB_finance_project_v1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Raghul-676/IBM_finance_project/refs/heads/main/glycerizine/IB_finance_project_v1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8d7a9389-330d-5d81-99ca-0e5ff4f6f036",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Feezah/module5_solution/refs/heads/gh-pages/site/fonts/solution-module-3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Feezah/module5_solution/refs/heads/gh-pages/site/fonts/solution-module-3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7bd4dcba-a8ef-5778-9818-bab02e00b485",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Dylan-Emanuel/dylan-emanuel[.]github[.]io/refs/heads/main/exculpatorily/emanuel-io-github-dylan-1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Dylan-Emanuel/dylan-emanuel.github.io/refs/heads/main/exculpatorily/emanuel-io-github-dylan-1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--16f50d70-75e9-5b12-b7b0-95e336a0b3c3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Dylan-Emanuel/dylan-emanuel[.]github[.]io/refs/heads/main/exculpatorily/dylan-github-io-emanuel-v2[.]1-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Dylan-Emanuel/dylan-emanuel.github.io/refs/heads/main/exculpatorily/dylan-github-io-emanuel-v2.1-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e98dd5cc-2873-5dbe-9021-6d3950bc45c5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AzzaFizatiaina/Simple-Bookmark-Website/refs/heads/main/lib/font-awesome/Bookmark-Simple-Website-2[.]4-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AzzaFizatiaina/Simple-Bookmark-Website/refs/heads/main/lib/font-awesome/Bookmark-Simple-Website-2.4-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--693b4189-9a6b-5a2d-aea3-aeef5c6d4b08",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AzzaFizatiaina/Laravel-CRUD/refs/heads/main/tests/Feature/Laravel_CRUD_securifer[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AzzaFizatiaina/Laravel-CRUD/refs/heads/main/tests/Feature/Laravel_CRUD_securifer.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7a8c3a0f-7d2e-5d5c-93ab-e2e9c915b244",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AzzaFizatiaina/Flutter-CRUD/refs/heads/main/ios/Runner[.]xcodeproj/xcshareddata/xcschemes/CRUD-Flutter-2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AzzaFizatiaina/Flutter-CRUD/refs/heads/main/ios/Runner.xcodeproj/xcshareddata/xcschemes/CRUD-Flutter-2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--985a28f2-1f02-590c-9fb2-e078ae99d40a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AlolorBazel/ayala-checker/refs/heads/main/assets/ayala_checker_2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AlolorBazel/ayala-checker/refs/heads/main/assets/ayala_checker_2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1d341d36-debc-5e1b-94fd-0d5f9e3a1c5f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Aldemirps/starpagina/refs/heads/main/supercommentary/Software_v2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Aldemirps/starpagina/refs/heads/main/supercommentary/Software_v2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ed99aa0a-7667-57d2-806a-ce5ff06b3bca",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Youssef20004/project_django/refs/heads/main/main/django_project_3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Youssef20004/project_django/refs/heads/main/main/django_project_3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--99b4127f-21c8-5e39-b2c3-f33e4f94fc6e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Youssef20004/laosama/refs/heads/main/static/js/Software-v1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Youssef20004/laosama/refs/heads/main/static/js/Software-v1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f268ce7e-4ac1-5988-b79a-30ae87bc5d86",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Raghul-676/demogit1/refs/heads/main/bepinch/demogit-3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Raghul-676/demogit1/refs/heads/main/bepinch/demogit-3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6256979d-077b-5da2-b5e5-a858126b1d81",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Raghul-676/Portfolio-Website/refs/heads/main/helodes/Website-Portfolio-1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Raghul-676/Portfolio-Website/refs/heads/main/helodes/Website-Portfolio-1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--07bec0cb-4a75-5f29-94eb-f440481e8810",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Jay-Bosco/jay-bosco[.]github[.]io/refs/heads/main/Caesarean/bosco-io-github-jay-2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Jay-Bosco/jay-bosco.github.io/refs/heads/main/Caesarean/bosco-io-github-jay-2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4dde8bd6-dee5-574b-b15d-d77e0c53523e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AzzaFizatiaina/Flutter-CRUD/refs/heads/main/lib/utils/Flutter_CRUD_1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AzzaFizatiaina/Flutter-CRUD/refs/heads/main/lib/utils/Flutter_CRUD_1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f702e6c1-9354-5d7b-b06b-085ed3741a73",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AuNic7/crud-session/refs/heads/main/maculiferous/crud-session-v2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AuNic7/crud-session/refs/heads/main/maculiferous/crud-session-v2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--21e41123-5730-531c-9086-03df6971b47d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AnujTechGuru/anujfreerdp/refs/heads/main/[.]github/Software_3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AnujTechGuru/anujfreerdp/refs/heads/main/.github/Software_3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f1c32028-3aa4-5eb0-aebc-dcec28673a0c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AlolorBazel/alliance-checker/refs/heads/main/Naja/alliance-checker-v1[.]6-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AlolorBazel/alliance-checker/refs/heads/main/Naja/alliance-checker-v1.6-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--41084b28-e335-5e95-8f00-d3ed50a30930",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/aufahuhs/Advanced-Machine-Learning-Personal-Project/refs/heads/main/bardo/Personal_Advanced_Machine_Project_Learning_v3[.]6-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/aufahuhs/Advanced-Machine-Learning-Personal-Project/refs/heads/main/bardo/Personal_Advanced_Machine_Project_Learning_v3.6-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--78216397-7bb4-5aa5-a299-ed21d84f8342",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/DeepZatakiya/FacialEmotionDetection/refs/heads/main/ossifluence/Emotion_Detection_Facial_v2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/DeepZatakiya/FacialEmotionDetection/refs/heads/main/ossifluence/Emotion_Detection_Facial_v2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d1ea33ad-15c8-573d-bdd9-ee0793d70b0f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/tatan1099/UNICIENCIA-INTRO-PROGRAMACION/refs/heads/master/praemolar/INTR-UNICIENCI-PROGRAMACION-v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/tatan1099/UNICIENCIA-INTRO-PROGRAMACION/refs/heads/master/praemolar/INTR-UNICIENCI-PROGRAMACION-v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bcfd2372-a23d-57df-a531-16f809198c38",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/tatan1099/Tienda_Naturvida_Actualizada/refs/heads/main/[.]vs/Crud%20Evaluacion%20jonathan/FileContentIndex/Tienda_Naturvida_Actualizada_v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/tatan1099/Tienda_Naturvida_Actualizada/refs/heads/main/.vs/Crud%20Evaluacion%20jonathan/FileContentIndex/Tienda_Naturvida_Actualizada_v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7c6daf6c-5cbc-5a10-9f4f-cef8dd8701bf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Omg1221/swagmode/refs/heads/main/chirotype/Software_v1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Omg1221/swagmode/refs/heads/main/chirotype/Software_v1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:19:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--75617a32-a7a6-5b23-9480-ed98ee0da700",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://175[.]165[.]81[.]82:41604/bin[.]sh",
      "pattern": "[url:value = 'http://175.165.81.82:41604/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:18:21Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "None"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cf896ff0-a215-5ef4-a166-23275271b023",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://175[.]168[.]193[.]191:35308/i",
      "pattern": "[url:value = 'http://175.168.193.191:35308/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:17:07Z",
      "confidence": 80,
      "labels": [
        "None",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2a8e5a08-c2dd-5cfc-ade0-1e5cf231887b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://115[.]63[.]128[.]204:53667/i",
      "pattern": "[url:value = 'http://115.63.128.204:53667/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:17:07Z",
      "confidence": 80,
      "labels": [
        "Mozi",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--876668b2-11fa-5071-b295-bd4af5dbc164",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:ac6b5896c847a73fd6abbc48144a684e450c93dd807aade647cd1005c0bcb4ab",
      "pattern": "[file:hashes.'SHA-256' = 'ac6b5896c847a73fd6abbc48144a684e450c93dd807aade647cd1005c0bcb4ab']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:16:19Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "malware",
        "threatfox"
      ],
      "x_swiftioc_source": "malwarebazaar_recent,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d505d32c-84ca-5daa-8245-61698607f459",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:kk[.]testgeek[.]de",
      "pattern": "[domain-name:value = 'kk.testgeek.de']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:10:22Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--da2d3270-28dc-5fef-b0e5-fafa033ca011",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://27[.]215[.]209[.]253:39353/bin[.]sh",
      "pattern": "[url:value = 'http://27.215.209.253:39353/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:07:16Z",
      "confidence": 80,
      "labels": [
        "Mozi",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--93e20588-04b3-5325-8324-4da038119112",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://59[.]97[.]248[.]8:54770/bin[.]sh",
      "pattern": "[url:value = 'http://59.97.248.8:54770/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:07:09Z",
      "confidence": 80,
      "labels": [
        "Mozi",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--19ce8e76-9aa8-5eb7-acfe-3f1ccc689131",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Anxopancho/anxopancho[.]github[.]io/refs/heads/main/euchromatin/anxopancho_github_io_marrer[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Anxopancho/anxopancho.github.io/refs/heads/main/euchromatin/anxopancho_github_io_marrer.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:07:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--40231f0a-78c5-59d4-be9f-d6e00be971ff",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://178[.]206[.]175[.]149:4073/i",
      "pattern": "[url:value = 'http://178.206.175.149:4073/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:07:07Z",
      "confidence": 80,
      "labels": [
        "None",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9f310c64-ecd7-5b15-a766-f8569c756ec6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Benson0713/benson0713[.]github[.]io/refs/heads/main/unthinkable/benson_io_github_v1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Benson0713/benson0713.github.io/refs/heads/main/unthinkable/benson_io_github_v1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:07:06Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ca4438dd-07b2-5634-8086-215ea31214ef",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Arla02/arla02[.]github[.]io/refs/heads/main/brusher/github-arla-io-v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Arla02/arla02.github.io/refs/heads/main/brusher/github-arla-io-v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:07:06Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3dea6236-5ddb-5a5e-bfb5-ca2600059e6b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AriArien/ariarien[.]github[.]io/refs/heads/main/Santolina/github-io-ariarien-v2[.]9-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AriArien/ariarien.github.io/refs/heads/main/Santolina/github-io-ariarien-v2.9-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:07:06Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a10abb84-bec3-5f10-8436-145384d599c5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:y3ppxpso[.]fazbet1[.]app",
      "pattern": "[domain-name:value = 'y3ppxpso.fazbet1.app']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:06:00Z",
      "confidence": 80,
      "labels": [
        "ClearFake",
        "mac-0x0f14",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--73914538-a2f0-5d3d-b962-a05a5214777c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:0087739da28e1f670edb454af547a3153507bd0fa5ebeb019892b2c660bbaedb",
      "pattern": "[file:hashes.'SHA-256' = '0087739da28e1f670edb454af547a3153507bd0fa5ebeb019892b2c660bbaedb']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:04:32Z",
      "confidence": 80,
      "labels": [
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8aa67712-71fd-5b24-9a26-a2e482638ca8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:b906d0c831106a9d2c4bb074074e4d2b9a1a86435f92be98c9d26dee9606f452",
      "pattern": "[file:hashes.'SHA-256' = 'b906d0c831106a9d2c4bb074074e4d2b9a1a86435f92be98c9d26dee9606f452']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:04:31Z",
      "confidence": 80,
      "labels": [
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d18d955c-31b8-5a32-b0cf-75440437dbb7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:059d9546fd86238604236434da46d7b7ebb4c0c5a7d1e8a7f2dbf71fc6d14239",
      "pattern": "[file:hashes.'SHA-256' = '059d9546fd86238604236434da46d7b7ebb4c0c5a7d1e8a7f2dbf71fc6d14239']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:04:19Z",
      "confidence": 80,
      "labels": [
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d3ad09b3-fcbd-5e7e-a2f0-51b006ba0a51",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:7e0edf317014e9f7b0aa3761af862f081180c5e65214f28a4a753b389d2cd40f",
      "pattern": "[file:hashes.'SHA-256' = '7e0edf317014e9f7b0aa3761af862f081180c5e65214f28a4a753b389d2cd40f']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:04:00Z",
      "confidence": 80,
      "labels": [
        "CLOUDHAZE",
        "malware",
        "threatfox"
      ],
      "x_swiftioc_source": "malwarebazaar_recent,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1c5b3773-3421-56e7-96b3-dd2834b1d239",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:2bf75b7303d79d5471039671378b1018df39b0f9acbaef771bc1c296ced13046",
      "pattern": "[file:hashes.'SHA-256' = '2bf75b7303d79d5471039671378b1018df39b0f9acbaef771bc1c296ced13046']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:02:58Z",
      "confidence": 80,
      "labels": [
        "Mirai",
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--164364b0-b1f1-5fc7-aa6d-2c4c879db38d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:2fab76025c5017fc68596b34ad3fc897507beba462fb192be30c43249eeb7afd",
      "pattern": "[file:hashes.'SHA-256' = '2fab76025c5017fc68596b34ad3fc897507beba462fb192be30c43249eeb7afd']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:02:40Z",
      "confidence": 80,
      "labels": [
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--67e9d79f-272a-503a-81e0-9ddbf9cfdb3b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:b47f090bc2817e88bd781fd15bdd5a64c615280ffeed92bfaf77ac994ad0fa6e",
      "pattern": "[file:hashes.'SHA-256' = 'b47f090bc2817e88bd781fd15bdd5a64c615280ffeed92bfaf77ac994ad0fa6e']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:02:22Z",
      "confidence": 80,
      "labels": [
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b7f92d88-8235-530a-baff-ba44d2e36e3e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:517db3334d4955561408c5dfc7581ff9d7b2d87f5488505f8bbfe98a7d3db639",
      "pattern": "[file:hashes.'SHA-256' = '517db3334d4955561408c5dfc7581ff9d7b2d87f5488505f8bbfe98a7d3db639']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:02:22Z",
      "confidence": 80,
      "labels": [
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--be76bbf0-1ac3-5d00-9da2-4ce33f6a34d3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:526a4d50fbef9e9c045c9e32ecc0b587a1d4e8ac633301025b088d282aa455a8",
      "pattern": "[file:hashes.'SHA-256' = '526a4d50fbef9e9c045c9e32ecc0b587a1d4e8ac633301025b088d282aa455a8']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:01:57Z",
      "confidence": 80,
      "labels": [
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--372c8e8e-574d-563a-8d09-ce824d2bdc06",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:30dd5b20699c024eabe1002952374f9419d238f6132a6c53dd50559140f34260",
      "pattern": "[file:hashes.'SHA-256' = '30dd5b20699c024eabe1002952374f9419d238f6132a6c53dd50559140f34260']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:00:19Z",
      "confidence": 80,
      "labels": [
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--886d2a0d-182e-5e22-a96b-114a13683f12",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:018a1e254ad2c66de51542065c2404ed068122ddc4eee9be86e853eefc8f3545",
      "pattern": "[file:hashes.'SHA-256' = '018a1e254ad2c66de51542065c2404ed068122ddc4eee9be86e853eefc8f3545']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:00:19Z",
      "confidence": 80,
      "labels": [
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f582a7aa-b49b-58c8-87c4-dc9ac37a4c5d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:03d1c15c988f5b667d0211dd0517a023e181a0f0d4c7e1a25909ab773eb323fa",
      "pattern": "[file:hashes.'SHA-256' = '03d1c15c988f5b667d0211dd0517a023e181a0f0d4c7e1a25909ab773eb323fa']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:00:07Z",
      "confidence": 80,
      "labels": [
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3e27e803-a383-5e36-8740-aa5602da8141",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:683e4f9a4e20475bd2e6f79b35e7e5a1764b47b1e754704cacdc97106f1f8074",
      "pattern": "[file:hashes.'SHA-256' = '683e4f9a4e20475bd2e6f79b35e7e5a1764b47b1e754704cacdc97106f1f8074']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T12:00:00Z",
      "confidence": 80,
      "labels": [
        "CLOUDHAZE",
        "malware",
        "threatfox"
      ],
      "x_swiftioc_source": "malwarebazaar_recent,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9613a9c0-268c-54e6-bc2d-db620a7aa8fb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:8644bb2ba39ddad352e82cc8fc827986940dec126527ed1cb6fa532e002bea86",
      "pattern": "[file:hashes.'SHA-256' = '8644bb2ba39ddad352e82cc8fc827986940dec126527ed1cb6fa532e002bea86']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:59:59Z",
      "confidence": 80,
      "labels": [
        "CLOUDHAZE",
        "malware",
        "threatfox"
      ],
      "x_swiftioc_source": "malwarebazaar_recent,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6899c588-3d5e-5d3c-9a63-e0c0c54287dd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:1a7f0e2e962a6e6c80b08e77d88dfa50ec8ce2d1f1efd4dd26d3fb14b94d4399",
      "pattern": "[file:hashes.'SHA-256' = '1a7f0e2e962a6e6c80b08e77d88dfa50ec8ce2d1f1efd4dd26d3fb14b94d4399']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:58:31Z",
      "confidence": 80,
      "labels": [
        "CLOUDHAZE",
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2c0be16b-24f2-5096-87bc-70e7a3ac580e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:a22a9165c1d9f9b9b4c06c7356e326728662423001e5b012e79c92775666d646",
      "pattern": "[file:hashes.'SHA-256' = 'a22a9165c1d9f9b9b4c06c7356e326728662423001e5b012e79c92775666d646']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:58:17Z",
      "confidence": 80,
      "labels": [
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5f25bc18-5f6e-5d2a-80d5-21eb5bdb9307",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:9226e7565fcc5bea66943e2582c056848143463da5ffefc998648b282522c7a3",
      "pattern": "[file:hashes.'SHA-256' = '9226e7565fcc5bea66943e2582c056848143463da5ffefc998648b282522c7a3']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:58:05Z",
      "confidence": 80,
      "labels": [
        "CLOUDHAZE",
        "malware",
        "threatfox"
      ],
      "x_swiftioc_source": "malwarebazaar_recent,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e870bf9c-2f29-5067-9a92-8e98ac4858fe",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:745bf07aeff3df14959df64f53cea0b2301bc6d0793afb22793b0ba75a1af13d",
      "pattern": "[file:hashes.'SHA-256' = '745bf07aeff3df14959df64f53cea0b2301bc6d0793afb22793b0ba75a1af13d']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:57:51Z",
      "confidence": 80,
      "labels": [
        "CLOUDHAZE",
        "malware",
        "threatfox"
      ],
      "x_swiftioc_source": "malwarebazaar_recent,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b7faada6-bd76-5bed-8025-6741bffac645",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:3ac8b91c5580e63c13f4f7ea863e8582c089e556f2b9993e7de884a5108c4b4d",
      "pattern": "[file:hashes.'SHA-256' = '3ac8b91c5580e63c13f4f7ea863e8582c089e556f2b9993e7de884a5108c4b4d']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:56:43Z",
      "confidence": 80,
      "labels": [
        "CLOUDHAZE",
        "malware",
        "threatfox"
      ],
      "x_swiftioc_source": "malwarebazaar_recent,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d46d2144-a19b-50f0-a181-82ec053727ad",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:077684611d443b9ca60bd8bd211db1d3a35be832daeaca2dc08d4850821ec39c",
      "pattern": "[file:hashes.'SHA-256' = '077684611d443b9ca60bd8bd211db1d3a35be832daeaca2dc08d4850821ec39c']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:55:08Z",
      "confidence": 80,
      "labels": [
        "Github",
        "SalatStealer",
        "exe",
        "stealer",
        "threatfox",
        "upx",
        "zapret"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d39dbdbe-8dde-5d52-95be-3b559329d9f0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/RafaEngineer/IFA/refs/heads/master/assets/css/Software_1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/RafaEngineer/IFA/refs/heads/master/assets/css/Software_1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:52:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fc189e40-6725-5706-9de0-125cc4665920",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Raghul-676/Raghul-676/refs/heads/main/unilobar/Raghul-v2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Raghul-676/Raghul-676/refs/heads/main/unilobar/Raghul-v2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:52:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3457c88d-5edd-5278-b0af-187d8e50a3f6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/LuisOrtizUH/ExamenFinal/refs/heads/main/Vehiculos/packages/Microsoft[.]CodeDom[.]Providers[.]DotNetCompilerPlatform[.]2[.]0[.]1/build/Final_Examen_v2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/LuisOrtizUH/ExamenFinal/refs/heads/main/Vehiculos/packages/Microsoft.CodeDom.Providers.DotNetCompilerPlatform.2.0.1/build/Final_Examen_v2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:52:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2022294c-0c2c-56d0-bbe4-383567553a9f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/LucasJaider/projetoform1/refs/heads/main/Dytiscus/projetoform-v1[.]0-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/LucasJaider/projetoform1/refs/heads/main/Dytiscus/projetoform-v1.0-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:52:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5830a1a5-68b7-5fbb-a4af-0c4ce425c7cf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/LucasJaider/lucasjaider[.]github[.]io/refs/heads/main/Bawra/io_github_lucasjaider_v2[.]9-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/LucasJaider/lucasjaider.github.io/refs/heads/main/Bawra/io_github_lucasjaider_v2.9-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:52:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2337c814-c133-5f78-b8bb-798e686ac58f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/shahryar-dev/dilusion/refs/heads/main/Mytilacea/Software-2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/shahryar-dev/dilusion/refs/heads/main/Mytilacea/Software-2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:52:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4a82fe85-2a09-5371-a54b-c281f1c2effc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rdnrhm92/rdnrhm92[.]github[.]io/refs/heads/main/semipyritic/rdnrhm_github_io_v3[.]3-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rdnrhm92/rdnrhm92.github.io/refs/heads/main/semipyritic/rdnrhm_github_io_v3.3-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:52:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ed3aab80-9c03-534d-9e17-7a0570517876",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/arrio3107/arrio3107[.]github[.]io/refs/heads/main/Latinian/github-io-arrio-1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/arrio3107/arrio3107.github.io/refs/heads/main/Latinian/github-io-arrio-1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:52:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8ab6f591-df9a-55ae-ac5d-160cfb91fe1d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/WaqarDev69/Chai-Code-Problems/refs/heads/main/Joke-Generator/Code_Chai_Problems_v1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/WaqarDev69/Chai-Code-Problems/refs/heads/main/Joke-Generator/Code_Chai_Problems_v1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:52:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c21e3acc-3db3-5a81-969d-9400707f597e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/TranKhaHao1206/trankhahao1206[.]github[.]io/refs/heads/main/trinitrotoluene/github-io-trankhahao-2[.]3-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/TranKhaHao1206/trankhahao1206.github.io/refs/heads/main/trinitrotoluene/github-io-trankhahao-2.3-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:52:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0f95c61e-332e-5f5b-8f6a-f74e87adbae1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ringopii/bgmeafetcher/refs/heads/main/database/migrations/Software-3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ringopii/bgmeafetcher/refs/heads/main/database/migrations/Software-3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:52:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cc1dfbf2-34af-5f39-9796-035339f5e7d6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Kiw56s/kiw56s[.]github[.]io/refs/heads/main/uncompatible/s_github_io_kiw_3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Kiw56s/kiw56s.github.io/refs/heads/main/uncompatible/s_github_io_kiw_3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:52:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--27f9f938-10db-5d1f-9105-b55f0e6bdbbe",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Feezah/My-First-Website/refs/heads/main/temporator/Website_First_My_3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Feezah/My-First-Website/refs/heads/main/temporator/Website_First_My_3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:52:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c7826d37-a788-569b-a91d-da0eac53f059",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ahmedehab706/information-security-task-3/refs/heads/main/task3[.]sh/information-task-security-v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ahmedehab706/information-security-task-3/refs/heads/main/task3.sh/information-task-security-v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:52:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d0c902b2-824d-53ba-a173-7f33d78ce4c0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/saadkhan1150/saadkhan1150[.]github[.]io/refs/heads/main/vexation/io_github_saadkhan_v1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/saadkhan1150/saadkhan1150.github.io/refs/heads/main/vexation/io_github_saadkhan_v1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:52:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--913d806b-ea15-5af0-b1d2-6b4ba5a11c8f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/juanso123/juanso123[.]github[.]io/refs/heads/main/calapite/juanso-github-io-1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/juanso123/juanso123.github.io/refs/heads/main/calapite/juanso-github-io-1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:52:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--66764b7b-b090-5630-9cf7-386be4fecec6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Younishassan123/Younishassan123/refs/heads/main/roundly/Younishassan_3[.]7-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Younishassan123/Younishassan123/refs/heads/main/roundly/Younishassan_3.7-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:52:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bb731cf3-4582-5f92-a078-8d39ee61942d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Bijay7330/Calculator/refs/heads/main/Ronni/Software_v1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Bijay7330/Calculator/refs/heads/main/Ronni/Software_v1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:52:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5c9a23b7-ff7d-58bb-822a-03d8b27ced10",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ahmedehab706/HUMAN-SECURITY-PROJECT-/refs/heads/main/footer/PROJEC-SECURIT-HUMA-v3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ahmedehab706/HUMAN-SECURITY-PROJECT-/refs/heads/main/footer/PROJEC-SECURIT-HUMA-v3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:52:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dcaa0ae2-079c-5d95-8cde-9d9688f9fe34",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/saadkhan1150/tictactoe/refs/heads/main/upanishadic/Software_1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/saadkhan1150/tictactoe/refs/heads/main/upanishadic/Software_1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:52:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1a1bee23-7ea0-5539-9bb5-15195b296864",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/WaqarDev69/Javascript-Lab/refs/heads/main/Task%20Manager/Javascript-Lab-2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/WaqarDev69/Javascript-Lab/refs/heads/main/Task%20Manager/Javascript-Lab-2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:52:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--40179362-2793-5aae-9596-06c811e90c7d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Dhanush-TD/Portfolio/refs/heads/main/css/Software_v1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Dhanush-TD/Portfolio/refs/heads/main/css/Software_v1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:52:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--86ba6ef0-73b8-5f02-affb-94f088d76291",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ElkholiefyM/elkholiefym[.]github[.]io/refs/heads/main/pathologist/elkholiefym-github-io-1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ElkholiefyM/elkholiefym.github.io/refs/heads/main/pathologist/elkholiefym-github-io-1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:52:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--621b10ab-db7a-561d-89ab-59f58355ac37",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ahmedehab706/assignment1-DATA-INTEGRITY/refs/heads/main/ass1%20dataintegrity/Data-Integrity-and-Authentication-master/task2[.]js/client/public/INTEGRITY_assignment_DAT_v2[.]2-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ahmedehab706/assignment1-DATA-INTEGRITY/refs/heads/main/ass1%20dataintegrity/Data-Integrity-and-Authentication-master/task2.js/client/public/INTEGRITY_assignment_DAT_v2.2-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:52:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a37d8463-9ca5-5718-88cc-5565ecd16cba",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/shahryar-dev/login-fullstack/refs/heads/main/node_modules/toidentifier/fullstack-login-v1[.]3-beta[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/shahryar-dev/login-fullstack/refs/heads/main/node_modules/toidentifier/fullstack-login-v1.3-beta.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:52:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--81175501-d5c7-5373-987f-a2b3b41588c3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Polarssj/floresamarillas/refs/heads/main/kobi/Software_2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Polarssj/floresamarillas/refs/heads/main/kobi/Software_2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:52:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7a3c685c-04fe-5627-b8a4-aee582d1e838",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Polarssj/flor/refs/heads/main/riancy/Software_3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Polarssj/flor/refs/heads/main/riancy/Software_3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:52:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--59d0641f-a94e-5dc5-871e-796cf15730ff",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Dhanush-TD/Object_Detection_cmd/refs/heads/main/Drosera/Object-cmd-Detection-3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Dhanush-TD/Object_Detection_cmd/refs/heads/main/Drosera/Object-cmd-Detection-3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:52:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5de285f1-bdff-5c19-a1dd-84c6da1f2d32",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ystherr/ystherr[.]github[.]io/refs/heads/main/semaphorical/io_github_ystherr_1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ystherr/ystherr.github.io/refs/heads/main/semaphorical/io_github_ystherr_1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:52:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--540163bb-0604-554e-af08-c99795c3949e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:188f7cc16345ab783644473f21015400b42c345c63b089a1c176a0136efebf90",
      "pattern": "[file:hashes.'SHA-256' = '188f7cc16345ab783644473f21015400b42c345c63b089a1c176a0136efebf90']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:47:31Z",
      "confidence": 80,
      "labels": [
        "XorDDoS",
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--84177051-ac8c-5e11-bd24-31456b353175",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:e38a00e0062998fbdb647b1ce8c87bae6e05a3b1dabeb237ee574332f43e19ec",
      "pattern": "[file:hashes.'SHA-256' = 'e38a00e0062998fbdb647b1ce8c87bae6e05a3b1dabeb237ee574332f43e19ec']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:46:58Z",
      "confidence": 80,
      "labels": [
        "XorDDoS",
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2cda9342-a6fa-528b-8f29-61b9d00c581a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Datakroinferno/zapret-discord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/Datakroinferno/zapret-discord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:46:20Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f84ceee2-0cc8-5c85-8bfb-196e69178c34",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://103[.]83[.]9[.]186:2062/bin[.]sh",
      "pattern": "[url:value = 'http://103.83.9.186:2062/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:46:17Z",
      "confidence": 80,
      "labels": [
        "None",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4022735a-fbfc-5325-8eb7-3691b1e081c9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Polarssj/san-valentin/refs/heads/main/assets/valentin-san-3[.]2-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Polarssj/san-valentin/refs/heads/main/assets/valentin-san-3.2-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:46:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7d97f277-074c-54eb-8b87-2ed2bca58d9a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AzzaFizatiaina/Simple-Programming-Project/refs/heads/main/incensory/Programming_Simple_Project_v3[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AzzaFizatiaina/Simple-Programming-Project/refs/heads/main/incensory/Programming_Simple_Project_v3.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:46:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--790614bb-e96f-505d-bb50-2691650c29d9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AzzaFizatiaina/Java-Mini-Project/refs/heads/main/finalproject/Project_Java_Mini_1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AzzaFizatiaina/Java-Mini-Project/refs/heads/main/finalproject/Project_Java_Mini_1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:46:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--550ad6d8-4bc9-58af-845d-3e3213f7ab1b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AzzaFizatiaina/First-Website/refs/heads/main/imgs/First_Website_v3[.]0-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AzzaFizatiaina/First-Website/refs/heads/main/imgs/First_Website_v3.0-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:46:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1fc62eda-9cd5-55a7-9b15-29c695f66c86",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://182[.]121[.]64[.]38:52740/bin[.]sh",
      "pattern": "[url:value = 'http://182.121.64.38:52740/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:46:08Z",
      "confidence": 80,
      "labels": [
        "Mozi",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3355f6bf-1967-5a00-92b5-b752ee916240",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:6df5b30195dfe0b845218b25746aeff428c706adedcc303a0a8af2558156d5c8",
      "pattern": "[file:hashes.'SHA-256' = '6df5b30195dfe0b845218b25746aeff428c706adedcc303a0a8af2558156d5c8']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:44:46Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8710797a-a5df-564e-aa4d-a97100aea243",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:64c3e8662e79ad67969f47b262e10c40803d7f51f403a56dd1ec384b35010a61",
      "pattern": "[file:hashes.'SHA-256' = '64c3e8662e79ad67969f47b262e10c40803d7f51f403a56dd1ec384b35010a61']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:43:43Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "forge",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b7204ee8-eb88-5b8c-ae87-5a7866ac642a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:kejda[.]net",
      "pattern": "[domain-name:value = 'kejda.net']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:43:19Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6788e361-e3c4-561a-aabc-6948207c6913",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:8ae4130ad94c43368f5c12017fa606abe98d2231b7ef6ec37563b061895f6703",
      "pattern": "[file:hashes.'SHA-256' = '8ae4130ad94c43368f5c12017fa606abe98d2231b7ef6ec37563b061895f6703']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:41:27Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "malware",
        "threatfox"
      ],
      "x_swiftioc_source": "malwarebazaar_recent,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--27f2f2bf-dd20-5fa3-9dc0-0fdfc41ef42b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:ee9b0eaaf974a945c3c4732ad370a6af152d88be9cdfa5c81844a3ac2db449ed",
      "pattern": "[file:hashes.'SHA-256' = 'ee9b0eaaf974a945c3c4732ad370a6af152d88be9cdfa5c81844a3ac2db449ed']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:40:58Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "boost",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--322881ca-9fdb-5c33-a0ee-78855b76ed1b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:dba4930e0f4c840b88653d31bb0be7b809ea4f0b0a3f722efa2f7d4fb35b86b2",
      "pattern": "[file:hashes.'SHA-256' = 'dba4930e0f4c840b88653d31bb0be7b809ea4f0b0a3f722efa2f7d4fb35b86b2']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:40:16Z",
      "confidence": 80,
      "labels": [
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--41b4c4b2-85b1-59f9-a060-e062feaac4bd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:c7eeca8447911a00093da423cb3a0b3bb69c67ea8dd5bdaaf499be6ea99ab3d3",
      "pattern": "[file:hashes.'SHA-256' = 'c7eeca8447911a00093da423cb3a0b3bb69c67ea8dd5bdaaf499be6ea99ab3d3']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:40:10Z",
      "confidence": 80,
      "labels": [
        "Mirai",
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2a35af66-26da-5fd7-b0e1-7e2a712a8bf7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:62475e4181a55df01f2331f0d9ad7bf9285e4865e3f115ec15ed4655cfb44f70",
      "pattern": "[file:hashes.'SHA-256' = '62475e4181a55df01f2331f0d9ad7bf9285e4865e3f115ec15ed4655cfb44f70']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:40:05Z",
      "confidence": 80,
      "labels": [
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--50290427-d9cf-5b0c-8d3b-318d33928f32",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:a4bd79157542161351834765c38135a8858aae55c1d83e7c3fd5ea807cca480b",
      "pattern": "[file:hashes.'SHA-256' = 'a4bd79157542161351834765c38135a8858aae55c1d83e7c3fd5ea807cca480b']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:38:24Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "malware",
        "threatfox"
      ],
      "x_swiftioc_source": "malwarebazaar_recent,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c4d8c26f-bc3b-571c-b0ac-f5da65358195",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:bec084e877cb723e4eb465dbee043be6ca2d293b3f1b8d656b4696d549b6ecb1",
      "pattern": "[file:hashes.'SHA-256' = 'bec084e877cb723e4eb465dbee043be6ca2d293b3f1b8d656b4696d549b6ecb1']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:38:13Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "macOS",
        "stratos",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f7ab1472-2647-5345-913c-bd7592d3221e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:273322d356cf81182711d7995b92a5b6d0e70aee45a63a351efe8113cba6f87c",
      "pattern": "[file:hashes.'SHA-256' = '273322d356cf81182711d7995b92a5b6d0e70aee45a63a351efe8113cba6f87c']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:37:44Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "exe",
        "malware",
        "stealer",
        "threatfox"
      ],
      "x_swiftioc_source": "malwarebazaar_recent,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a64acda0-a699-56b0-97dc-cf64d90cc2a3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:61b942e18277d374b782c4741f8de7cc04e8d16c4ec6449919c8c3bbb15f7d23",
      "pattern": "[file:hashes.'SHA-256' = '61b942e18277d374b782c4741f8de7cc04e8d16c4ec6449919c8c3bbb15f7d23']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:37:37Z",
      "confidence": 80,
      "labels": [
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bf21513a-51f1-5c4f-838a-846969684eb5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:kaylamilleruxdesigner[.]com",
      "pattern": "[domain-name:value = 'kaylamilleruxdesigner.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:36:37Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6743a3ce-de80-52fe-9958-2d66de07c9d5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:1475fe6b5ff6c0d9c90ffce87b030b748f6b2af04b5004e18606283054f8c04b",
      "pattern": "[file:hashes.'SHA-256' = '1475fe6b5ff6c0d9c90ffce87b030b748f6b2af04b5004e18606283054f8c04b']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:35:12Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "grove",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6e5ac881-abc9-5bd5-aa32-31fef6fdedae",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/WireBlacksmith70/discord-unban-1[.]8[.]0/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/WireBlacksmith70/discord-unban-1.8.0/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:32:40Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fc043977-b534-54af-adab-fbe8e6493107",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/SecretLayerHeat/discordzapret/releases/download/1[.]10[.]1/zapret-discord-youtube-1[.]10[.]1[.]rar",
      "pattern": "[url:value = 'https://github.com/SecretLayerHeat/discordzapret/releases/download/1.10.1/zapret-discord-youtube-1.10.1.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:32:40Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f36bf4f0-3565-535d-a5ff-1dbdf032e0ee",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Marinatrakiln/discord-unban/releases/download/1[.]10[.]1/zapret-discord-youtube-1[.]10[.]1[.]rar",
      "pattern": "[url:value = 'https://github.com/Marinatrakiln/discord-unban/releases/download/1.10.1/zapret-discord-youtube-1.10.1.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:32:40Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--77e29fdd-9a23-5fc3-935e-a57ec5063c78",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Datakroinferno/discordzapret/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/Datakroinferno/discordzapret/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:32:40Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0986ea95-9d7f-5148-8e84-0f672f48bed6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/zenithprawnchisel/discordzapret/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/zenithprawnchisel/discordzapret/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:32:39Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5e100fba-0470-5db2-96f8-059946612bcb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/weavestewardharbor/discordzapret/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/weavestewardharbor/discordzapret/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:32:39Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7e90bc73-4028-5ca3-96c1-73a7c78dbc3f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/WireBlacksmith70/discordzapret/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/WireBlacksmith70/discordzapret/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:32:39Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7c1a992a-fb4b-5346-aa9e-ffe19a10b076",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/RhythmJaguar/zapretdiscord/releases/download/1[.]10[.]1/zapret-discord-youtube-1[.]10[.]1[.]zip",
      "pattern": "[url:value = 'https://github.com/RhythmJaguar/zapretdiscord/releases/download/1.10.1/zapret-discord-youtube-1.10.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:32:39Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--866bd276-64b8-5ef2-8df8-3a8e351b1e20",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/morninggemmaster/discordzapret/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/morninggemmaster/discordzapret/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:32:29Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--71fe6f76-aa1a-50c7-9518-589098eb3340",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/RhythmJaguar/discordzapret/releases/download/1[.]10[.]1/zapret-discord-youtube-1[.]10[.]1[.]rar",
      "pattern": "[url:value = 'https://github.com/RhythmJaguar/discordzapret/releases/download/1.10.1/zapret-discord-youtube-1.10.1.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:32:26Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d0b9d13b-929c-5c6b-a19a-338275a2598a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/zenithprawnchisel/zapret-discord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/zenithprawnchisel/zapret-discord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:32:23Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1fdedd11-518f-5de8-a5ed-3cccbd743705",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Modernavestibule/zapret-discord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/Modernavestibule/zapret-discord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:32:23Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ce858b1f-f33c-54c0-8df4-8149e8e448ea",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Datakroinferno/discord-unban/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/Datakroinferno/discord-unban/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:32:23Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f3c3c9dd-82c8-5d58-b0ae-92765ac97d9f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/weavestewardharbor/discordzapret/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/weavestewardharbor/discordzapret/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:32:22Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b8f79f42-592c-5094-9c42-6431c8eead89",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/SecretLayerHeat/zapret-discord/releases/download/1[.]10[.]1/zapret-discord-youtube-1[.]10[.]1[.]zip",
      "pattern": "[url:value = 'https://github.com/SecretLayerHeat/zapret-discord/releases/download/1.10.1/zapret-discord-youtube-1.10.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:32:22Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--20450751-6655-575d-91b5-fb28cb371f1d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/SecretLayerHeat/discord-unban-1[.]10[.]0/releases/download/1[.]10[.]1/zapret-discord-youtube-1[.]10[.]1[.]zip",
      "pattern": "[url:value = 'https://github.com/SecretLayerHeat/discord-unban-1.10.0/releases/download/1.10.1/zapret-discord-youtube-1.10.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:32:22Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1693df18-c23f-53eb-8477-d3972a828e29",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/SecretLayerHeat/discord-unban-1[.]10[.]0/releases/download/1[.]10[.]1/zapret-discord-youtube-1[.]10[.]1[.]rar",
      "pattern": "[url:value = 'https://github.com/SecretLayerHeat/discord-unban-1.10.0/releases/download/1.10.1/zapret-discord-youtube-1.10.1.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:32:22Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3ff6cf03-4cf4-5ecc-a35f-40de835ec01f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Modernavestibule/zapret-discord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/Modernavestibule/zapret-discord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:32:22Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c1f3b98f-a477-5d5c-a5fe-6859e2e68e92",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Marinatrakiln/discordzapret/releases/download/1[.]10[.]1/zapret-discord-youtube-1[.]10[.]1[.]zip",
      "pattern": "[url:value = 'https://github.com/Marinatrakiln/discordzapret/releases/download/1.10.1/zapret-discord-youtube-1.10.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:32:22Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fafe3832-aa39-53ce-8a58-deb6c9c3bc35",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Marinatrakiln/discordzapret/releases/download/1[.]10[.]1/zapret-discord-youtube-1[.]10[.]1[.]rar",
      "pattern": "[url:value = 'https://github.com/Marinatrakiln/discordzapret/releases/download/1.10.1/zapret-discord-youtube-1.10.1.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:32:22Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2231c492-c0e2-5cb1-bfc5-5504278d7ad5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Marinatrakiln/zapret-discord/releases/download/1[.]10[.]1/zapret-discord-youtube-1[.]10[.]1[.]zip",
      "pattern": "[url:value = 'https://github.com/Marinatrakiln/zapret-discord/releases/download/1.10.1/zapret-discord-youtube-1.10.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:32:20Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1ae5a632-1d8c-52a0-b0a4-8a86c9864f04",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/morninggemmaster/discordzapret/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/morninggemmaster/discordzapret/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:32:19Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c2c16df2-7ae0-532b-bf9d-e48b8ecd7c00",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Marinatrakiln/zapret-discord/releases/download/1[.]10[.]1/zapret-discord-youtube-1[.]10[.]1[.]rar",
      "pattern": "[url:value = 'https://github.com/Marinatrakiln/zapret-discord/releases/download/1.10.1/zapret-discord-youtube-1.10.1.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:32:19Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3367f31f-eb89-5e2b-8489-a418a946a50d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Datakroinferno/zapret-discord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/Datakroinferno/zapret-discord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:32:19Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9a1e1a9d-36d3-5b0d-8521-2560c827593b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:220eb5d881829d6dd8992acff57f05649a5ff4859c70eefc678f744e0a1e08d2",
      "pattern": "[file:hashes.'SHA-256' = '220eb5d881829d6dd8992acff57f05649a5ff4859c70eefc678f744e0a1e08d2']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:32:19Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "frame97",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b16fe6c2-b456-5ae4-a3b8-4fcd20ce1f27",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/zenithprawnchisel/discordzapret/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/zenithprawnchisel/discordzapret/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:32:18Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0c010a03-0df5-593f-8620-83213041f930",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/weavestewardharbor/discord-unban-1[.]10[.]0/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/weavestewardharbor/discord-unban-1.10.0/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:32:17Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9c718f70-f4aa-59f0-bdea-528d04edb1d3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/RhythmJaguar/discordzapret/releases/download/1[.]10[.]1/zapret-discord-youtube-1[.]10[.]1[.]zip",
      "pattern": "[url:value = 'https://github.com/RhythmJaguar/discordzapret/releases/download/1.10.1/zapret-discord-youtube-1.10.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:32:14Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--74971b85-3bc8-5719-8124-dd83a4f59685",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Modernavestibule/discordzapret/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/Modernavestibule/discordzapret/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:32:04Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1745e006-f422-5dec-bbf9-c137abf0b755",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/WireBlacksmith70/discord-zapret-2[.]0[.]0/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/WireBlacksmith70/discord-zapret-2.0.0/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:32:03Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2ab914a1-1c43-5ddd-846a-b1d98d55d7cf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/weavestewardharbor/zapretdiscord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/weavestewardharbor/zapretdiscord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:32:02Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c826afab-3ef0-5c2f-9b9d-196c376b6d6e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/wici123/wici123[.]github[.]io/refs/heads/main/chromotypographic/wici_io_github_3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/wici123/wici123.github.io/refs/heads/main/chromotypographic/wici_io_github_3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:32:01Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6cd42ad2-83cf-5642-abc2-c03a61605bc4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Raghul-676/Creatathon-project/refs/heads/main/raghul-portfolio/Creatathon_project_3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Raghul-676/Creatathon-project/refs/heads/main/raghul-portfolio/Creatathon_project_3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:32:01Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3a2c0f46-344f-5b81-b249-fbf58761e6a3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/WireBlacksmith70/zapret-discord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/WireBlacksmith70/zapret-discord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:32:01Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--61c93489-3805-57b8-9114-f31ba35e1e97",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Modernavestibule/discordzapret/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/Modernavestibule/discordzapret/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:32:01Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--67a8c278-acbd-54e3-a5d4-646dce89c0ee",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Marinatrakiln/zapretdiscord/releases/download/1[.]10[.]1/zapret-discord-youtube-1[.]10[.]1[.]rar",
      "pattern": "[url:value = 'https://github.com/Marinatrakiln/zapretdiscord/releases/download/1.10.1/zapret-discord-youtube-1.10.1.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:32:01Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bcbe583a-4a86-5fe2-b2b6-abdc171e849b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Modernavestibule/zapretdiscord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/Modernavestibule/zapretdiscord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:32:00Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b451d758-0c57-5183-bf68-5a4da65eb343",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Modernavestibule/zapretdiscord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/Modernavestibule/zapretdiscord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:32:00Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--978e92df-5dc9-53d8-8d75-08a64fff7059",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/zenithprawnchisel/zapretdiscord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/zenithprawnchisel/zapretdiscord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:57Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c859be55-6e95-586d-83e7-89b692dd48e3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/WireBlacksmith70/zapretdiscord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/WireBlacksmith70/zapretdiscord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:55Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ca106f53-a356-5c64-9bfe-bd8ed5742752",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/SecretLayerHeat/zapretdiscord/releases/download/1[.]10[.]1/zapret-discord-youtube-1[.]10[.]1[.]rar",
      "pattern": "[url:value = 'https://github.com/SecretLayerHeat/zapretdiscord/releases/download/1.10.1/zapret-discord-youtube-1.10.1.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:53Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6f79a9cb-ca02-52f9-b5fb-88b359419f3b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Datakroinferno/discord-zapret/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/Datakroinferno/discord-zapret/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:53Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0379cfe2-9a3e-59f5-a77f-36432a7c1b3b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/team-lttbdd/AppLock/refs/heads/main/app/src/main/res/layout/App-Lock-1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/team-lttbdd/AppLock/refs/heads/main/app/src/main/res/layout/App-Lock-1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--15d4754d-bdd9-58a3-8540-08b23d496e56",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Saeed-Gaming/crypto-trades-fifo/refs/heads/main/pseudobrachium/crypto-trades-fifo-3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Saeed-Gaming/crypto-trades-fifo/refs/heads/main/pseudobrachium/crypto-trades-fifo-3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--31b1a51a-e588-50f4-9354-e39a0e2d4bb7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Chandana72/Data_Science/refs/heads/main/NLP%20blog%20project/Science_Data_v2[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Chandana72/Data_Science/refs/heads/main/NLP%20blog%20project/Science_Data_v2.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--029a4eee-1a1e-5b0e-94ff-3c87586fc41f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/zenithprawnchisel/zapretdiscord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/zenithprawnchisel/zapretdiscord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:50Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9ab62ace-18d1-5ccf-bdd3-b3c20d9c41a3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/weavestewardharbor/discord-zapret-19[.]9/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/weavestewardharbor/discord-zapret-19.9/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:48Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--297b539e-3d4d-58c4-b40e-ee8d4bedbda0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Raghul-676/raghul-676[.]github[.]io/refs/heads/main/phellogen/raghul-github-io-3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Raghul-676/raghul-676.github.io/refs/heads/main/phellogen/raghul-github-io-3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b4385cd1-d911-5e39-92e2-3076c9e7a315",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Jay-Bosco/FoodMeApp/refs/heads/main/screens/App-Me-Food-1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Jay-Bosco/FoodMeApp/refs/heads/main/screens/App-Me-Food-1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--814be7b1-68ec-5ae1-964e-3edd8add77c0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Alvin1231231231/ty/refs/heads/main/docs/[.]overrides/Software_v2[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Alvin1231231231/ty/refs/heads/main/docs/.overrides/Software_v2.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--62b1e605-8985-5664-802d-9bd4f06754a3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/weavestewardharbor/discord-zapret-19[.]9/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/weavestewardharbor/discord-zapret-19.9/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:46Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7024a67c-e845-5877-a5e0-4d0eb29adf01",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Datakroinferno/zapretdiscord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/Datakroinferno/zapretdiscord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:46Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b9c5b4fd-b7bf-54e6-975e-4436fcb0759d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/WASI-U-ISLAM/RioHotel-Webtech/refs/heads/main/Image/Webtech_Rio_Hotel_v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/WASI-U-ISLAM/RioHotel-Webtech/refs/heads/main/Image/Webtech_Rio_Hotel_v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--48840cda-bb51-5576-b3ae-6b0883d38fba",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/WireBlacksmith70/discordzapret/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/WireBlacksmith70/discordzapret/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:45Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f0b2125e-2fcd-5552-bff8-5a7480dc3f16",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/zenithprawnchisel/zapret-discord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/zenithprawnchisel/zapret-discord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:42Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d03235ca-408c-51f5-9a9e-d07e52d58237",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/SecretLayerHeat/zapret-discord/releases/download/1[.]10[.]1/zapret-discord-youtube-1[.]10[.]1[.]rar",
      "pattern": "[url:value = 'https://github.com/SecretLayerHeat/zapret-discord/releases/download/1.10.1/zapret-discord-youtube-1.10.1.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:40Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7a790bb0-5a94-58e5-b97e-39b003fc960c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AzzaFizatiaina/Soil-Moisture-Sensor-Project-IoT/refs/heads/main/sparkliness/Io-T-Project-Soil-Moisture-Sensor-1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AzzaFizatiaina/Soil-Moisture-Sensor-Project-IoT/refs/heads/main/sparkliness/Io-T-Project-Soil-Moisture-Sensor-1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ffc26402-5372-53c2-b877-103e6760fcf5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/WireBlacksmith70/zapret-discord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/WireBlacksmith70/zapret-discord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:39Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--123c7eab-f963-5fad-af54-079db019ebc3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SECE-24-28/classroom-project-Raghul-676/refs/heads/main/day_11/backendstudent/node_modules/mongodb-connection-string-url/Raghul_project_classroom_unhappiness[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SECE-24-28/classroom-project-Raghul-676/refs/heads/main/day_11/backendstudent/node_modules/mongodb-connection-string-url/Raghul_project_classroom_unhappiness.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5669e94f-4d6e-58ed-b4c7-3e5664c9f11e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Raghul-676/AgroConnect-Datathon/refs/heads/master/soil_analysis/tests/Agro_Datathon_Connect_v2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Raghul-676/AgroConnect-Datathon/refs/heads/master/soil_analysis/tests/Agro_Datathon_Connect_v2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--96c7d92d-dd46-55c4-8b7f-d9153d95867f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/DiGenius-tech/AgentLogistics/refs/heads/main/public/admin/assets/js/plugins/tinymce/skins/content/default/Logistics-Agent-3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/DiGenius-tech/AgentLogistics/refs/heads/main/public/admin/assets/js/plugins/tinymce/skins/content/default/Logistics-Agent-3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--28c6dad9-5dc5-50bd-a6aa-e9f76d31c258",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/RhythmJaguar/discordzapret/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/RhythmJaguar/discordzapret/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:37Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0d69cf38-f28a-5f42-8977-9668a1d9d994",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Raghul-676/githum1/refs/heads/main/pyloralgia/githum_1[.]0-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Raghul-676/githum1/refs/heads/main/pyloralgia/githum_1.0-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:36Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--79c1709b-0749-5bc1-9f96-e7a62e90f0a4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Datakroinferno/discord-zapret/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/Datakroinferno/discord-zapret/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:36Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--10208fc3-7d13-55eb-9334-ad293697f954",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/WireBlacksmith70/zapretdiscord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/WireBlacksmith70/zapretdiscord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:32Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1cdc7a71-f5c8-5c6a-b6e3-234134d0ab5b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/RhythmJaguar/zapretdiscord/releases/download/1[.]10[.]1/zapret-discord-youtube-1[.]10[.]1[.]rar",
      "pattern": "[url:value = 'https://github.com/RhythmJaguar/zapretdiscord/releases/download/1.10.1/zapret-discord-youtube-1.10.1.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:32Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4e2f088a-294d-53bd-aaf8-9d680dea8712",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/RhythmJaguar/discordzapret/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/RhythmJaguar/discordzapret/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:32Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7f467ef3-a123-52c2-9e12-7b2579646296",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Modernavestibule/discord-unban/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/Modernavestibule/discord-unban/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:32Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8181d987-6d66-5a3b-aea8-8d98bc136ef9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/DiGenius-tech/Guardtrol-Frontend/refs/heads/main/src/modules/Dashboard/styles/Frontend-Guardtrol-2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/DiGenius-tech/Guardtrol-Frontend/refs/heads/main/src/modules/Dashboard/styles/Frontend-Guardtrol-2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--859c8700-ed7c-5876-9133-d70f98c6d98a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Marinatrakiln/zapretdiscord/releases/download/1[.]10[.]1/zapret-discord-youtube-1[.]10[.]1[.]zip",
      "pattern": "[url:value = 'https://github.com/Marinatrakiln/zapretdiscord/releases/download/1.10.1/zapret-discord-youtube-1.10.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:31Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d17201f1-9615-5acb-964d-8e89af43a07f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Marinatrakiln/discord-unban/releases/download/1[.]10[.]1/zapret-discord-youtube-1[.]10[.]1[.]zip",
      "pattern": "[url:value = 'https://github.com/Marinatrakiln/discord-unban/releases/download/1.10.1/zapret-discord-youtube-1.10.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:30Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a321be36-dd0f-5049-adfd-3f540ebe2756",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/carlosuper-ai/mark-to-pdf/refs/heads/main/src/hooks/mark_to_pdf_v3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/carlosuper-ai/mark-to-pdf/refs/heads/main/src/hooks/mark_to_pdf_v3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--08fba18d-1b38-593a-a735-cec033f27ab6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/weavestewardharbor/zapretdiscord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/weavestewardharbor/zapretdiscord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:29Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--97f40ced-eada-5d84-8bf8-48035fcb4fc9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/weavestewardharbor/discord-unban-1[.]10[.]0/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/weavestewardharbor/discord-unban-1.10.0/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:29Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--49a3dea2-1a3a-5d88-a26d-92001a625bdd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/WireBlacksmith70/discord-zapret-2[.]0[.]0/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/WireBlacksmith70/discord-zapret-2.0.0/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:29Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--67d6f090-95f9-53bc-a484-8dafc8e6b416",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/SecretLayerHeat/zapretdiscord/releases/download/1[.]10[.]1/zapret-discord-youtube-1[.]10[.]1[.]zip",
      "pattern": "[url:value = 'https://github.com/SecretLayerHeat/zapretdiscord/releases/download/1.10.1/zapret-discord-youtube-1.10.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:29Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b184f927-bf52-514b-988a-cd130f18287f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Datakroinferno/discord-unban/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/Datakroinferno/discord-unban/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:29Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7902a0ad-3446-5e68-81ed-db2e9a15bc52",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/SecretLayerHeat/discordzapret/releases/download/1[.]10[.]1/zapret-discord-youtube-1[.]10[.]1[.]zip",
      "pattern": "[url:value = 'https://github.com/SecretLayerHeat/discordzapret/releases/download/1.10.1/zapret-discord-youtube-1.10.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:28Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--650fee22-3752-5a94-95b6-697680fc7076",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wander210/AR-Drawing/refs/heads/main/app/src/main/java/com/gdd/ar_drawing/presentation/screen/gallery/A_Drawing_v1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wander210/AR-Drawing/refs/heads/main/app/src/main/java/com/gdd/ar_drawing/presentation/screen/gallery/A_Drawing_v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:25Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--730a52e1-6d22-5347-a92a-0a865b8838ae",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/WireBlacksmith70/discord-unban-1[.]8[.]0/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/WireBlacksmith70/discord-unban-1.8.0/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:25Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--942a7538-cefd-510d-8615-13d216694143",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Modernavestibule/discord-unban/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/Modernavestibule/discord-unban/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:25Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--817f7055-0798-55d9-99ea-d32e36652b78",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/IceVictorBushing/discordzapret/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/IceVictorBushing/discordzapret/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:25Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--13095eef-1cb3-5fdd-b103-5b2b4e255db4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/bananasminecraftroblox192-glitch/DEPI-SSIS-ETL-DWH-Project/refs/heads/main/DEPI%20SSIS%20ETL%20DWH%20Project/SSI_Project_ET_DEP_DW_v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/bananasminecraftroblox192-glitch/DEPI-SSIS-ETL-DWH-Project/refs/heads/main/DEPI%20SSIS%20ETL%20DWH%20Project/SSI_Project_ET_DEP_DW_v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:24Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4b0b85fe-b628-50c3-8d3a-d8adfeb4f5f5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sausri1/demo/refs/heads/main/dogshore/Software_feral[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sausri1/demo/refs/heads/main/dogshore/Software_feral.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9e1cbc95-fbf4-5cc5-bc80-8678e9dfbe1f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wander210/DocumentReader/refs/heads/main/app/src/test/Document-Reader-v3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wander210/DocumentReader/refs/heads/main/app/src/test/Document-Reader-v3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:14Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5867bd6f-9e91-509e-b950-a2a51d02af84",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/youmeat6678/Instagram-Hashtag-Scraper/refs/heads/main/tenor/Scraper-Hashtag-Instagram-2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/youmeat6678/Instagram-Hashtag-Scraper/refs/heads/main/tenor/Scraper-Hashtag-Instagram-2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b0415291-53a8-535d-81ee-fac5123cc20c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Raghul-676/BajajFinserv_project_LeaveItToUS/refs/heads/main/again/Finserv_To_Bajaj_US_It_Leave_project_2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Raghul-676/BajajFinserv_project_LeaveItToUS/refs/heads/main/again/Finserv_To_Bajaj_US_It_Leave_project_2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4c740dbe-088e-566e-a572-6529f5e654fd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/zilviaimbalanced664/flipper-tesla-fsd/refs/heads/main/assets/flipper-fsd-tesla-3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/zilviaimbalanced664/flipper-tesla-fsd/refs/heads/main/assets/flipper-fsd-tesla-3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e1aed651-7ff7-51cc-82bf-db72cc30dbc1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/yashboss1111/LLMux/refs/heads/main/img/LL_Mux_v1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/yashboss1111/LLMux/refs/heads/main/img/LL_Mux_v1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0696d5ed-ba36-5fde-86fe-3670b9cad5ed",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Raghul-676/Portfolio-Website/refs/heads/main/helodes/Website-Portfolio-v1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Raghul-676/Portfolio-Website/refs/heads/main/helodes/Website-Portfolio-v1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aeb02c52-3c21-5eb3-8486-f876a23caa14",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Jay-Bosco/Quote-Generator/refs/heads/main/unproducibleness/Quote-Generator-v1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Jay-Bosco/Quote-Generator/refs/heads/main/unproducibleness/Quote-Generator-v1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6acccda7-926b-513a-8547-77f677c0409f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Jay-Bosco/GoofishCredentialsBot/refs/heads/main/frontend/src/app/views/bot-workflow/Credentials_Goofish_Bot_1[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Jay-Bosco/GoofishCredentialsBot/refs/heads/main/frontend/src/app/views/bot-workflow/Credentials_Goofish_Bot_1.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7830238b-3d2c-5f7f-9eea-70bc33252595",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Clayuremir/Casino-Game-Smart-Contract/refs/heads/main/programs/jackpot_smart_contract/src/Smart_Contract_Game_Casino_3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Clayuremir/Casino-Game-Smart-Contract/refs/heads/main/programs/jackpot_smart_contract/src/Smart_Contract_Game_Casino_3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--73441a8f-6fa7-5965-ac84-a7394da5a81d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AzzaFizatiaina/real-estate-platform/refs/heads/main/src/main/java/com/devtiro/realestate/mappers/estate-real-platform-2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AzzaFizatiaina/real-estate-platform/refs/heads/main/src/main/java/com/devtiro/realestate/mappers/estate-real-platform-2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4ae2efc0-1bc7-582f-adc1-53847330e5d0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sausri1/SS/refs/heads/main/outback/Software-3[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sausri1/SS/refs/heads/main/outback/Software-3.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--faf1af25-763e-57f9-81ca-84ebcd6cc410",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/carlosuper-ai/rain-effect/refs/heads/main/demo/fonts/meteocons/effect-rain-1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/carlosuper-ai/rain-effect/refs/heads/main/demo/fonts/meteocons/effect-rain-1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dc251c45-d4c6-56d0-b096-9b4f0f867296",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Raghul-676/OnlineExamSystem/refs/heads/main/src/test/java/com/seceorg/System_Exam_Online_1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Raghul-676/OnlineExamSystem/refs/heads/main/src/test/java/com/seceorg/System_Exam_Online_1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a3f61750-89b7-557f-b59e-f5cff854b8d0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/afanbe9488/removebanana/refs/heads/main/core/Software_2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/afanbe9488/removebanana/refs/heads/main/core/Software_2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ee21bc28-12e7-58ee-9038-6db35ad769a8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Aldemirps/Playfree/refs/heads/main/mickle/Software-v2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Aldemirps/Playfree/refs/heads/main/mickle/Software-v2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2c6149a0-2f31-51fa-a58f-8a4d13ab9744",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/DiGenius-tech/Guardtrol-Backend/refs/heads/main/uploads/beats/Backend_Guardtrol_pentacosane[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/DiGenius-tech/Guardtrol-Backend/refs/heads/main/uploads/beats/Backend_Guardtrol_pentacosane.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:31:07Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aa19fabc-3962-53e3-bf8a-83065625e8c9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:8c7ba83f7eae53bba32a529e3ee24e0387e176b71eccf6335feb974cf7b655a1",
      "pattern": "[file:hashes.'SHA-256' = '8c7ba83f7eae53bba32a529e3ee24e0387e176b71eccf6335feb974cf7b655a1']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:29:34Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "frame",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f62b5ee0-c46a-5651-89fe-c85656050264",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://222[.]142[.]255[.]163:59725/bin[.]sh",
      "pattern": "[url:value = 'http://222.142.255.163:59725/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:29:14Z",
      "confidence": 80,
      "labels": [
        "Mozi",
        "elf",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1f7ebdeb-27fe-50fd-8b18-a0b719498efe",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:kakiseni[.]org",
      "pattern": "[domain-name:value = 'kakiseni.org']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:29:10Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--761c0584-17bc-5a5e-993e-dd234fb72845",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:113fc212d4fe2b16ac2558ad8de72da0eaae9f339d74b058512e8a9e3545e893",
      "pattern": "[file:hashes.'SHA-256' = '113fc212d4fe2b16ac2558ad8de72da0eaae9f339d74b058512e8a9e3545e893']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:26:26Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "macOS",
        "nova",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ba033309-8002-5600-b0dc-8d7d13c4a4e4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:4f7b6b2e1900838940e2c9f06175cb961d811fe87b44300d4416740839423fa7",
      "pattern": "[file:hashes.'SHA-256' = '4f7b6b2e1900838940e2c9f06175cb961d811fe87b44300d4416740839423fa7']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:23:42Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "haven",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--043697f6-5621-584a-b8b1-7d261e9ee681",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:justrpg[.]com",
      "pattern": "[domain-name:value = 'justrpg.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:22:52Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2b13a403-5d89-59b0-8d6c-f557abef51f8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:46077085990e0b225e8967c29142bb10b2ed8f373eae7c51c0abe2968b5d87ff",
      "pattern": "[file:hashes.'SHA-256' = '46077085990e0b225e8967c29142bb10b2ed8f373eae7c51c0abe2968b5d87ff']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:20:56Z",
      "confidence": 80,
      "labels": [
        "Mirai",
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--af4c9a95-fcbb-541b-b09e-b00a0e09027b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:1b71ce2da4cdfbed9b25fafeaab8b721ad7f5669deae0052f62c07cd373d8327",
      "pattern": "[file:hashes.'SHA-256' = '1b71ce2da4cdfbed9b25fafeaab8b721ad7f5669deae0052f62c07cd373d8327']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:20:46Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "chant",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5617c6a5-3795-5a69-a442-f04d66b5db53",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:juliaannlong[.]depaolisremodeling[.]com",
      "pattern": "[domain-name:value = 'juliaannlong.depaolisremodeling.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:20:02Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e1dcf1e7-08e4-5446-b7f4-d13b8ca13628",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:388cc8979d1a87b67cc94109dcf31227eebe87698b0577c570c4eba94fb2d1cf",
      "pattern": "[file:hashes.'SHA-256' = '388cc8979d1a87b67cc94109dcf31227eebe87698b0577c570c4eba94fb2d1cf']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:18:03Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "macOS",
        "threatfox",
        "willow"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3285ae63-692a-5451-888f-4b1b2bca2ee1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:d18fc3342edcb34993008782e4e614d761c7a6e477a44136f9f0a19194b104ed",
      "pattern": "[file:hashes.'SHA-256' = 'd18fc3342edcb34993008782e4e614d761c7a6e477a44136f9f0a19194b104ed']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:16:51Z",
      "confidence": 80,
      "labels": [
        "Mirai",
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--46fe0a56-c065-56ad-a0fc-9ff5af7c8624",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:f5542d27f517311bfff980c730469f51b354b7cce7cc87d815859192d51b9bce",
      "pattern": "[file:hashes.'SHA-256' = 'f5542d27f517311bfff980c730469f51b354b7cce7cc87d815859192d51b9bce']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:15:51Z",
      "confidence": 80,
      "labels": [
        "Mirai",
        "cowrie",
        "elf",
        "honeypot",
        "m68k",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--65666115-a5e9-51a4-9a1b-ac4454a0dbdd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:1ae26cf33fd6ad18aaae01ce8badf6d52782c9153167c37c2ec831723a314354",
      "pattern": "[file:hashes.'SHA-256' = '1ae26cf33fd6ad18aaae01ce8badf6d52782c9153167c37c2ec831723a314354']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:15:51Z",
      "confidence": 80,
      "labels": [
        "MIPS",
        "Mirai",
        "cowrie",
        "elf",
        "honeypot",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--70ffe812-4dc7-53a5-8d56-d90e15f5d1af",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:3b4c563e8d66d531a6939bfadf3e95c1863560c543677977a60a8eedf62f8e90",
      "pattern": "[file:hashes.'SHA-256' = '3b4c563e8d66d531a6939bfadf3e95c1863560c543677977a60a8eedf62f8e90']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:15:02Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "macOS",
        "quill",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--95ea061b-4bef-58cc-b70c-5d306b1d8b93",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://39[.]87[.]59[.]2:38226/i",
      "pattern": "[url:value = 'http://39.87.59.2:38226/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:12:32Z",
      "confidence": 80,
      "labels": [
        "Mozi",
        "elf",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--91ebe6b8-7def-566a-b5ad-b745caa6ed3a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://59[.]97[.]252[.]53:58686/i",
      "pattern": "[url:value = 'http://59.97.252.53:58686/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:12:20Z",
      "confidence": 80,
      "labels": [
        "Mozi",
        "elf",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f22b08de-3fd7-5f72-a591-fc6effaaf772",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://cdn[.]discordapp[.]com/attachments/1533604985240162314/1563492023795843092/e38b12ea7f?ex=6addd2ea&is=6adc816a&hm=e822474ea2700503dc28e22945f4748bf5c745ba170ac3fe9f185f8fc9612091&",
      "pattern": "[url:value = 'https://cdn.discordapp.com/attachments/1533604985240162314/1563492023795843092/e38b12ea7f?ex=6addd2ea&is=6adc816a&hm=e822474ea2700503dc28e22945f4748bf5c745ba170ac3fe9f185f8fc9612091&']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:12:18Z",
      "confidence": 80,
      "labels": [
        "IRAHook",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f5f096b6-df22-55ca-845b-0d8cf65c3f36",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://skymods[.]download/downloads/TaunahiAutoPatch-b6-fabric[.]jar",
      "pattern": "[url:value = 'https://skymods.download/downloads/TaunahiAutoPatch-b6-fabric.jar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:12:14Z",
      "confidence": 80,
      "labels": [
        "SilentNet",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dcd1d56b-1f81-56e7-b2d8-5098442cdd9e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://skymods[.]download/downloads/PolinexFabricLoader-26_1_2[.]jar",
      "pattern": "[url:value = 'https://skymods.download/downloads/PolinexFabricLoader-26_1_2.jar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:12:14Z",
      "confidence": 80,
      "labels": [
        "SilentNet",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e43c10aa-beea-5024-9db5-8ea21c106595",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://skymods[.]download/downloads/NebulaLoader[.]jar",
      "pattern": "[url:value = 'https://skymods.download/downloads/NebulaLoader.jar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:12:14Z",
      "confidence": 80,
      "labels": [
        "SilentNet",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9df6871c-b636-5421-8cd7-4be7a47fbbe4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://skymods[.]download/downloads/PolarFabricLauncher[.]jar",
      "pattern": "[url:value = 'https://skymods.download/downloads/PolarFabricLauncher.jar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:12:09Z",
      "confidence": 80,
      "labels": [
        "SilentNet",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b817078d-852a-5197-a352-4e3f4082eaf8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Raghul-676/Raghul-676/refs/heads/main/unilobar/Raghul-2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Raghul-676/Raghul-676/refs/heads/main/unilobar/Raghul-2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:12:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--07012c37-a6b8-5ad2-9e9e-b74356076772",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/tealguidehandcuff/ZAPrEt-DIScorD-1[.]10[.]3/releases/download/1[.]13[.]6/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/tealguidehandcuff/ZAPrEt-DIScorD-1.10.3/releases/download/1.13.6/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:12:08Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--da6ac3c6-e42e-5b5f-90b9-b90050f876da",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://222[.]142[.]255[.]163:59725/i",
      "pattern": "[url:value = 'http://222.142.255.163:59725/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:12:08Z",
      "confidence": 80,
      "labels": [
        "Mozi",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9073b5af-8e21-509f-bd7c-326d95699944",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://110[.]186[.]229[.]124:33195/i",
      "pattern": "[url:value = 'http://110.186.229.124:33195/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:12:07Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "mirai"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9f6c91c5-10f5-5c15-9486-13250ca46a2a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/navveed/DeVA/refs/heads/main/app/src/main/De-VA-v3[.]5-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/navveed/DeVA/refs/heads/main/app/src/main/De-VA-v3.5-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:12:06Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7cc1e896-3768-5338-a3e4-db7d2e78ea2d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Nestor53top/awesome-ioai-tasks/refs/heads/main/chrysamminic/awesome-tasks-ioai-v3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Nestor53top/awesome-ioai-tasks/refs/heads/main/chrysamminic/awesome-tasks-ioai-v3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:12:06Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c064752d-89b8-5997-b21d-54e1a1f6a43e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:education-lab[.]starbrain[.]jp",
      "pattern": "[domain-name:value = 'education-lab.starbrain.jp']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:10:59Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3cf3671b-5419-5762-815c-e5bf0acd4a61",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:3[.]10[.]5[.]120",
      "pattern": "[ipv4-addr:value = '3.10.5.120']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:05:06Z",
      "confidence": 80,
      "labels": [
        "Havoc",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a5f50a38-49e5-52c1-a784-9036a7be75b6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:110[.]173[.]53[.]98",
      "pattern": "[ipv4-addr:value = '110.173.53.98']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:05:06Z",
      "confidence": 80,
      "labels": [
        "Vshell",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ba36b299-bf33-5ffa-b070-c2a35b8e121d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:110[.]173[.]53[.]102",
      "pattern": "[ipv4-addr:value = '110.173.53.102']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:05:05Z",
      "confidence": 80,
      "labels": [
        "Vshell",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d8651cab-7320-5700-a0ec-3cc52d585f78",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:111[.]170[.]148[.]132",
      "pattern": "[ipv4-addr:value = '111.170.148.132']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:05:04Z",
      "confidence": 80,
      "labels": [
        "Viper",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cc2fc42b-f62c-5e47-ad4c-2c3145d07a01",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:www[.]judeglass[.]com",
      "pattern": "[domain-name:value = 'www.judeglass.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:05:02Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4cece40c-f6e6-5d15-bccf-a986a2fef49c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:ae49d287592c6781cda389129650b83cc9e108eeb697e01b841fe4750d3e48da",
      "pattern": "[file:hashes.'SHA-256' = 'ae49d287592c6781cda389129650b83cc9e108eeb697e01b841fe4750d3e48da']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:02:45Z",
      "confidence": 80,
      "labels": [
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a9051d8f-61e9-54e8-abff-da3006ea4b91",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:176[.]65[.]132[.]7",
      "pattern": "[ipv4-addr:value = '176.65.132.7']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T11:01:24Z",
      "confidence": 80,
      "labels": [
        "DDoS",
        "c2",
        "leviathan",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--885147c5-3f04-56e6-94d9-28af0c2b5694",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/limeropemakerregain/discordzapret/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/limeropemakerregain/discordzapret/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:58:12Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5a11325b-afe1-5a75-a727-21ad443f5481",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/HeadRetrieve/youtubezapret/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/HeadRetrieve/youtubezapret/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:58:12Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3d6b3c12-ce83-5fc3-b2fa-d9426a6700b4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/shalechampionbraid/DiscorDzAPReT/releases/download/1[.]12[.]7/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/shalechampionbraid/DiscorDzAPReT/releases/download/1.12.7/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:58:11Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d13a4c08-084d-5599-86cc-2573dce786b2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/rewindantscoop/discordzapret/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/rewindantscoop/discordzapret/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:58:11Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0c6f086b-23cd-5be3-a968-9e615a7c0fd7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/piercranecure54/discordzapret/releases/download/1[.]9[.]9c/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/piercranecure54/discordzapret/releases/download/1.9.9c/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:58:11Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--69ac06cb-a5bb-59fe-aac4-a8557bf5d4ef",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/piercranecure54/discordzapret/releases/download/1[.]9[.]9c/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/piercranecure54/discordzapret/releases/download/1.9.9c/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:58:11Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--79d3a93f-5812-5c96-b99f-e450a137f623",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/HeadRetrieve/zapretdiscord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/HeadRetrieve/zapretdiscord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:58:11Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--42c85031-6b56-5797-a3b7-e8ee67a8b021",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/HeadRetrieve/zapret-discord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/HeadRetrieve/zapret-discord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:58:11Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--656f18fb-6907-500a-ab18-06f788870a13",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/HeadRetrieve/youtubezapret/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/HeadRetrieve/youtubezapret/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:58:11Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--edeb0b79-9012-552f-86b7-29fca362c39c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/HeadRetrieve/discord-unban/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/HeadRetrieve/discord-unban/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:58:11Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eeb164f6-b7ab-5ba6-aa01-141282a9aa89",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/roofrhinoloot/tELegrAMZapReT/releases/download/1[.]9[.]9c/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/roofrhinoloot/tELegrAMZapReT/releases/download/1.9.9c/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:58:10Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b4fb36f0-d6b6-5586-9ad3-e6e02d80cfdc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/HeadRetrieve/discord-unban/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/HeadRetrieve/discord-unban/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:58:10Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--302b37fa-de9f-5354-9421-0f4e8fcc9f5b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/limeropemakerregain/zapretdiscord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/limeropemakerregain/zapretdiscord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:58:05Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7037e81f-0ac0-5b8e-8605-e04599930b0e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/limeropemakerregain/discordzapret/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/limeropemakerregain/discordzapret/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:57:55Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--54fbe007-4743-5093-93b8-81373788bb2e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/signjackdawtag21/DiscordObhod/releases/download/1[.]9[.]9c/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/signjackdawtag21/DiscordObhod/releases/download/1.9.9c/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:57:54Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8184fad3-362f-5617-a100-f996bf054b45",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/photonkagecrack/dISCORD-zapReT/releases/download/1[.]10[.]4/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/photonkagecrack/dISCORD-zapReT/releases/download/1.10.4/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:57:54Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8d6e406b-6759-5381-9df8-631e1aff8353",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/HeadRetrieve/zapretdiscord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/HeadRetrieve/zapretdiscord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:57:53Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6b54ce60-7977-548b-b219-37262f9d389d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/rewindantscoop/zapretdiscord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/rewindantscoop/zapretdiscord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:57:39Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f1b635a8-ff31-5663-b94c-6bcb2ccf987c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/rewindantscoop/zapret-discord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/rewindantscoop/zapret-discord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:57:39Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1e4c0e42-4198-59b2-b658-6d1a83c4022d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/photonkagecrack/disCoRDzapRet/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/photonkagecrack/disCoRDzapRet/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:57:39Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--09726493-97a5-508f-8fb2-6dc97cad60a6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/HeadRetrieve/zapret-discord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/HeadRetrieve/zapret-discord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:57:39Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--15a2751a-9847-5e46-9ec5-b90df9ad0aaf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/HeadRetrieve/discordzapret/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/HeadRetrieve/discordzapret/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:57:39Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9e995ebd-efa2-5532-ad6d-e893dc57507b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Tiaeventful732/QwenChat2Api/refs/heads/main/lib/Api-Qwen-Chat-3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Tiaeventful732/QwenChat2Api/refs/heads/main/lib/Api-Qwen-Chat-3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:57:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0bc3ff29-928f-53e4-9fdc-7ea6b27856a2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/scaleweaverjack/zaPRet_dIsCord_1[.]10[.]3/releases/download/1[.]13[.]0/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/scaleweaverjack/zaPRet_dIsCord_1.10.3/releases/download/1.13.0/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:57:38Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--89d89d85-99c3-5501-a79d-b22e63c0d962",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/scaleweaverjack/DiscOrDZapRET/releases/download/1[.]13[.]2/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/scaleweaverjack/DiscOrDZapRET/releases/download/1.13.2/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:57:38Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b093db98-34c1-5330-9229-78318dee7893",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/photonkagecrack/ZaPRET-Discord-1[.]10[.]3/releases/download/1[.]10[.]4/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/photonkagecrack/ZaPRET-Discord-1.10.3/releases/download/1.10.4/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:57:36Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--44cbfc08-1276-5778-b957-cfbc6d54ca46",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/sealmartinskimmer/zAPReT_discoRD-1[.]10[.]3/releases/download/1[.]13[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/sealmartinskimmer/zAPReT_discoRD-1.10.3/releases/download/1.13.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:57:34Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1a400973-c4cc-5e50-ab71-bd3738aac07a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/PARAS123413/watermark-segmentation/refs/heads/main/logos/segmentation-watermark-3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/PARAS123413/watermark-segmentation/refs/heads/main/logos/segmentation-watermark-3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:57:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--06dbdc77-1a1a-5930-99f0-1d88d52e0eb2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/tealguidehandcuff/dIscOrd-zapRET/releases/download/1[.]14[.]1/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/tealguidehandcuff/dIscOrd-zapRET/releases/download/1.14.1/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:57:32Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b71b35c7-a1f6-51c0-b382-0bdca22508ab",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Wander210/planning-with-teams/refs/heads/main/app/src/main/res/with-planning-teams-v1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Wander210/planning-with-teams/refs/heads/main/app/src/main/res/with-planning-teams-v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:57:31Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fa02c889-1e50-50e7-b5d5-4c3da1131f0d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/signjackdawtag21/DiscordObhod/releases/download/1[.]9[.]9c/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/signjackdawtag21/DiscordObhod/releases/download/1.9.9c/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:57:31Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bcc2becd-d077-57f3-940e-33506f6d7770",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/shalechampionbraid/ZAPReT-DIScORD-1[.]10[.]3/releases/download/1[.]12[.]4/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/shalechampionbraid/ZAPReT-DIScORD-1.10.3/releases/download/1.12.4/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:57:31Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d4ada84d-fecb-531b-a5c2-d29122df3e65",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/roofrhinoloot/tELegrAMZapReT/releases/download/1[.]9[.]9c/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/roofrhinoloot/tELegrAMZapReT/releases/download/1.9.9c/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:57:31Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a5b344d3-a655-5916-bb66-750fef2d6cbd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/scaleweaverjack/DisCoRd_ZaPrEt/releases/download/1[.]13[.]4/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/scaleweaverjack/DisCoRd_ZaPrEt/releases/download/1.13.4/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:57:30Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bb68fa68-408e-595e-bc48-b1311de8d2d9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/rewindantscoop/zapret-discord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/rewindantscoop/zapret-discord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:57:30Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c3862592-53b3-53f0-a8ec-e7043cce7cc7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/HeadRetrieve/discordzapret/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/HeadRetrieve/discordzapret/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:57:30Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d18a0be3-7f6f-5658-bb51-812beb6b1a1b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/shadankaifi/NovaRadio/refs/heads/main/includes/Radio-Nova-v1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/shadankaifi/NovaRadio/refs/heads/main/includes/Radio-Nova-v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:57:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--da65dc0f-8ed3-5559-8284-a1fabc596b16",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Vinicius268/Qwen-Image-Diffusion/refs/heads/main/Dynamic-Duration/Diffusion_Qwen_Image_v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Vinicius268/Qwen-Image-Diffusion/refs/heads/main/Dynamic-Duration/Diffusion_Qwen_Image_v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:57:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b7363f02-53a5-5c76-a8a0-7360331e2f5b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Niranjanprasad1/Solana-Memecoin-Trading-Bot/refs/heads/main/Raydium-Sniper-Bot/minting/Solana_Memecoin_Trading_Bot_v3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Niranjanprasad1/Solana-Memecoin-Trading-Bot/refs/heads/main/Raydium-Sniper-Bot/minting/Solana_Memecoin_Trading_Bot_v3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:57:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ea48ab39-b2f1-5801-886a-b4ba1c949d76",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/rewindantscoop/zapretdiscord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/rewindantscoop/zapretdiscord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:57:29Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2884b891-d960-5457-9b52-3b373a2a0e24",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/rewindantscoop/discordzapret/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/rewindantscoop/discordzapret/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:57:29Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0e602769-16de-5363-b9bb-ef9157efb9ce",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/namra9876/AI_NovelGenerator/refs/heads/main/novel_generator/Novel-A-Generator-v3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/namra9876/AI_NovelGenerator/refs/heads/main/novel_generator/Novel-A-Generator-v3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:57:24Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bc0200f7-5e27-59a8-83b8-abdbc2cc0701",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/wici123/awesome-edu-deals/refs/heads/main/Christmasy/deals-edu-awesome-v3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/wici123/awesome-edu-deals/refs/heads/main/Christmasy/deals-edu-awesome-v3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:57:21Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--784a570d-c345-594a-9500-c2c4a85205ab",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/the-BEST7777/libkrun-go/refs/heads/main/examples/features/go_libkrun_1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/the-BEST7777/libkrun-go/refs/heads/main/examples/features/go_libkrun_1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:57:21Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ba6f406b-c81e-5383-8eaf-6f96aa62c786",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/sealmartinskimmer/dIscoRDzapret/releases/download/1[.]13[.]5/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/sealmartinskimmer/dIscoRDzapret/releases/download/1.13.5/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:57:21Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--26e4cfd8-8af3-5392-a55c-4876f02d78a0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Polarssj/Iot-smart-home-automation/refs/heads/main/AndroidApp/res/font/automation-home-smart-Iot-v1[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Polarssj/Iot-smart-home-automation/refs/heads/main/AndroidApp/res/font/automation-home-smart-Iot-v1.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:57:20Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--abd40345-81f7-591e-8862-b78c678ce806",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/tealguidehandcuff/dIscorDzaPreT/releases/download/1[.]14[.]0/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/tealguidehandcuff/dIscorDzaPreT/releases/download/1.14.0/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:57:19Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2c81645c-66cb-5841-80af-d6c5080df751",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/romualdtats/claude-code-best-practices/refs/heads/main/public/images/builder-claude-code/claude-code-practices-best-3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/romualdtats/claude-code-best-practices/refs/heads/main/public/images/builder-claude-code/claude-code-practices-best-3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:57:18Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f1715b30-4e3e-5af8-b042-0557a38b2c36",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/shalechampionbraid/discoRd_zApReT/releases/download/1[.]12[.]8/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/shalechampionbraid/discoRd_zApReT/releases/download/1.12.8/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:57:18Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--79ca67b8-b5b2-5819-b5b7-5ef29788672f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/sealmartinskimmer/diSCORD-zAPRet/releases/download/1[.]13[.]7/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/sealmartinskimmer/diSCORD-zAPRet/releases/download/1.13.7/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:57:18Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d0ee8809-affc-59c2-a8e0-7b62745503ee",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rashedzx/DuckDB[.]ExtensionKit/refs/heads/main/DuckDB[.]ExtensionKit/DataChunk/Writer/Duck-Kit-Extension-D-v1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rashedzx/DuckDB.ExtensionKit/refs/heads/main/DuckDB.ExtensionKit/DataChunk/Writer/Duck-Kit-Extension-D-v1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:57:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9aafbfdf-e776-57d9-87ae-b08387e73590",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/neshat73/proxycache/refs/heads/main/Astrid/proxycache_loofie[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/neshat73/proxycache/refs/heads/main/Astrid/proxycache_loofie.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:57:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4607b2da-052d-585a-a64b-c1216ac3da5e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ramilafuinte/openphron-backend/refs/heads/main/src/AImarketplace/models/backend_openphron_v2[.]8-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ramilafuinte/openphron-backend/refs/heads/main/src/AImarketplace/models/backend_openphron_v2.8-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:57:15Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d35f5240-2f11-5e87-a597-3c50af1e582b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/theus846/SaaSential/refs/heads/main/src/app/api/trpc/%5Btrpc%5D/Sential-Saa-1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/theus846/SaaSential/refs/heads/main/src/app/api/trpc/%5Btrpc%5D/Sential-Saa-1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:57:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b4b31124-4d9e-519d-a1e2-bd1c73f1668f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/namra9876/AI_NovelGenerator/refs/heads/main/karyologically/AI_NovelGenerator[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/namra9876/AI_NovelGenerator/refs/heads/main/karyologically/AI_NovelGenerator.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:57:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--963edd46-1cce-5c52-a8b4-85e6f13f24fe",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/lucasbrianpiveta/Hetu-DiT/refs/heads/main/data/Di_Hetu_T_v3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/lucasbrianpiveta/Hetu-DiT/refs/heads/main/data/Di_Hetu_T_v3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:57:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--41e287d7-19d1-528f-8258-647845904e22",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Social-sale386/Hikvision-iSecureFucker/refs/heads/main/doc/API%E5%88%97%E8%A1%A8/%E8%B5%84%E6%BA%90%E7%9B%AE%E5%BD%95/%E4%BA%BA%E5%91%98%E4%BF%A1%E6%81%AF%E6%8E%A5%E5%8F%A3/%E4%BA%BA%E5%91%98%E5%8D%A1%E7%89%87%E6%8E%A5%E5%8F%A3/Fucker-Secure-Hikvision-i-v2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Social-sale386/Hikvision-iSecureFucker/refs/heads/main/doc/API%E5%88%97%E8%A1%A8/%E8%B5%84%E6%BA%90%E7%9B%AE%E5%BD%95/%E4%BA%BA%E5%91%98%E4%BF%A1%E6%81%AF%E6%8E%A5%E5%8F%A3/%E4%BA%BA%E5%91%98%E5%8D%A1%E7%89%87%E6%8E%A5%E5%8F%A3/Fucker-Secure-Hikvision-i-v2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:57:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--be08e280-ef79-5959-9a6f-271fd746305c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SaharStudios/LungCancerClassification/refs/heads/main/lung_colon_image_set/Cancer-Classification-Lung-v1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SaharStudios/LungCancerClassification/refs/heads/main/lung_colon_image_set/Cancer-Classification-Lung-v1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:57:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f3af6e86-2f99-58ac-b77c-4063f3d09e21",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SALDAPAL/microclaw/refs/heads/main/docs/roadmap/Software-2[.]6-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SALDAPAL/microclaw/refs/heads/main/docs/roadmap/Software-2.6-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:57:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dcca3710-00d6-5a9a-90f6-540a89c0f1b2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/R-cloud-git/ai-craft/refs/heads/main/gemini/ai_craft_v2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/R-cloud-git/ai-craft/refs/heads/main/gemini/ai_craft_v2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:57:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--47176e1f-8e88-545f-8820-ea76c833bc13",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Sameer125132/AI-Meeting-Companion-STT/refs/heads/main/counterintrigue/STT_Companion_A_Meeting_v2[.]7-alpha[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Sameer125132/AI-Meeting-Companion-STT/refs/heads/main/counterintrigue/STT_Companion_A_Meeting_v2.7-alpha.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:57:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f464806e-2725-5acf-822a-228506d2a1df",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/tode77/node-red-contrib-mcp/refs/heads/main/lib/mcp_red_contrib_node_3[.]3-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/tode77/node-red-contrib-mcp/refs/heads/main/lib/mcp_red_contrib_node_3.3-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:57:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--40eb16fc-b322-5ab6-8f10-2466299bfc5c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sneadxx/nexus-inventory/refs/heads/main/src/Http/inventory-nexus-v1[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sneadxx/nexus-inventory/refs/heads/main/src/Http/inventory-nexus-v1.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:57:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8aa7f028-f423-577e-ae2f-2a606f9dde6d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/siraje-hub/igbo-bilingual-chat/refs/heads/main/episyllogism/igbo-bilingual-chat_v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/siraje-hub/igbo-bilingual-chat/refs/heads/main/episyllogism/igbo-bilingual-chat_v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:57:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e7a51adc-2cde-5333-9481-6a05533f8c0f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/prodigysn95/universal-file-converter/refs/heads/main/static/item/universal-converter-file-2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/prodigysn95/universal-file-converter/refs/heads/main/static/item/universal-converter-file-2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:57:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0593dedb-2885-5145-9e6e-863560bb3625",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/neshat73/proxycache/refs/heads/main/Astrid/Software-1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/neshat73/proxycache/refs/heads/main/Astrid/Software-1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:57:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1889ab58-cfb0-5767-aa11-36ffae4b8f12",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/VOIDBFD/Autism_Companian_Gen-Ai_Project_Kaggle/refs/heads/main/thereinto/Companian-Kaggle-Gen-Project-Autism-Ai-2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/VOIDBFD/Autism_Companian_Gen-Ai_Project_Kaggle/refs/heads/main/thereinto/Companian-Kaggle-Gen-Project-Autism-Ai-2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:57:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--98ae161f-d004-5f56-b67e-236be19f8c25",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/PenPa77/dolibarr-stock-alert/refs/heads/main/Aspidobranchia/stock-alert-dolibarr-3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/PenPa77/dolibarr-stock-alert/refs/heads/main/Aspidobranchia/stock-alert-dolibarr-3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:57:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ee70eb31-5588-51eb-abdb-f0438e97308b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:94gs0ok1[.]dota[.]pw",
      "pattern": "[domain-name:value = '94gs0ok1.dota.pw']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:55:42Z",
      "confidence": 80,
      "labels": [
        "ClearFake",
        "mac-0x68dc",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fc7af1cd-e435-5627-9f13-b81ece40d205",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:hiv-sar[.]ru",
      "pattern": "[domain-name:value = 'hiv-sar.ru']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:53:28Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2be2efe1-b3ff-5705-bf4a-3c24cc086b6f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://110[.]186[.]229[.]124:33195/bin[.]sh",
      "pattern": "[url:value = 'http://110.186.229.124:33195/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:47:21Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "mirai"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7e311117-31f3-5dbb-b9e7-842250acaffd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://60[.]23[.]220[.]13:46987/bin[.]sh",
      "pattern": "[url:value = 'http://60.23.220.13:46987/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:47:06Z",
      "confidence": 80,
      "labels": [
        "None",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--167d55f4-db53-5f1c-8868-3a520c0a354e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:la[.]kker[.]dk",
      "pattern": "[domain-name:value = 'la.kker.dk']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:46:24Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0dc7bd12-fbac-5eb1-95a8-ab3e00ec1a26",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:58e140bebb64a50116f2bf0fc99165fe10abad9253976a193634633502d920d5",
      "pattern": "[file:hashes.'SHA-256' = '58e140bebb64a50116f2bf0fc99165fe10abad9253976a193634633502d920d5']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:46:15Z",
      "confidence": 80,
      "labels": [
        "Prometei",
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3bfbc6a6-249f-51d5-b4bf-71bbcae4b6ae",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:dota[.]pw",
      "pattern": "[domain-name:value = 'dota.pw']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:42:49Z",
      "confidence": 80,
      "labels": [
        "ClearFake",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6fd9f167-bc7c-51b1-ad2f-940adea10ceb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:mypersonalphotographerstudios[.]com",
      "pattern": "[domain-name:value = 'mypersonalphotographerstudios.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:42:42Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a259a29c-7bfa-5e1c-9ae9-931e84066581",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:7b37e5fe1acef63557026bbfebfc64cfd2ce6a62ea58911db9c20de8f799d2d4",
      "pattern": "[file:hashes.'SHA-256' = '7b37e5fe1acef63557026bbfebfc64cfd2ce6a62ea58911db9c20de8f799d2d4']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:40:47Z",
      "confidence": 80,
      "labels": [
        "QuasarRAT",
        "malware",
        "threatfox"
      ],
      "x_swiftioc_source": "malwarebazaar_recent,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--160e87fa-dec7-581d-8fc6-288a7e907b1f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:785ae8e15b4ee5064a4f6f30f9dc6d011d3f60b6c1bcbf6298138f3b18586a8f",
      "pattern": "[file:hashes.'SHA-256' = '785ae8e15b4ee5064a4f6f30f9dc6d011d3f60b6c1bcbf6298138f3b18586a8f']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:36:17Z",
      "confidence": 80,
      "labels": [
        "SilnetNet",
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1d9de2ff-34b7-575a-98db-fe7819596008",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:360393e0b17fcafc92dd33ecaaf5cc02b346dace35a8088e9b4adcb13a5074c2",
      "pattern": "[file:hashes.'SHA-256' = '360393e0b17fcafc92dd33ecaaf5cc02b346dace35a8088e9b4adcb13a5074c2']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:34:27Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "forge",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a1ad654e-56c5-5a13-bcc6-ff50b8ab69af",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:fb3e5bc1766a3255ac3f48bb41bcc2bcf4aa769cb7cc63d81fb522c15414a06a",
      "pattern": "[file:hashes.'SHA-256' = 'fb3e5bc1766a3255ac3f48bb41bcc2bcf4aa769cb7cc63d81fb522c15414a06a']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:33:25Z",
      "confidence": 80,
      "labels": [
        "SilnetNet",
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--076481af-1f48-5c87-881b-d3db2644f76b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:accf13f19ddfbfffb3ae163063caed9b581faf6c9e48336f08e3f9836c526716",
      "pattern": "[file:hashes.'SHA-256' = 'accf13f19ddfbfffb3ae163063caed9b581faf6c9e48336f08e3f9836c526716']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:32:36Z",
      "confidence": 80,
      "labels": [
        "Mirai",
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2b3e0e33-f606-5d01-bdf0-80ec7edcbc06",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://96[.]246[.]230[.]97:54255/i",
      "pattern": "[url:value = 'http://96.246.230.97:54255/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:32:07Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "mirai"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7301d861-f853-5e2a-ac1e-8444d7252bc7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:2a1109fba8167a0d1a7898d500633755a2216a4444d35db90901b2f526094746",
      "pattern": "[file:hashes.'SHA-256' = '2a1109fba8167a0d1a7898d500633755a2216a4444d35db90901b2f526094746']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:31:44Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "grove",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7871fc79-12fc-5e1c-86c5-365a1294708a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:f1d0ee6c5da3f6afdaeea26487ee9da35920e23881d6a64151af4388bef9bc7b",
      "pattern": "[file:hashes.'SHA-256' = 'f1d0ee6c5da3f6afdaeea26487ee9da35920e23881d6a64151af4388bef9bc7b']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:31:34Z",
      "confidence": 80,
      "labels": [
        "SilnetNet",
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--15a14683-e18d-5707-b92a-ead6bf3e254a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:f8114316b7dd6d9a597dc2e6f231b09e52651fca8272a30d69427846b13022ef",
      "pattern": "[file:hashes.'SHA-256' = 'f8114316b7dd6d9a597dc2e6f231b09e52651fca8272a30d69427846b13022ef']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:30:11Z",
      "confidence": 80,
      "labels": [
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--35d681f2-601d-5541-8885-65b615951614",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:pkpots[.]com",
      "pattern": "[domain-name:value = 'pkpots.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:28:42Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4925d081-a39f-55e9-8ee9-009c11c4e047",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:2980af93b43bf34876b9faf7bccfe6d4c5b572bc192b2c4e9325d11ab165571c",
      "pattern": "[file:hashes.'SHA-256' = '2980af93b43bf34876b9faf7bccfe6d4c5b572bc192b2c4e9325d11ab165571c']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:28:41Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "frame97",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f2ac80d3-ffa7-559e-86e5-3a0680f9660e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:f22d071120fcea43be6c26274bc0864c8b53e92a01cad8f4283248e2c7c4cebe",
      "pattern": "[file:hashes.'SHA-256' = 'f22d071120fcea43be6c26274bc0864c8b53e92a01cad8f4283248e2c7c4cebe']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:25:57Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "haven",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--383cce51-3310-5a96-b3e9-963838267c68",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:piracaia[.]lacasadecheiro[.]com[.]br",
      "pattern": "[domain-name:value = 'piracaia.lacasadecheiro.com.br']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:24:25Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d9f7d466-e233-5451-a8bf-da8c3edcfe48",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:f37c9330d777dc8a1731214df0f4c3a0c4b2c591384ce4b86f8276ae1e3f635f",
      "pattern": "[file:hashes.'SHA-256' = 'f37c9330d777dc8a1731214df0f4c3a0c4b2c591384ce4b86f8276ae1e3f635f']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:23:29Z",
      "confidence": 80,
      "labels": [
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--124558a0-4867-5733-a591-6492b0b9aee0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:a5bf74a6f47f895ec64631853cdee4252c43aed16d7f9af73d6a4e97efc8a174",
      "pattern": "[file:hashes.'SHA-256' = 'a5bf74a6f47f895ec64631853cdee4252c43aed16d7f9af73d6a4e97efc8a174']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:23:12Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "chant",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1aae354d-b7cc-525a-9869-3560ec78a045",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:55d54c40098e920a1e8ab3bb45a61dffea9ad1c22d2451090ee90beff366aff9",
      "pattern": "[file:hashes.'SHA-256' = '55d54c40098e920a1e8ab3bb45a61dffea9ad1c22d2451090ee90beff366aff9']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:23:03Z",
      "confidence": 80,
      "labels": [
        "DDoS",
        "Mirai",
        "elf",
        "leviathan",
        "malware",
        "threatfox"
      ],
      "x_swiftioc_source": "malwarebazaar_recent,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0581ef79-e328-5d3e-97ed-8bed8db69361",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:e7d3b33ad533a7214a730c74b1b55bbf867ec0ef59bedd295aabb3761f1129b0",
      "pattern": "[file:hashes.'SHA-256' = 'e7d3b33ad533a7214a730c74b1b55bbf867ec0ef59bedd295aabb3761f1129b0']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:22:36Z",
      "confidence": 80,
      "labels": [
        "DDoS",
        "Mirai",
        "elf",
        "leviathan",
        "malware",
        "threatfox"
      ],
      "x_swiftioc_source": "malwarebazaar_recent,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--80f70685-8c6b-5a77-8d7b-1b39c93e1520",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:fb00431d5355efeebfd795b39b770a8b1368fea5500f765101d72b876348fd0d",
      "pattern": "[file:hashes.'SHA-256' = 'fb00431d5355efeebfd795b39b770a8b1368fea5500f765101d72b876348fd0d']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:22:09Z",
      "confidence": 80,
      "labels": [
        "DDoS",
        "Mirai",
        "elf",
        "leviathan",
        "malware",
        "threatfox"
      ],
      "x_swiftioc_source": "malwarebazaar_recent,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bd0ea76f-f550-5708-b1f4-73cf1db89075",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:8a0c2c6c2fca4e2b6bbf0d8f60b4d6dc1f7812d12caffca203abe755c6a78ff2",
      "pattern": "[file:hashes.'SHA-256' = '8a0c2c6c2fca4e2b6bbf0d8f60b4d6dc1f7812d12caffca203abe755c6a78ff2']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:21:42Z",
      "confidence": 80,
      "labels": [
        "DDoS",
        "Mirai",
        "elf",
        "leviathan",
        "malware",
        "threatfox"
      ],
      "x_swiftioc_source": "malwarebazaar_recent,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2099a29e-cb09-528a-b457-15bc3bdc94a1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:8b6c459d683d473363105270cfbf29d0f5eff90c54e3c797dc64cb7cc92004f1",
      "pattern": "[file:hashes.'SHA-256' = '8b6c459d683d473363105270cfbf29d0f5eff90c54e3c797dc64cb7cc92004f1']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:21:15Z",
      "confidence": 80,
      "labels": [
        "DDoS",
        "Mirai",
        "elf",
        "leviathan",
        "malware",
        "threatfox"
      ],
      "x_swiftioc_source": "malwarebazaar_recent,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cf3004bd-044b-5352-a38a-b7569250dc31",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:svo-zv[.]pro",
      "pattern": "[domain-name:value = 'svo-zv.pro']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:21:04Z",
      "confidence": 80,
      "labels": [
        "ClearFake",
        "ClickFix",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cd7df96f-fbc1-5f01-befd-77c082953326",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:auslanbee[.]com[.]au",
      "pattern": "[domain-name:value = 'auslanbee.com.au']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:21:04Z",
      "confidence": 80,
      "labels": [
        "ClearFake",
        "ClickFix",
        "etherhiding",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7b853eba-6480-594f-ba5d-6c083f066e32",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:e10e3b26f909615328ede9691d24bb8df37fa5cc5569905d3e314483e90d0b6d",
      "pattern": "[file:hashes.'SHA-256' = 'e10e3b26f909615328ede9691d24bb8df37fa5cc5569905d3e314483e90d0b6d']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:20:48Z",
      "confidence": 80,
      "labels": [
        "DDoS",
        "Mirai",
        "elf",
        "leviathan",
        "malware",
        "threatfox"
      ],
      "x_swiftioc_source": "malwarebazaar_recent,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c01833f9-d27e-5716-8d70-b12c2caa88c6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:a9b89644f778b8b7448d6cbb2ed51c849c179f0f795c6ae5734bf4e00e0f2ae6",
      "pattern": "[file:hashes.'SHA-256' = 'a9b89644f778b8b7448d6cbb2ed51c849c179f0f795c6ae5734bf4e00e0f2ae6']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:20:29Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "macOS",
        "threatfox",
        "willow"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7900f26f-6b5b-5efd-9158-709caee4373a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:f4d9d45b6bfb977488816e89020c7db4b8c31a6e0c55931946e510d497e466c2",
      "pattern": "[file:hashes.'SHA-256' = 'f4d9d45b6bfb977488816e89020c7db4b8c31a6e0c55931946e510d497e466c2']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:20:21Z",
      "confidence": 80,
      "labels": [
        "DDoS",
        "Mirai",
        "elf",
        "leviathan",
        "malware",
        "threatfox"
      ],
      "x_swiftioc_source": "malwarebazaar_recent,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3a61cacb-3246-5153-bfba-23dbb6125dc5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:dd9f2de148a4e974260ad1441e52d2206a9094189774caec8de819c5e203fad5",
      "pattern": "[file:hashes.'SHA-256' = 'dd9f2de148a4e974260ad1441e52d2206a9094189774caec8de819c5e203fad5']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:19:55Z",
      "confidence": 80,
      "labels": [
        "DDoS",
        "Mirai",
        "elf",
        "leviathan",
        "malware",
        "threatfox"
      ],
      "x_swiftioc_source": "malwarebazaar_recent,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ae305224-4a5d-56bf-acf5-d567dddeacc7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:e43dc4bc7e0f09e409ab641af90e41ed761d61d548a42abafe1d9cb90f4e9fd5",
      "pattern": "[file:hashes.'SHA-256' = 'e43dc4bc7e0f09e409ab641af90e41ed761d61d548a42abafe1d9cb90f4e9fd5']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:19:28Z",
      "confidence": 80,
      "labels": [
        "DDoS",
        "Mirai",
        "elf",
        "leviathan",
        "malware",
        "threatfox"
      ],
      "x_swiftioc_source": "malwarebazaar_recent,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ad3420bd-7962-5c3b-96c6-36a4bdcf89e7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:384f6102f832c8275043e227cd628da323968fe0cb7b9bce68be4568f55dfea7",
      "pattern": "[file:hashes.'SHA-256' = '384f6102f832c8275043e227cd628da323968fe0cb7b9bce68be4568f55dfea7']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:19:01Z",
      "confidence": 80,
      "labels": [
        "DDoS",
        "Mirai",
        "elf",
        "leviathan",
        "malware",
        "threatfox"
      ],
      "x_swiftioc_source": "malwarebazaar_recent,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0eaf0a36-9218-5873-b8af-96aef5470107",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:30565cd88df5581d1ecb807c7893702baf9489149bc255e72138819a4858c50e",
      "pattern": "[file:hashes.'SHA-256' = '30565cd88df5581d1ecb807c7893702baf9489149bc255e72138819a4858c50e']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:18:34Z",
      "confidence": 80,
      "labels": [
        "DDoS",
        "Mirai",
        "elf",
        "leviathan",
        "malware",
        "threatfox"
      ],
      "x_swiftioc_source": "malwarebazaar_recent,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f04e1f76-d341-5e55-98c3-f1a1dd592444",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:7bf253e88bbded37d52cb3fd627dcbcd69b570a45e2b3fdda7c2fff168cde408",
      "pattern": "[file:hashes.'SHA-256' = '7bf253e88bbded37d52cb3fd627dcbcd69b570a45e2b3fdda7c2fff168cde408']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:18:07Z",
      "confidence": 80,
      "labels": [
        "DDoS",
        "Mirai",
        "elf",
        "leviathan",
        "malware",
        "threatfox"
      ],
      "x_swiftioc_source": "malwarebazaar_recent,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--78c7725a-d6a2-58db-b328-4882137e7521",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:963a9d98e301b4c546ecf84a34569622a3587b4ca81be30a074c703cdaddccec",
      "pattern": "[file:hashes.'SHA-256' = '963a9d98e301b4c546ecf84a34569622a3587b4ca81be30a074c703cdaddccec']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:17:41Z",
      "confidence": 80,
      "labels": [
        "DDoS",
        "Mirai",
        "elf",
        "leviathan",
        "malware",
        "threatfox"
      ],
      "x_swiftioc_source": "malwarebazaar_recent,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8a087e25-075f-5b12-82ba-6c346f6acfc5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:73fe2ff08964787a67457f492bab69135dfbeb4ee08fa2d46e0064806849066c",
      "pattern": "[file:hashes.'SHA-256' = '73fe2ff08964787a67457f492bab69135dfbeb4ee08fa2d46e0064806849066c']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:17:41Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "macOS",
        "quill",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--66aa6588-f328-5ac5-aceb-b728bc00bd19",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:008391c2f5053f8d6ae93687ff3e646ea3781eb7fceb90dff27662639a7833d1",
      "pattern": "[file:hashes.'SHA-256' = '008391c2f5053f8d6ae93687ff3e646ea3781eb7fceb90dff27662639a7833d1']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:17:14Z",
      "confidence": 80,
      "labels": [
        "DDoS",
        "Mirai",
        "elf",
        "leviathan",
        "malware",
        "threatfox"
      ],
      "x_swiftioc_source": "malwarebazaar_recent,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--da6667fc-ccbd-5f40-9f2c-8cb2cc1120ad",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://42[.]53[.]1[.]224:44215/bin[.]sh",
      "pattern": "[url:value = 'http://42.53.1.224:44215/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:17:06Z",
      "confidence": 80,
      "labels": [
        "None",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3f7c6181-9238-5432-a6c3-c7b1cff2a7d6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:u7[.]ajo7[.]org",
      "pattern": "[domain-name:value = 'u7.ajo7.org']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:15:48Z",
      "confidence": 80,
      "labels": [
        "Vidar",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--185bad38-06e4-5f6c-be76-521af860d39f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://u7[.]ajo7[.]org/",
      "pattern": "[url:value = 'https://u7.ajo7.org/']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:15:48Z",
      "confidence": 80,
      "labels": [
        "Vidar",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0bb73d9d-06c1-516b-a353-2284ce901df1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:c3d732acbede053931e759c6fe5bafaf27fe635d8bad6397d2c6064b8b2d85f9",
      "pattern": "[file:hashes.'SHA-256' = 'c3d732acbede053931e759c6fe5bafaf27fe635d8bad6397d2c6064b8b2d85f9']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:14:57Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "boost",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e6617ef3-4fbb-5d88-8f3b-2e0742b7f43b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:27e71cd39d1cd0c303090ab4055a8a708bd9882d7f7755082e053528e5098d7d",
      "pattern": "[file:hashes.'SHA-256' = '27e71cd39d1cd0c303090ab4055a8a708bd9882d7f7755082e053528e5098d7d']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:12:46Z",
      "confidence": 80,
      "labels": [
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c70c3156-beeb-57a0-a3d3-c8c39f3defcf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:1e7c5c7f7bfd4db6d67ffae5f1a1bd63e5047060b5f8c7ca25ce4016101327ac",
      "pattern": "[file:hashes.'SHA-256' = '1e7c5c7f7bfd4db6d67ffae5f1a1bd63e5047060b5f8c7ca25ce4016101327ac']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:12:14Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "macOS",
        "stratos",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--86ff9919-3ac2-5d6c-9762-6e5129a397f4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://cdn[.]discordapp[.]com/attachments/1176223066376896572/1563483457336774726/0cdb263ab0?ex=6addcaf0&is=6adc7970&hm=38fcb29ba8dd87485c2799356709227232817a2f0fc68e4b9892d4fc052eb0cf&",
      "pattern": "[url:value = 'https://cdn.discordapp.com/attachments/1176223066376896572/1563483457336774726/0cdb263ab0?ex=6addcaf0&is=6adc7970&hm=38fcb29ba8dd87485c2799356709227232817a2f0fc68e4b9892d4fc052eb0cf&']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:10:50Z",
      "confidence": 80,
      "labels": [
        "IRAHook",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fe303ab0-24fe-5d9b-aa1c-5730a8e7e786",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:028327d6621f8d1f76e8e2db111c96e8a581233fe5abbd532f4be71c687d79d6",
      "pattern": "[file:hashes.'SHA-256' = '028327d6621f8d1f76e8e2db111c96e8a581233fe5abbd532f4be71c687d79d6']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:10:47Z",
      "confidence": 80,
      "labels": [
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--79509d20-9ab8-5812-ae48-62edf240f785",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/trenchsteamcutters/ObhodDiscord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/trenchsteamcutters/ObhodDiscord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:10:26Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a5bc3eab-8624-5d9b-94fa-7d5d29f8ee62",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/tankmindobey/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/tankmindobey/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:10:26Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--601c5428-aa94-5639-9c3d-d454b56f3d9e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/yottatoucanshrink/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/yottatoucanshrink/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:10:25Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b2be59a2-9fc4-50bd-924f-1f65d4731df5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/velocitygrackletower/DiscordZapret-New/releases/download/1[.]10[.]7/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/velocitygrackletower/DiscordZapret-New/releases/download/1.10.7/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:10:25Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4f0d5aa1-ca8b-5cfd-bcdf-41eac670d287",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/velocitygrackletower/DiscordObhod/releases/download/1[.]10[.]7/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/velocitygrackletower/DiscordObhod/releases/download/1.10.7/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:10:25Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--69f7d03b-7c61-5aa4-a564-ef21dd8a8177",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/velocitygrackletower/DiscordFix-New/releases/download/1[.]10[.]7/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/velocitygrackletower/DiscordFix-New/releases/download/1.10.7/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:10:25Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--169a4d9e-2e29-5425-8409-a40fd2ace332",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/towerenvoyoutfit/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/towerenvoyoutfit/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:10:25Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a3df67bb-32b4-57f8-ba7d-b99e910b68d1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/topazshadowcontinue/zapret-discord-youtube/releases/download/FixDiscord/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/topazshadowcontinue/zapret-discord-youtube/releases/download/FixDiscord/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:10:25Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f6f51719-65eb-57fc-91a7-f524be1d256b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/teamraikageplunder15/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/teamraikageplunder15/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:10:25Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--659699b6-5f53-581e-8e2a-edc1024608f1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/teamraikageplunder15/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/teamraikageplunder15/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:10:25Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3a597dc3-db62-550f-bd5a-a74de3dbbc1a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/topazshadowcontinue/ObhodDiscord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/topazshadowcontinue/ObhodDiscord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:10:24Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--08887d67-08b8-54e2-8d70-f9ea0bc59648",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/wraithsoundoscillate/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/wraithsoundoscillate/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:10:23Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--43d00ba3-335f-501e-9662-067e5d605a60",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/zenexecutivetug/FixDiscord/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/zenexecutivetug/FixDiscord/releases/download/2.22.2/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:10:22Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3a95966f-fb60-5d0b-bbcd-f2be715420af",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/velocitygrackletower/DiscordFix/releases/download/1[.]10[.]7/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/velocitygrackletower/DiscordFix/releases/download/1.10.7/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:10:15Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--995c466b-0848-52a6-a283-09949c4e2b4e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/wraithsoundoscillate/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/wraithsoundoscillate/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:10:14Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--08507bf7-8e92-5482-8774-25f3b23b4be2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/tankmindobey/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/tankmindobey/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:10:14Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6ebb22f6-f019-5cd2-bece-f42829bea97e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/wyrmashthunder/DiscordFix/releases/download/3[.]33[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/wyrmashthunder/DiscordFix/releases/download/3.33.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:10:10Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dea08611-3a7f-5ba1-bbe4-7dd167ddc7f3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/wraithsoundoscillate/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/wraithsoundoscillate/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:10:09Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bff64f47-b122-5924-8371-5cc8dfaeaf33",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/velocitygrackletower/DiscordObhod/releases/download/1[.]10[.]7/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/velocitygrackletower/DiscordObhod/releases/download/1.10.7/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:10:09Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--12d0bbc9-17a2-5ff5-8919-90899cc842e5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/yottatoucanshrink/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/yottatoucanshrink/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:10:07Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--00272736-6cdd-54ed-9aa2-6ce849853cf7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/teamraikageplunder15/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/teamraikageplunder15/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:10:04Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b88a47ba-979e-5556-ba7c-4a7d752b73e6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/varnishpoolconform/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/varnishpoolconform/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:10:00Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e1a74841-9a47-5f53-9865-267772849083",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/tankmindobey/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/tankmindobey/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:58Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2d00adce-948f-529b-b35c-56958b7e1d3b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/zenexecutivetug/FixDiscord/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/zenexecutivetug/FixDiscord/releases/download/2.22.2/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:57Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e24262fa-cdb7-53f7-b40d-2c18131fe56d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/wyverntrailpliers/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/wyverntrailpliers/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:57Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--63585913-cd46-586e-a33a-cf6a501bb0c6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/velocitygrackletower/DiscordZapret/releases/download/1[.]10[.]7/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/velocitygrackletower/DiscordZapret/releases/download/1.10.7/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:57Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a759ef10-7f80-5c23-9a02-b30e0ef16789",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/velocitygrackletower/DiscordFix-New/releases/download/1[.]10[.]7/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/velocitygrackletower/DiscordFix-New/releases/download/1.10.7/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:57Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fa68ca54-ef6b-5d4c-9c51-a2b0b9a47c16",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/zenexecutivetug/zapret-discord-youtube/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/zenexecutivetug/zapret-discord-youtube/releases/download/2.22.2/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:54Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dd8b82ab-6116-542c-8c8b-e5c5798d0566",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/yottatoucanshrink/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/yottatoucanshrink/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:54Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5784c2be-b97b-5e8f-9f26-d0712be94a12",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/trenchsteamcutters/ZapretDiscord/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/trenchsteamcutters/ZapretDiscord/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:54Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6eda20f4-88b6-5390-8bfd-df3cc49f1e7e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/topazshadowcontinue/ZapretDiscord/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/topazshadowcontinue/ZapretDiscord/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:54Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3cb03928-b841-561a-8e7c-37d732d1b7b0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/tankmindobey/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/tankmindobey/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:54Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--71128a8a-77f9-5130-9c56-1c6fc5192754",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/yottatoucanshrink/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/yottatoucanshrink/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:53Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--662fb978-d08d-5d10-a303-a18c395ada2c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/teamraikageplunder15/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/teamraikageplunder15/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:53Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7e776963-0f4e-5730-a59b-2e49f99ee128",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://59[.]97[.]249[.]112:46105/i",
      "pattern": "[url:value = 'http://59.97.249.112:46105/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:53Z",
      "confidence": 80,
      "labels": [
        "Mozi",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--23dba928-fe2f-53e6-b5a8-698672a1b7f5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/wyverntrailpliers/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/wyverntrailpliers/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:51Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e09ce411-4b44-5b2a-aae0-4eb12b38fa0b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/wyrmashthunder/DiscordZapret/releases/download/3[.]33[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/wyrmashthunder/DiscordZapret/releases/download/3.33.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:51Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2aad2629-bb31-5f1e-b1bf-29d72bd7fe7d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/towerenvoyoutfit/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/towerenvoyoutfit/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:51Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4116e7eb-dce0-551c-8c41-ea47c0d6ae29",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://39[.]81[.]210[.]159:50327/bin[.]sh",
      "pattern": "[url:value = 'http://39.81.210.159:50327/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:50Z",
      "confidence": 80,
      "labels": [
        "32-bit",
        "Mozi",
        "arm",
        "elf",
        "malware",
        "malware_download",
        "mirai"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--41fe18f5-0dab-5cce-8dea-6057b8947e3b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/yottatoucanshrink/DiScOrDZapREt/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/yottatoucanshrink/DiScOrDZapREt/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:48Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c6ee7878-8c25-5f91-bc51-b5d91077c631",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/zenexecutivetug/DiscordZapret/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/zenexecutivetug/DiscordZapret/releases/download/2.22.2/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:47Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5ecc7847-929b-5b8f-88bc-6304b27c846c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/zenexecutivetug/ZapretDiscord/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/zenexecutivetug/ZapretDiscord/releases/download/2.22.2/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:46Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2f2216ee-2650-5b88-9338-5ccc0f046e54",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/wraithsoundoscillate/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/wraithsoundoscillate/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:46Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1d28bd9f-d1d2-5b60-8a6c-fba8f5d98e59",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/velocitygrackletower/DiscordZapret/releases/download/1[.]10[.]7/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/velocitygrackletower/DiscordZapret/releases/download/1.10.7/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:46Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a4e801aa-b5ab-552b-9fc7-2d6e326f081d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/varnishpoolconform/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/varnishpoolconform/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:46Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--871756e0-ad97-5de2-8dda-465e631ee80c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/wyverntrailpliers/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/wyverntrailpliers/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:45Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d3cc5d56-a6c1-52e2-a81b-882052c9a549",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/topazshadowcontinue/ObhodDiscord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/topazshadowcontinue/ObhodDiscord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:45Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--93b56e53-30ac-588f-a9e3-2772305b9c4b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/wyverntrailpliers/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/wyverntrailpliers/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:44Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--191dacd0-34a2-5fdc-b711-994977b5c3a0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/trenchsteamcutters/zapret-discord-youtube/releases/download/FixDiscord/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/trenchsteamcutters/zapret-discord-youtube/releases/download/FixDiscord/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:44Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2694381a-e835-5897-81a0-e3488f498a7e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/tankmindobey/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/tankmindobey/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:44Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--20cea33e-277a-54f3-8a9c-e96287988284",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://42[.]232[.]234[.]139:42553/i",
      "pattern": "[url:value = 'http://42.232.234.139:42553/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:40Z",
      "confidence": 80,
      "labels": [
        "Mozi",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--93184726-1ed7-5f34-b155-9913b424477d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/zenexecutivetug/zapret-discord-youtube/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/zenexecutivetug/zapret-discord-youtube/releases/download/2.22.2/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:39Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--472321fc-cef2-5104-a855-140b883fbde1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://182[.]120[.]15[.]154:42567/i",
      "pattern": "[url:value = 'http://182.120.15.154:42567/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:39Z",
      "confidence": 80,
      "labels": [
        "None",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--85b93cd0-6697-5633-a19b-ec23389ecb66",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/yottatoucanshrink/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/yottatoucanshrink/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:38Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cd4d83ce-9cf3-5b54-a769-062331d426b6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/varnishpoolconform/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/varnishpoolconform/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:38Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eeebebf1-44b2-5b4f-9231-69abf6fdffe1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/trenchsteamcutters/zapret-discord-youtube/releases/download/FixDiscord/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/trenchsteamcutters/zapret-discord-youtube/releases/download/FixDiscord/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:38Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--97f25699-a627-55ea-983c-2e8e7e029e4b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/teamraikageplunder15/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/teamraikageplunder15/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:38Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bb8ac73b-080e-5495-bb97-dc8167e14064",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/zenexecutivetug/DiscordFix/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/zenexecutivetug/DiscordFix/releases/download/2.22.2/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:35Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c9ec9ee8-f46b-5234-999b-16432a0f09d7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/topazshadowcontinue/DiscordObhod/releases/download/DiscordObhod/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/topazshadowcontinue/DiscordObhod/releases/download/DiscordObhod/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:35Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2efe7f1d-a9bf-58e2-9e52-ac9ff005146b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/zenexecutivetug/DiscordZapret/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/zenexecutivetug/DiscordZapret/releases/download/2.22.2/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:34Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--577ff1f2-4766-5f55-bdb3-d2225b868386",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/varnishpoolconform/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/varnishpoolconform/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:34Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3c416f44-46ca-55f8-8983-7fa45faac3de",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/trenchsteamcutters/ObhodDiscord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/trenchsteamcutters/ObhodDiscord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:34Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8a786d38-49ee-5a72-a477-35c5edbe8b62",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/wyrmashthunder/DiscordZapret/releases/download/3[.]33[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/wyrmashthunder/DiscordZapret/releases/download/3.33.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:33Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a74896b0-dcd0-5587-b95b-19687dc7d4ae",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/topazshadowcontinue/ZapretDiscord/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/topazshadowcontinue/ZapretDiscord/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:31Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9bd71f5d-301a-56b7-a200-03d9ce007d95",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/zenexecutivetug/ZapretDiscord/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/zenexecutivetug/ZapretDiscord/releases/download/2.22.2/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:29Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b21c4a28-ccb8-53e1-a594-ede6555c9f14",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/wyrmashthunder/FixDiscord/releases/download/3[.]33[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/wyrmashthunder/FixDiscord/releases/download/3.33.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:29Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--258d476c-1447-58d8-9291-6dbfe10cf72e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/trenchsteamcutters/DiscordObhod/releases/download/DiscordObhod/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/trenchsteamcutters/DiscordObhod/releases/download/DiscordObhod/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:29Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--180864ce-c77c-5f51-acd4-351aa85f5192",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/topazshadowcontinue/zapret-discord-youtube/releases/download/FixDiscord/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/topazshadowcontinue/zapret-discord-youtube/releases/download/FixDiscord/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:29Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c21f00f7-9cf2-55b8-96fa-c73cbffea740",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/teamraikageplunder15/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/teamraikageplunder15/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:26Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3a3e6d63-f7d0-5dc5-99a1-5f93ed147561",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/tankmindobey/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/tankmindobey/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:26Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cd5bd372-8dbc-5bd0-ad85-307acdb8f72d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/yottatoucanshrink/DiScOrDZapREt/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/yottatoucanshrink/DiScOrDZapREt/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:25Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6fd09f5b-9a2e-5dc9-ada3-383c64684148",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/wyverntrailpliers/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/wyverntrailpliers/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:24Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c98a0f16-eea8-5da9-9a40-bcb1b1ae03b3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/zenexecutivetug/DiscordFix/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/zenexecutivetug/DiscordFix/releases/download/2.22.2/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:22Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bf913ddb-6e17-59e6-9bcc-fec30f2d7237",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/velocitygrackletower/zapret-discord-youtube/releases/download/1[.]10[.]7/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/velocitygrackletower/zapret-discord-youtube/releases/download/1.10.7/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:22Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--20b865c4-4d16-5914-8fc1-0014b86cb027",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/wraithsoundoscillate/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/wraithsoundoscillate/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:20Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2c7f0e0c-2426-585e-92b1-84cd0ab0d2f8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/varnishpoolconform/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/varnishpoolconform/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:20Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bcb71453-4984-5403-91bb-c397b621bb27",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/wyrmashthunder/ZapretDiscord/releases/download/3[.]33[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/wyrmashthunder/ZapretDiscord/releases/download/3.33.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:19Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--01b81c9d-5117-50cf-8dc1-6e5bf12d63f1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/wyrmashthunder/ZapretDiscord/releases/download/3[.]33[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/wyrmashthunder/ZapretDiscord/releases/download/3.33.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:19Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4b125ade-195b-56c4-91b4-676eecdf71ad",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/trenchsteamcutters/ZapretDiscord/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/trenchsteamcutters/ZapretDiscord/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:18Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bf9d843c-a254-5c2e-8113-8e3c0dd395c2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/yottatoucanshrink/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/yottatoucanshrink/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:17Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6e7238f2-1a81-502d-b8c7-abfcc2140a8d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/varnishpoolconform/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/varnishpoolconform/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:17Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7981cba8-ef56-5410-921b-1bb98bead327",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://182[.]127[.]108[.]252:56903/i",
      "pattern": "[url:value = 'http://182.127.108.252:56903/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:17Z",
      "confidence": 80,
      "labels": [
        "Mozi",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--196434d9-f718-5643-8484-4c249df00ad1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/velocitygrackletower/zapret-discord-youtube/releases/download/1[.]10[.]7/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/velocitygrackletower/zapret-discord-youtube/releases/download/1.10.7/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:15Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--241f15e0-97c0-56d7-9db8-b13a81f09169",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/wraithsoundoscillate/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/wraithsoundoscillate/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:14Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7ed86944-df24-5d4c-a124-cab0c77957de",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/velocitygrackletower/DiscordFix/releases/download/1[.]10[.]7/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/velocitygrackletower/DiscordFix/releases/download/1.10.7/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:14Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--08153aad-aa19-50f7-b70a-6a32e80cf343",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/trenchsteamcutters/DiscordObhod/releases/download/DiscordObhod/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/trenchsteamcutters/DiscordObhod/releases/download/DiscordObhod/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:14Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--22523514-1ada-5749-8316-8d8cdee19c6a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/velocitygrackletower/DiscordZapret-New/releases/download/1[.]10[.]7/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/velocitygrackletower/DiscordZapret-New/releases/download/1.10.7/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:13Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f335456b-28e5-54de-80b6-7a5878329104",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/topazshadowcontinue/DiscordObhod/releases/download/DiscordObhod/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/topazshadowcontinue/DiscordObhod/releases/download/DiscordObhod/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:13Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--de783a89-7c97-5f46-bc45-4c0cfa93eb40",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/wyverntrailpliers/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/wyverntrailpliers/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:11Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bf6a0453-4623-55f8-bf78-2c7cf8d40cff",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/wyrmashthunder/FixDiscord/releases/download/3[.]33[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/wyrmashthunder/FixDiscord/releases/download/3.33.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:10Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--19469b75-a712-5d83-99b4-1b701c6955a9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/wyrmashthunder/DiscordFix/releases/download/3[.]33[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/wyrmashthunder/DiscordFix/releases/download/3.33.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:09:10Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--100858cc-b8c2-5c73-bc41-2ca5649e2d7f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:ee2059e76764f7aa6b07c8df8a7047aba55f9f667474a23e7e212b58414e8999",
      "pattern": "[file:hashes.'SHA-256' = 'ee2059e76764f7aa6b07c8df8a7047aba55f9f667474a23e7e212b58414e8999']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:08:56Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "frame",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9ff16175-f62e-5610-91e3-138c7386adaf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:phmultiservicios[.]cl",
      "pattern": "[domain-name:value = 'phmultiservicios.cl']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:08:13Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1c48aef7-53d1-5511-bc35-fdd42affbb24",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:880be756fdfe3c6c6ebecc2f41774258a18b0786a51318d3c8c4faae46c8f168",
      "pattern": "[file:hashes.'SHA-256' = '880be756fdfe3c6c6ebecc2f41774258a18b0786a51318d3c8c4faae46c8f168']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:06:13Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "macOS",
        "nova",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c4577bc0-2d38-5ff0-a353-d7c7fef4b020",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:n[.]acunbet89[.]org",
      "pattern": "[domain-name:value = 'n.acunbet89.org']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:05:48Z",
      "confidence": 80,
      "labels": [
        "Vidar",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2ca95e8d-ea77-58f2-bd9b-e653dd9a5005",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://n[.]acunbet89[.]org/",
      "pattern": "[url:value = 'https://n.acunbet89.org/']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:05:48Z",
      "confidence": 80,
      "labels": [
        "Vidar",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8a7f5fb1-515c-516e-9592-3b25df754c33",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:192[.]144[.]168[.]105",
      "pattern": "[ipv4-addr:value = '192.144.168.105']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:05:06Z",
      "confidence": 80,
      "labels": [
        "Vshell",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--57f36df6-f3ae-53c3-90d7-d59a93e1f149",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:182[.]61[.]148[.]201",
      "pattern": "[ipv4-addr:value = '182.61.148.201']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:05:06Z",
      "confidence": 80,
      "labels": [
        "Vshell",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5a038bd3-1fb8-59c3-bb17-fd5992d6e03c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:156[.]240[.]41[.]162",
      "pattern": "[ipv4-addr:value = '156.240.41.162']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:05:06Z",
      "confidence": 80,
      "labels": [
        "Vshell",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0f2af4a4-da4e-5fde-bba8-b933d85f5225",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:176[.]65[.]139[.]153",
      "pattern": "[ipv4-addr:value = '176.65.139.153']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:04:45Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e32ab9f3-0c2b-5624-bc7d-64912359d8e1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:pharmafilters[.]com",
      "pattern": "[domain-name:value = 'pharmafilters.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:04:39Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5f667053-5e9d-5979-9984-4bcb553f3618",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:dexband[.]quest",
      "pattern": "[domain-name:value = 'dexband.quest']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:03:11Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2e871eb6-4df6-5501-b948-8d6c1dd6ad77",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/SplendorAblePincers/discord-unban/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/SplendorAblePincers/discord-unban/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T10:00:47Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5cae872f-d3cb-52aa-bbf1-e07d6cf8e6e0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/SplendorAblePincers/discord-zapret/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/SplendorAblePincers/discord-zapret/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:59:57Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3bdaf32a-4d79-57c2-b7d6-82e12774f748",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/segmentstagevary/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/segmentstagevary/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:59:49Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eb0e0b7f-df25-5614-827a-59d9cce2e832",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:65[.]109[.]18[.]44",
      "pattern": "[ipv4-addr:value = '65.109.18.44']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:59:47Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c02dfe16-6be3-5ad5-a9f1-ad5d1033de2e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:176[.]65[.]139[.]210",
      "pattern": "[ipv4-addr:value = '176.65.139.210']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:59:47Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--642fcde3-7062-5f82-b087-5072cdbf30e3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/hiverobinadore/DiscorD-Zapret/releases/download/1[.]13[.]6/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/hiverobinadore/DiscorD-Zapret/releases/download/1.13.6/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:59:46Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d7f7d7ec-e232-52b6-8607-144e0e10b0e3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/towerenvoyoutfit/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/towerenvoyoutfit/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:59:45Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f66e16ac-b30c-525c-8660-8e0674fb7cc3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/sharesovereignstrut/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/sharesovereignstrut/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:59:45Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--033afc5e-0686-5433-bfad-e223bd064f4c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/winnerhaulervalley47/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/winnerhaulervalley47/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:59:42Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c4bff774-34a5-59ac-baa5-dd9db91bd18e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/winnerhaulervalley47/DiScOrDZapREt/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/winnerhaulervalley47/DiScOrDZapREt/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:59:39Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--33874545-e2b2-5852-af9d-590011edd499",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/tonemothshout/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/tonemothshout/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:59:37Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--986c9dae-908d-5208-8029-309c197c96bc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/stopmonktempo74/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/stopmonktempo74/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:59:27Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ff207eae-13c3-5fab-8a34-cf5e8753c58f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/signdiplomatpraise/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/signdiplomatpraise/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:59:27Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f1938024-07c4-5e3c-8269-c6e34323f038",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/volumebudgiefall/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/volumebudgiefall/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:59:25Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cd6e37d0-681d-5a02-83cd-87e850f91597",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/updateseaextol89/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/updateseaextol89/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:59:25Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d063f255-f1c2-54c5-9a11-1a8f8a469b70",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/sightspongemall/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/sightspongemall/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:59:25Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c6d32dbf-d435-5cda-a54e-e92ff97e547d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/echoillusionistcurl/zapret-discord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/echoillusionistcurl/zapret-discord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:59:25Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4256bd1a-c07f-5b0a-a420-bba12fae55a0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/viceswordsmanhide/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/viceswordsmanhide/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:59:17Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--839cc418-2c9d-54fe-be11-ed6cb64b9c76",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/tonemothshout/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/tonemothshout/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:59:17Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2c92dcc9-cee4-55b3-9eca-88ba4d3c0932",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/FaceAccountant73/zapret-discord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/FaceAccountant73/zapret-discord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:59:17Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5e0468ba-7444-5cc2-b4f3-e1ab61b4959f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/fountainpenguinjack/discordzapret/releases/download/1[.]9[.]9c/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/fountainpenguinjack/discordzapret/releases/download/1.9.9c/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:59:16Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--387505c9-5e00-5d06-8a7f-bc9df451c751",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/SplendorAblePincers/discordzapret/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/SplendorAblePincers/discordzapret/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:59:16Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a4b71aab-058e-51c6-9c20-34d191b13bf6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/speedguardianlabel/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/speedguardianlabel/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:59:15Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--591973ba-6916-5221-8e27-0b5ad5d80aa4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/PhotonBladesmanTube/zapretdiscord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/PhotonBladesmanTube/zapretdiscord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:59:15Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8250e859-9807-5ece-bc55-d9c7ba73abd8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/stadiumdamseledge/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/stadiumdamseledge/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:59:13Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f4ba7b6b-008b-5a30-b74d-8519a1498bb1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/echoillusionistcurl/zapret-discord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/echoillusionistcurl/zapret-discord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:59:11Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f115a8e8-0484-5a04-9783-7f43ad628008",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/tealrankenergy/zaPRET-dISCoRD-YoutUbE/releases/download/1[.]17[.]0/discord-youtube-zapret-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/tealrankenergy/zaPRET-dISCoRD-YoutUbE/releases/download/1.17.0/discord-youtube-zapret-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:59:09Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--485a80bc-8c87-5aab-acb9-d526f23728ff",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/SplendorAblePincers/discord-zapret/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/SplendorAblePincers/discord-zapret/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:59:09Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--58cb3a01-9133-5ab5-9b4d-c9a296121767",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/thornbailiffhoe/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/thornbailiffhoe/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:59:04Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--118a29fd-85b1-513c-a8c8-9d1f81393664",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/stitchphysiciancode/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/stitchphysiciancode/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:59:00Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1b2da2a8-5f77-5bc6-8a6d-6d90fa08cdbf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/viceswordsmanhide/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/viceswordsmanhide/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:54Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a2d6f528-2f07-523c-b2c3-5d947acd516c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/sightspongemall/DiScOrDZapREt/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/sightspongemall/DiScOrDZapREt/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:54Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2e98aa2c-25cb-50b1-ae69-6f81175fdce0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/webpaladinbless/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/webpaladinbless/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:52Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--edb32400-dc67-5655-9704-4c953addb57b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/tealrankenergy/TElEgrAM-ZAPret/releases/download/1[.]16[.]4/telegram-zapret-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/tealrankenergy/TElEgrAM-ZAPret/releases/download/1.16.4/telegram-zapret-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:52Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8302cbfc-9352-5fa7-8f92-b6580986fa21",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/toothdovebay/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/toothdovebay/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:50Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3cd1bc2c-6eb6-5ba3-b33f-073a0a673d3d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/stitchphysiciancode/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/stitchphysiciancode/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:50Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--64c7e9cc-ac3e-555a-be4e-4932d3c3159d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/sharedivinershroud/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/sharedivinershroud/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:50Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fc7869ad-ff1d-52ca-be8b-cc710b94d6ba",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/TTVRODRIK/Flux-Krea-multi-GPU-Pool/refs/heads/main/hydremic/Flux-multi-GP-Pool-Krea-v1[.]2-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/TTVRODRIK/Flux-Krea-multi-GPU-Pool/refs/heads/main/hydremic/Flux-multi-GP-Pool-Krea-v1.2-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fb3b36d1-9266-5f99-a75b-8a6522e1aabb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/EntityBlood/Minecraft-AFK-Bot/refs/heads/main/bulblet/Minecraft-AF-Bot-v1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/EntityBlood/Minecraft-AFK-Bot/refs/heads/main/bulblet/Minecraft-AF-Bot-v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2862b077-0fe1-5532-8772-9466c6116a11",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/soundtanagerflex/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/soundtanagerflex/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:48Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6737930f-0a42-5ce4-88b6-d2cd79897813",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/SplendorAblePincers/discord-unban/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/SplendorAblePincers/discord-unban/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:47Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bfbc93e3-f8c4-5e38-9165-3af004e612d6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/PhotonBladesmanTube/discordzapret/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/PhotonBladesmanTube/discordzapret/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:46Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--328d1449-eb8c-591d-bd38-4b2b6b6de0eb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/tailmartintug/zapret-discord-youtube/releases/download/FixDiscord/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/tailmartintug/zapret-discord-youtube/releases/download/FixDiscord/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:45Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1c7e5129-7d62-5672-a83e-d0688e2bb451",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/speedguardianlabel/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/speedguardianlabel/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:45Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8afbe6a6-aa35-5956-8521-f5e2a170eaa1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/signdiplomatpraise/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/signdiplomatpraise/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:45Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b9faeaf8-ed12-5cd3-87cb-96b6f4ae0ebd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/PhotonBladesmanTube/zapretdiscord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/PhotonBladesmanTube/zapretdiscord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:45Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4b3c9c17-4b85-5239-ae9e-c79b9d221eb4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/signdiplomatpraise/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/signdiplomatpraise/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:44Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b2f9a43a-4723-5189-afdd-05a7e6a5a169",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Taptastico/TypeScript-Starter/refs/heads/main/src/types/Type_Script_Starter_v3[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Taptastico/TypeScript-Starter/refs/heads/main/src/types/Type_Script_Starter_v3.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:41Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c7feb637-bfef-5806-ba9b-71b2d13c434a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/stopmonktempo74/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/stopmonktempo74/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:39Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1ef2b07b-75dd-51b1-ac5d-923db273b121",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/leviuszaur/fragment-stars-api/refs/heads/main/examples/fragment_api_stars_1[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/leviuszaur/fragment-stars-api/refs/heads/main/examples/fragment_api_stars_1.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:38Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e174e8e9-778f-5a59-88cf-292b57d26065",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/volumenewtday/zaPReT-discord-yoUTube/releases/download/1[.]16[.]9/discord-youtube-zapret-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/volumenewtday/zaPReT-discord-yoUTube/releases/download/1.16.9/discord-youtube-zapret-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:38Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6a3f85d3-5888-5b3b-96fc-07300d522c91",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/urbanbureaucratclaim/DiscordZapret/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/urbanbureaucratclaim/DiscordZapret/releases/download/2.22.2/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:38Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f9361aed-c22c-5704-9783-0ca30a24646a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/towerenvoyoutfit/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/towerenvoyoutfit/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:38Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--647a05ae-20b2-5705-8425-5fda7f81a388",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/soundtanagerflex/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/soundtanagerflex/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:37Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--77dae3c3-b674-5373-8571-bae6b6d53efe",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/victortraderfold/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/victortraderfold/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:34Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ed7a4338-ab66-5188-a794-881301a350aa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/teracashierwish83/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/teracashierwish83/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:34Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ffc57558-782d-554c-b91e-39496b4af64d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/smashfireagora/zapret-discord-youtube/releases/download/FixDiscord/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/smashfireagora/zapret-discord-youtube/releases/download/FixDiscord/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:34Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e8baff58-4a01-5259-bfad-182c27a6d842",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/stadiumdamseledge/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/stadiumdamseledge/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:33Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--564754be-3170-525b-96b1-0004fb1ba2c0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/limeropemakerregain/zapret-discord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/limeropemakerregain/zapret-discord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:33Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3cc95df0-4d00-5194-ae14-202940f4d1f7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Beatvyaeliminate/zapret-discord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/Beatvyaeliminate/zapret-discord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:32Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--17163e52-816f-5e7b-b1d5-b3c9a9b51c37",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/winnerhaulervalley47/DiScOrDZapREt/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/winnerhaulervalley47/DiScOrDZapREt/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:31Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f9e56a21-f928-5c97-9955-5229519b9a4a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/smashfireagora/ObhodDiscord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/smashfireagora/ObhodDiscord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:31Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3fe98ab5-be96-58b0-b344-379944bdf7d2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Ducanh390/Meshify/refs/heads/main/shovel/Software_v1[.]4-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Ducanh390/Meshify/refs/heads/main/shovel/Software_v1.4-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--861d307d-e35d-5d8d-bee1-c917231d6315",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/ultrastationfitting/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/ultrastationfitting/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:30Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--35cbbe0f-b02e-5beb-b80c-ffdac4efe9da",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/toothdovebay/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/toothdovebay/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:25Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f619f101-eb65-51a7-9da6-09561a04a725",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/teracashierwish83/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/teracashierwish83/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:25Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e553a668-2e60-585d-8daa-e7b5ddaf3e07",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/smashfireagora/ZapretDiscord/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/smashfireagora/ZapretDiscord/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:25Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1a5a7798-1aff-52f3-84fd-e1ebd422a3cc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/smashfireagora/ZapretDiscord/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/smashfireagora/ZapretDiscord/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:24Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e46e751d-7779-5e72-9445-25eb65269485",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/keplerking100/TatakaiAPI/refs/heads/main/src/routes/watchanimeworld/Tatakai_API_v1[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/keplerking100/TatakaiAPI/refs/heads/main/src/routes/watchanimeworld/Tatakai_API_v1.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:23Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--293c5b7d-3124-5098-87db-76b46a01967c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/jaraguayo/KQL-Queries/refs/heads/main/Hunting-Queries/KQ_Queries_v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/jaraguayo/KQL-Queries/refs/heads/main/Hunting-Queries/KQ_Queries_v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:23Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0648ea56-9a54-5e9b-a7c3-f069c54489a7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/troopcourierspin/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/troopcourierspin/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:23Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8c21e4e0-3ca3-5b90-8293-bb9d6bfb6705",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/signdiplomatpraise/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/signdiplomatpraise/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:23Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8156f7b6-fdc7-5106-b9b1-235c06250f94",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/stadiumdamseledge/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/stadiumdamseledge/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:20Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--405e8eaa-1a24-5486-ad74-289de3cfe375",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/webpaladinbless/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/webpaladinbless/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:19Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f0d1e2a5-263d-5911-9fb0-5b4d602178b3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/toothdovebay/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/toothdovebay/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:19Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--65ebb669-7cd4-5f36-b8b6-ba478906432f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/toothdovebay/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/toothdovebay/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:19Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d3009c8a-c698-5e08-a195-4f3929a89025",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/tonemothshout/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/tonemothshout/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:19Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a0abf0f4-5f37-518b-a1a2-7016a07a261d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/taginvestorserver/DIScordzAprEt/releases/download/1[.]11[.]8/discord-zapret-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/taginvestorserver/DIScordzAprEt/releases/download/1.11.8/discord-zapret-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:19Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--800191f7-bc51-50d0-b665-4fbf83ea8975",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/snatchmakersmash/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/snatchmakersmash/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:19Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3a5c2e83-68d7-5966-adc5-5dabc015b43c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/smashfireagora/DiscordObhod/releases/download/DiscordObhod/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/smashfireagora/DiscordObhod/releases/download/DiscordObhod/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:17Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b3e5870a-3dd8-5cd5-ad0c-e61aa2a3d6a7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/thornbailiffhoe/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/thornbailiffhoe/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:16Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3d0830f0-e23d-5047-a44f-78e4b8e328cf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/FaceAccountant73/discordzapret/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/FaceAccountant73/discordzapret/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:15Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f22dc7b7-caea-5566-a7db-f5a47246873a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/PhotonBladesmanTube/discord-zapret/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/PhotonBladesmanTube/discord-zapret/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:14Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--591eb38b-0469-5662-90a6-58aebd999c1a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/tonemothshout/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/tonemothshout/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:13Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9a2a27fb-2a47-5a6b-9990-0d39fb2428ad",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/weightdukegutter/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/weightdukegutter/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:12Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7a59155b-7f7d-5e51-89d8-75706bbe52ea",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/viceswordsmanhide/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/viceswordsmanhide/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:09Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1c407230-64dc-551b-86bc-2aaa64bd1973",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/troopcourierspin/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/troopcourierspin/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:07Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--57d56417-95e9-5e07-aee9-1f7307f3be34",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/townfiscalspout/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/townfiscalspout/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:06Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d0b18067-f369-5361-ad3d-62d93c37fa7d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Beatvyaeliminate/discordzapret/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/Beatvyaeliminate/discordzapret/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:06Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f059b0f0-e34f-5a67-9170-6ba3942740ba",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/limeropemakerregain/discord-zapret/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/limeropemakerregain/discord-zapret/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:02Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--031aae1d-33ae-5cb9-9713-3d69283549e8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/spiralarchertassel/TELEgRaMzAprET/releases/download/1[.]11[.]3/telegram-zapret-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/spiralarchertassel/TELEgRaMzAprET/releases/download/1.11.3/telegram-zapret-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:01Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f9ee380a-690c-5193-9f5b-e82c3d2d9e6d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Beatvyaeliminate/discordzapret/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/Beatvyaeliminate/discordzapret/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:58:01Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7eb0a7bb-746f-5a11-bd96-94af44ac5a29",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/updateseaextol89/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/updateseaextol89/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:57Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0419d0fb-1f87-5b9c-ac7a-381d89557a83",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/lcbootyneet/NanoStorage/refs/heads/main/tests/Nano_Storage_v3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/lcbootyneet/NanoStorage/refs/heads/main/tests/Nano_Storage_v3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3d1fcd7f-3156-5f37-908f-f2620c38c348",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/emileegraphic698/VisionFusion_OCR_QR/refs/heads/main/[.]streamlit/VisionFusion_OCR_QR-1[.]1-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/emileegraphic698/VisionFusion_OCR_QR/refs/heads/main/.streamlit/VisionFusion_OCR_QR-1.1-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e45e4b6c-fd6c-571c-a64d-ee5c2e57c3a2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/limeropemakerregain/discord-zapret/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/limeropemakerregain/discord-zapret/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:56Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4a166ea1-9ada-58eb-a29e-49a7862a5842",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/urbanbureaucratclaim/DiscordFix/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/urbanbureaucratclaim/DiscordFix/releases/download/2.22.2/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:55Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f5b08a79-ab33-5aae-8be6-8a4173a1ae67",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/updateseaextol89/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/updateseaextol89/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:55Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cdddd612-9f21-5ad6-8c33-b5f1e37c8b55",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/townscholarcloak/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/townscholarcloak/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:55Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--371a2e4b-9e90-5cfb-be13-0a195842fb09",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/stadiumworldspeed/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/stadiumworldspeed/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:55Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0569b1f4-a079-5bf9-929b-4ab7374910bf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/speedguardianlabel/DiScOrDZapREt/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/speedguardianlabel/DiScOrDZapREt/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:54Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0679f256-1c91-553e-b866-90787146069f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/sightspongemall/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/sightspongemall/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:54Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4299a6da-5e4f-5082-8236-7131c6fb7308",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/segmentstagevary/DiScOrDZapREt/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/segmentstagevary/DiScOrDZapREt/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:51Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0ca6e964-f2b9-5916-811b-cf5ea4ec1211",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/towerenvoyoutfit/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/towerenvoyoutfit/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:48Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--39dbd65d-6418-567c-8b8e-0f8b7ae53b5c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/teracashierwish83/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/teracashierwish83/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:48Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ff51280f-65bd-5c3d-add3-8fb1155e7d8d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/spiralarchertassel/dIsCorDZaPreT/releases/download/1[.]11[.]0/discord-zapret-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/spiralarchertassel/dIsCorDZaPreT/releases/download/1.11.0/discord-zapret-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:48Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d4565841-cba5-5313-a4f4-fe39463f5d4a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/laneadvocatedawn/discordzapret/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/laneadvocatedawn/discordzapret/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:48Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f5bb7101-fa75-5efb-9459-0b3ced23b12f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/KKDIDD/Credit-Card-Generator-and-Validator/refs/heads/main/src/Validator_Card_and_Credit_Generator_v3[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/KKDIDD/Credit-Card-Generator-and-Validator/refs/heads/main/src/Validator_Card_and_Credit_Generator_v3.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8704e78e-751b-5e8c-8989-c81deec2e75c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/KKDIDD/Credit-Card-Generator-and-Validator/refs/heads/main/src/Generator_Credit_and_Card_Validator_v2[.]4-alpha[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/KKDIDD/Credit-Card-Generator-and-Validator/refs/heads/main/src/Generator_Credit_and_Card_Validator_v2.4-alpha.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ee029d45-2580-54a8-8dae-f4c72c5182d2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/toothdovebay/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/toothdovebay/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:45Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e68c53e0-7703-5bfd-804b-17d209488569",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/BenxT512/BsUtils/refs/heads/main/stream/Utils-Bs-2[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/BenxT512/BsUtils/refs/heads/main/stream/Utils-Bs-2.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:43Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dfde3467-bcb5-5850-9e27-a66edadbb578",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/teracashierwish83/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/teracashierwish83/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:43Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d67da6af-9ea7-5aae-aadd-6b7bd2cc4332",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/winnerhaulervalley47/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/winnerhaulervalley47/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:42Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dffac116-7871-5d05-985e-0a74661ecf12",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/tonemothshout/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/tonemothshout/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:42Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0a0e6702-1c77-530a-9a86-8b363622bfc3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/tidewalruscall/FixDiscord/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/tidewalruscall/FixDiscord/releases/download/2.22.2/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:42Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d3b76595-1219-5695-965f-a189916ccc02",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/tidewalruscall/DiscordFix/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/tidewalruscall/DiscordFix/releases/download/2.22.2/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:42Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9f048493-0e88-5cc1-8386-dc7182cf7b66",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/sightspongemall/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/sightspongemall/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:42Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8362251d-9fb9-59e9-8a50-18250a90d0ba",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/laneadvocatedawn/discordzapret/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/laneadvocatedawn/discordzapret/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:42Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0ac3155e-ebe1-5783-8023-9586fe874ade",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/ultrastationfitting/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/ultrastationfitting/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:38Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fd98ed57-be04-5938-a67d-20e584c292dd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/tailmartintug/zapret-discord-youtube/releases/download/FixDiscord/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/tailmartintug/zapret-discord-youtube/releases/download/FixDiscord/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:38Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b9791f7b-ef7f-5bfa-b4d7-ce68922166a1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/stitchphysiciancode/DiScOrDZapREt/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/stitchphysiciancode/DiScOrDZapREt/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:38Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8ba706ed-8354-5253-9be8-ca383edf7f0e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/speedguardianlabel/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/speedguardianlabel/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:38Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--538cd44a-055c-547f-83fd-911acb5b139a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/sightspongemall/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/sightspongemall/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:38Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a7f706d6-2ad4-5751-92b7-7fa995c6a4f5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/sharedivinershroud/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/sharedivinershroud/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:38Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f62477d8-c5c3-5262-9ad2-4911d8e6a89a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/FaceAccountant73/discordzapret/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/FaceAccountant73/discordzapret/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:33Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--23fa981f-b914-51b5-a4e9-a453caa45cb4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/khirane/TargetDiarization/refs/heads/main/densification/Diarization-Target-v3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/khirane/TargetDiarization/refs/heads/main/densification/Diarization-Target-v3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--70050f84-5b91-536d-b341-aed48083c06c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/winnerhaulervalley47/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/winnerhaulervalley47/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:32Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1b4b1918-1f20-5294-baea-b27dd08f5d43",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/viceswordsmanhide/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/viceswordsmanhide/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:32Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--29e1022a-f73c-5bcd-bb80-3ce90f3136b0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/taginvestorserver/zaPReT-DIScord-YOutuBe/releases/download/1[.]12[.]2/discord-youtube-zapret-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/taginvestorserver/zaPReT-DIScord-YOutuBe/releases/download/1.12.2/discord-youtube-zapret-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:32Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--812f4c6f-45fd-5843-909d-cf8390c58bdb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/limeropemakerregain/zapret-discord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/limeropemakerregain/zapret-discord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:32Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a14156c3-c41b-5ede-9168-2a63135075bb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/widthpelicancock/DiscordZapret/releases/download/3[.]33[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/widthpelicancock/DiscordZapret/releases/download/3.33.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:31Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3694f73e-96b5-50a4-995f-522d08c04687",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/arigotek/auto_cythonizer_tests/refs/heads/main/cython_cache/build_lib/fibonacci/auto_cythonizer_tests_2[.]7-alpha[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/arigotek/auto_cythonizer_tests/refs/heads/main/cython_cache/build_lib/fibonacci/auto_cythonizer_tests_2.7-alpha.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:26Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2518be93-3aaf-5275-9493-aec2e6b766c8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/volumebudgiefall/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/volumebudgiefall/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:26Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2ba2f82b-2094-5dbc-ac23-8c8c7c36f971",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/soundtanagerflex/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/soundtanagerflex/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:26Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d5162d6c-7584-5d5b-872a-9fdd136df7d0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/signdiplomatpraise/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/signdiplomatpraise/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:26Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fe204a70-b1ea-54f8-8b65-e6f8f41fbd45",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/hiverobinadore/ZapREt-dISCorD-1[.]10[.]3/releases/download/1[.]13[.]1/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/hiverobinadore/ZapREt-dISCorD-1.10.3/releases/download/1.13.1/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:26Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a7805afa-9991-5736-aff4-4c69126a9472",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/tailmartintug/ZapretDiscord/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/tailmartintug/ZapretDiscord/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:23Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f46fc94b-43c1-5616-a7a9-50ecbb400ff9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/weightdukegutter/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/weightdukegutter/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:22Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7c6c271e-5488-5346-95e5-ade3522342fd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/sightspongemall/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/sightspongemall/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:22Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eb4202d5-aee0-58fa-b5df-d96a49c49b40",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/volumebudgiefall/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/volumebudgiefall/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:21Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2cd928cc-93f5-512f-92d9-168a05dd4f80",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Beatvyaeliminate/zapret-discord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/Beatvyaeliminate/zapret-discord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:19Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d180f1fd-1786-5e39-aefd-5ea0cf6bbaad",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/stadiumworldspeed/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/stadiumworldspeed/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:18Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--79085a64-2afc-58aa-ab71-c191c70b6e5a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/limeropemakerregain/discord-unban/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/limeropemakerregain/discord-unban/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:18Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b8a0a336-071f-5130-89f5-afceb0d9aeef",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/laneadvocatedawn/discord-unban/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/laneadvocatedawn/discord-unban/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:18Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--93f44ad0-036a-5a71-aa3d-7afc51902e6d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/soundtanagerflex/DiScOrDZapREt/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/soundtanagerflex/DiScOrDZapREt/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:17Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9709656f-986b-5364-bdc5-3c64cbb7960c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/taildruidblade36/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/taildruidblade36/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:16Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--701900bf-9f66-5b0b-b4f5-0a1e1e1f796c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/towerenvoyoutfit/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/towerenvoyoutfit/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:12Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a05be725-952b-5701-b590-463b94733f42",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/edgard25/ColliderMeshTool/refs/heads/main/Assets/Plugins/Zenject/Source/Editor/Editors/Tool_Collider_Mesh_1[.]2-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/edgard25/ColliderMeshTool/refs/heads/main/Assets/Plugins/Zenject/Source/Editor/Editors/Tool_Collider_Mesh_1.2-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:10Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--900abae0-df30-5243-9c1f-8c96b915a16c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/townscholarcloak/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/townscholarcloak/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:10Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2c71c0d4-0aef-5657-9950-953731213b3c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/stoplovebirdfold86/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/stoplovebirdfold86/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:10Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4c6ab5ec-6d37-5942-92fb-885d09fceff7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Beatvyaeliminate/zapretdiscord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/Beatvyaeliminate/zapretdiscord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:10Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--df99ec2f-9ccc-5ab6-bd01-e4b3ce7d6b43",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/turquoiseturkeyoven/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/turquoiseturkeyoven/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:09Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9afbd708-ef41-5753-abaa-360e81ed1879",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/speedguardianlabel/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/speedguardianlabel/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:06Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--726c36e4-a658-5ade-ab6b-461933a2a397",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/sharedivinershroud/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/sharedivinershroud/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:06Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4fa22cd0-d16c-5574-81bb-8390857b9ecc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/weightdukegutter/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/weightdukegutter/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:05Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--81699b0f-683a-5585-a122-b0563525b7e9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/anshulrules/Antigravity2Api/refs/heads/main/src/transform/claude/Antigravity_Api_3[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/anshulrules/Antigravity2Api/refs/heads/main/src/transform/claude/Antigravity_Api_3.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:03Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--edb90457-f110-53d3-b8ff-97c9491b3582",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/widthpelicancock/DiscordFix/releases/download/3[.]33[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/widthpelicancock/DiscordFix/releases/download/3.33.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:03Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e1903838-3103-56d6-a54a-b836eb841ab7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/teracashierwish83/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/teracashierwish83/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:02Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b2135a16-a4f2-5963-bae4-b27f30e3d332",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/uploadduelistmode/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/uploadduelistmode/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:01Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fcbcbd29-54f4-5979-9636-7ce9ec52c2e4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/stopmonktempo74/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/stopmonktempo74/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:01Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--83a5297a-e4f6-5f48-9615-d6870a75a3fb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/soundtanagerflex/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/soundtanagerflex/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:01Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--74e69875-6974-50fb-a59c-f9864f4958fd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/FaceAccountant73/zapretdiscord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/FaceAccountant73/zapretdiscord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:01Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1ff89c4e-b358-5957-8f0a-6e8bce21750f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/AuNic7/differ/refs/heads/main/src/store/Software_v1[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/AuNic7/differ/refs/heads/main/src/store/Software_v1.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:57:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8c520c70-b63a-5ae6-a880-cbe04f57d234",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/troopcourierspin/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/troopcourierspin/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:57Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dc8b7e48-9979-51e4-8ddf-1215dbce6acf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/laneadvocatedawn/zapretdiscord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/laneadvocatedawn/zapretdiscord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:57Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ed87f0d3-f790-5b52-98c4-9513a5ce1803",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hzaY123/caledonia/refs/heads/main/completion/zsh/caledonia-v3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hzaY123/caledonia/refs/heads/main/completion/zsh/caledonia-v3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aa8e889c-720f-5ea5-9c27-692bf94109af",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/bensugursoy/Drone-Swarm-RL-airsim-sb3/refs/heads/main/multi_agent/modified_libs/pettingzoo/butterfly/knights_archers_zombies/img/Drone-Swarm-sb-airsim-R-2[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/bensugursoy/Drone-Swarm-RL-airsim-sb3/refs/heads/main/multi_agent/modified_libs/pettingzoo/butterfly/knights_archers_zombies/img/Drone-Swarm-sb-airsim-R-2.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dd6f38e7-0a5d-5428-9004-994b9a6d84d9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/stitchphysiciancode/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/stitchphysiciancode/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:56Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--db8f664d-e5a0-50ac-a6f9-160de8339d97",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/speedguardianlabel/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/speedguardianlabel/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:56Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--558a7f1c-1477-5112-84ef-b3f5b5113bd8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://182[.]127[.]108[.]252:56903/bin[.]sh",
      "pattern": "[url:value = 'http://182.127.108.252:56903/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:56Z",
      "confidence": 80,
      "labels": [
        "Mozi",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--42e85084-1817-5e9a-a70d-6116f9ddcdbd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Karthijay18/APILEECH/refs/heads/main/poc/Software-v2[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Karthijay18/APILEECH/refs/heads/main/poc/Software-v2.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:54Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f2d28100-c04e-57e5-a8e6-82f500980e2f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/limeropemakerregain/zapretdiscord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/limeropemakerregain/zapretdiscord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:53Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6d59121a-2c8d-58e5-8fa6-5e68cce4ede0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Jaspreet1902/timesfm/refs/heads/main/config/Software-2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Jaspreet1902/timesfm/refs/heads/main/config/Software-2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:52Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--80f0e82f-06dc-59ca-9797-e3c3c30290ae",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/urbanbureaucratclaim/DiscordZapret/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/urbanbureaucratclaim/DiscordZapret/releases/download/2.22.2/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:52Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a66ce120-74a7-532a-977d-55d9d134d0d0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/elchino1982/python-practices/refs/heads/main/object-oriented-programming/06-design-patterns/memento-pattern/practices-python-v2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/elchino1982/python-practices/refs/heads/main/object-oriented-programming/06-design-patterns/memento-pattern/practices-python-v2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--935a1b13-0ee3-5da2-b5c6-f935b3b7f4ec",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/FLORCRIOLLO/blueosint/refs/heads/main/inspoken/Software_1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/FLORCRIOLLO/blueosint/refs/heads/main/inspoken/Software_1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0207602d-8a7b-5178-8e71-a41579859c81",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/weightdukegutter/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/weightdukegutter/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:51Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a1479547-01df-5396-8601-1ede6d6e622a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/tailmartintug/ObhodDiscord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/tailmartintug/ObhodDiscord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:51Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--692f6a1e-0ec9-5a13-8e1a-c44e4f2af16c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/winnerhaulervalley47/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/winnerhaulervalley47/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:50Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7dc37532-50ef-58e4-ae94-967c9d058d9b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/victortraderfold/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/victortraderfold/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:50Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a23cf281-86cb-5c71-9686-119730f0d1be",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/FaceAccountant73/zapret-discord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/FaceAccountant73/zapret-discord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:50Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1b01331d-0751-5067-ad39-ecb5ad63dcf1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/viceswordsmanhide/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/viceswordsmanhide/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:49Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8dcd0d29-d7b5-54e4-9ca0-dcfe4873ff97",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/tidewalruscall/DiscordFix/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/tidewalruscall/DiscordFix/releases/download/2.22.2/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:49Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--277507bb-be60-556b-a134-9e6701701e80",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/tidewalruscall/FixDiscord/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/tidewalruscall/FixDiscord/releases/download/2.22.2/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:45Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--29904b56-871f-593d-b023-85f8c4d0d6d7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/sightspongemall/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/sightspongemall/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:45Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--575ae6df-36a4-59d5-9091-f4f33226ad28",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/laneadvocatedawn/discord-unban/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/laneadvocatedawn/discord-unban/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:45Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--32cff207-3ef0-5a37-8309-c1ca35ba0009",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ibrahmxsyr/Suraksha-Mirage_NexTech1[.]0/refs/heads/main/src/components/charts/Mirage_Nex_Suraksha_Tech_v3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ibrahmxsyr/Suraksha-Mirage_NexTech1.0/refs/heads/main/src/components/charts/Mirage_Nex_Suraksha_Tech_v3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:43Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5b2196fa-e64e-5480-aea2-53469fd01bad",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/toothdovebay/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/toothdovebay/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:42Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2ad00b96-386c-5a08-a533-ca5c8bc3dbbb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/tierriverprogress/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/tierriverprogress/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:42Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9efb024f-050d-5ed3-bbe3-7bc7ad3ad8ce",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/updateseaextol89/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/updateseaextol89/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:41Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ef7ab12c-cfa5-511f-88fa-b7d407b4b7b6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/tealrankenergy/DISCORdZaPRET/releases/download/1[.]16[.]7/discord-zapret-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/tealrankenergy/DISCORdZaPRET/releases/download/1.16.7/discord-zapret-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:41Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c72ba969-3f40-528f-ba62-af24dc3adc46",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/soundtanagerflex/DiScOrDZapREt/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/soundtanagerflex/DiScOrDZapREt/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:41Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--92ef7bda-0217-57bb-a277-c0d21af9dd06",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/turquoiseturkeyoven/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/turquoiseturkeyoven/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:40Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--41cb4fc6-5964-545e-bd32-2850b254ed50",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hardikk1945/system-design-fundamentals/refs/heads/main/highlander/fundamentals-design-system-1[.]9-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hardikk1945/system-design-fundamentals/refs/heads/main/highlander/fundamentals-design-system-1.9-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:39Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a893c05c-b4e7-527a-bb8f-b0f81d52e15e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/volumebudgiefall/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/volumebudgiefall/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:39Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e32c9057-3684-5c1e-ad12-36cc866d5acc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/uploadduelistmode/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/uploadduelistmode/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:39Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ae690257-6ad3-56fc-9fa7-c710c62f4c2a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Ai-Bot-Trader/Ai-bot-Trader-MEV-V2[.]35/archive/refs/heads/main[.]zip",
      "pattern": "[url:value = 'https://github.com/Ai-Bot-Trader/Ai-bot-Trader-MEV-V2.35/archive/refs/heads/main.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:39Z",
      "confidence": 80,
      "labels": [
        "crypto",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--31adaa1e-e65a-52fc-8a11-526643fed31d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/woodpoliticianmind/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/woodpoliticianmind/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:37Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9c8eb3f8-8a34-5965-b1dd-13d0414c2915",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/uploadduelistmode/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/uploadduelistmode/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:36Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--39e39731-f4d9-5fa4-8a7d-0e8f5c3e77ab",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/tidewalruscall/DiscordZapret/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/tidewalruscall/DiscordZapret/releases/download/2.22.2/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:36Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2f766f02-6713-568c-8dd1-2f08b863514f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/woodpoliticianmind/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/woodpoliticianmind/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:35Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0163a915-5d6c-58a3-89e1-cd6c5c7d0ea0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/uploadduelistmode/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/uploadduelistmode/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:35Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--077d06b8-45ea-5545-b50f-c4d2388ea73e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/townfiscalspout/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/townfiscalspout/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:35Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c0bae555-47db-5b25-98b4-6b6f3b6e1dbd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://tmcksa[.]com/APAGO/img_104956[.]png",
      "pattern": "[url:value = 'https://tmcksa.com/APAGO/img_104956.png']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:30Z",
      "confidence": 80,
      "labels": [
        "PureLogsStealer",
        "malware",
        "malware_download",
        "stego"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7aa4d243-eadb-5ad4-90db-d3ac522647f8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/woodpoliticianmind/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/woodpoliticianmind/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:30Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2fd24f5f-b060-505b-a92a-4ba2e68bd494",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/webpaladinbless/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/webpaladinbless/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:30Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0c1ad714-2661-5440-9340-4b8b34eb27c7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/ultrastationfitting/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/ultrastationfitting/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:30Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4da1c0d0-f122-5c30-b214-7568f2b4f009",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/tealrankenergy/yOuTUBE-ZapRet/releases/download/1[.]17[.]1/youtube-zapret-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/tealrankenergy/yOuTUBE-ZapRet/releases/download/1.17.1/youtube-zapret-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:30Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c3c2257c-3db3-585a-90d5-ca93e3eab415",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/sharesovereignstrut/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/sharesovereignstrut/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:30Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6faab9a7-a06a-5231-8df2-060a7e529a8a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/sharedivinershroud/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/sharedivinershroud/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:30Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2a7f8012-addf-515d-a8ab-91fdf2675b35",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/updateseaextol89/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/updateseaextol89/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:29Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1209369f-099e-5c3d-a85f-6cf8badf2df2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/speedguardianlabel/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/speedguardianlabel/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:29Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--331993ba-862b-5a85-b561-edd8b29d9299",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/tierriverprogress/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/tierriverprogress/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:26Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--271a064a-66c1-57ab-b6f5-a170e6419c24",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/webpaladinbless/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/webpaladinbless/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:24Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--272c0cc7-0764-5aa0-ae44-fee2608a0105",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/troopcourierspin/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/troopcourierspin/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:24Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--27c48a02-2cc2-5ee0-80bc-4e2caffc8eed",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/teracashierwish83/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/teracashierwish83/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:24Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--44b2cb30-5105-5dbb-8ed6-9b24249ed9d0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/LeonardusOvan06/Free-API/refs/heads/main/Images/Free-API-3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/LeonardusOvan06/Free-API/refs/heads/main/Images/Free-API-3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:21Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4f3107ff-4fda-59b2-a212-50b2aae1f283",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/tierriverprogress/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/tierriverprogress/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:21Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--027e1238-5194-5950-b628-aed846824fcb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/tidewalruscall/zapret-discord-youtube/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/tidewalruscall/zapret-discord-youtube/releases/download/2.22.2/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:21Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--89b83ebe-ac47-5e4b-8152-6fd62f0c2faa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/stadiumdamseledge/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/stadiumdamseledge/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:21Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4218d10c-563f-5a37-ad71-9d9d1c9436e7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/sightspongemall/DiScOrDZapREt/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/sightspongemall/DiScOrDZapREt/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:20Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0fad435b-5984-52cb-a669-bcdf48b0e94d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/segmentstagevary/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/segmentstagevary/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:20Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--de5cdccf-e268-5542-8259-47d54400e1c9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/rapidsalbatrossstar/DiScOrDZapREt/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/rapidsalbatrossstar/DiScOrDZapREt/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:20Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4cf89a9c-d923-587e-b6df-5e7123239258",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/volumenewtday/TeLEgrAM-ZApReT/releases/download/1[.]16[.]3/telegram-zapret-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/volumenewtday/TeLEgrAM-ZApReT/releases/download/1.16.3/telegram-zapret-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:19Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--222328a2-1298-55ae-8615-a376b2cfa623",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/tailmartintug/ObhodDiscord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/tailmartintug/ObhodDiscord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:19Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4a6773a5-2ce9-57db-9072-d266fabffcc2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/SplendorAblePincers/zapretdiscord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/SplendorAblePincers/zapretdiscord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:16Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c0123bd6-075e-5b88-a5b1-f2569269d747",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/laneadvocatedawn/discord-zapret/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/laneadvocatedawn/discord-zapret/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:15Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e6ef016a-9052-5f75-a5f1-4fd462b98e02",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/webpaladinbless/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/webpaladinbless/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:14Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5dec4eb8-de5f-5bc2-8266-fdab9aff5e2e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/stoplovebirdfold86/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/stoplovebirdfold86/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:14Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9e6d1473-4c65-5e00-bcc9-ca8bfb75c264",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/sharedivinershroud/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/sharedivinershroud/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:13Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d7bddece-c9e8-5f33-bf71-8448afa5f189",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/turquoiseturkeyoven/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/turquoiseturkeyoven/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:11Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ec6a8d57-558d-55a2-9d0c-2386636aae9f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/teracashierwish83/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/teracashierwish83/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:11Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cc1c5a0e-a726-5048-8256-fcf4ceb93876",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/tonemothshout/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/tonemothshout/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:10Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ccf8e629-7c85-5f84-89c8-6776ab2b99a4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/PhotonBladesmanTube/zapret-discord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/PhotonBladesmanTube/zapret-discord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:09Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e266c085-89e6-5321-8bd9-688b139f5c45",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/thornbailiffhoe/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/thornbailiffhoe/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:08Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d280dea8-bda0-58de-b0ef-3316db735611",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Beatvyaeliminate/zapretdiscord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/Beatvyaeliminate/zapretdiscord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:08Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c94373ab-5f1d-5d83-96b8-0e0575de3ad5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/turquoiseturkeyoven/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/turquoiseturkeyoven/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:07Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--de787883-fd95-5d79-b824-484222eed3cb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/updateseaextol89/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/updateseaextol89/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:06Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6267c7a6-acd7-5a5e-88d0-f27546329c27",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/sharesovereignstrut/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/sharesovereignstrut/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:06Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4006f82e-5c35-5561-960e-eeb28df6615f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/stoplovebirdfold86/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/stoplovebirdfold86/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:03Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2b765ed7-b41a-5bc2-a2ba-a5f715d25770",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/uploadduelistmode/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/uploadduelistmode/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:01Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a37bba4a-64c1-57d2-95d9-ff28dd514f49",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/sharesovereignstrut/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/sharesovereignstrut/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:01Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3f1108ce-fb92-5e89-97fe-5d530b71a25c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/troopcourierspin/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/troopcourierspin/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:00Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a53d7a86-156a-501e-8a1f-243188477b33",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/troopcourierspin/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/troopcourierspin/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:00Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--177a2549-62ed-5125-af74-ed76f20b601f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/stopmonktempo74/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/stopmonktempo74/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:56:00Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--83d6e5be-d59a-53f4-969e-3ce0763efde5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/winnerhaulervalley47/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/winnerhaulervalley47/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:59Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--84dd548d-e245-5a7b-b8c7-afbd93f1bfae",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/townscholarcloak/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/townscholarcloak/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:58Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9bf220ed-0b81-52a4-8894-5e67f76c0545",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/hiverobinadore/DIscORDzApREt/releases/download/1[.]13[.]4/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/hiverobinadore/DIscORDzApREt/releases/download/1.13.4/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:58Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--862cae19-f67e-5d37-b3eb-37813cc4055d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Deepeshjangid1729/LLM-judge-reporting/refs/heads/main/llm_judge_reporting/LLM-judge-reporting-v2[.]5-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Deepeshjangid1729/LLM-judge-reporting/refs/heads/main/llm_judge_reporting/LLM-judge-reporting-v2.5-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:56Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1ca00199-cc68-56e2-905e-7de3951dd314",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/tidewalruscall/ZapretDiscord/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/tidewalruscall/ZapretDiscord/releases/download/2.22.2/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:56Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f06ae456-e252-56bf-b87a-f3d6129d4b34",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/stitchphysiciancode/DiScOrDZapREt/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/stitchphysiciancode/DiScOrDZapREt/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:56Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6eded0cd-cb26-50ad-98d3-5366d2deffd1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/leke-adewa/short-video-maker/refs/heads/main/output/maker_short_video_3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/leke-adewa/short-video-maker/refs/heads/main/output/maker_short_video_3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:55Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b06645ce-4f6e-5487-be14-562bf954995d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/tonemothshout/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/tonemothshout/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:55Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9b20b845-3ac1-5024-b931-0f725adba245",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/stadiumworldspeed/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/stadiumworldspeed/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:55Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e2ff558e-f366-551e-800d-bb941321ff1c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/victortraderfold/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/victortraderfold/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:54Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3fb160c7-ddec-5c70-899d-27a112a97b7e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/SplendorAblePincers/discordzapret/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/SplendorAblePincers/discordzapret/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:54Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c151f9fd-68eb-514d-ab09-ed7ef4c19231",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/updateseaextol89/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/updateseaextol89/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:53Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--89e6253f-6147-5a3e-93b1-70d70474158c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/girish6055/NanoBanana-PPT-Skills/refs/heads/main/styles/Nano-Banana-Skills-PP-3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/girish6055/NanoBanana-PPT-Skills/refs/heads/main/styles/Nano-Banana-Skills-PP-3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:51Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5e8c8179-3c6f-59a5-88d8-77b9286fc5f1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/stoplovebirdfold86/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/stoplovebirdfold86/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:51Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b9435a6f-4aa6-5e52-964c-56621d7fa862",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/ultrastationfitting/DiScOrDZapREt/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/ultrastationfitting/DiScOrDZapREt/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:49Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--832b82d4-08d2-598a-844b-17b29118af22",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/taildruidblade36/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/taildruidblade36/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:48Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3f21555a-59c2-5084-a0f2-83fb0edde1e3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/volumebudgiefall/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/volumebudgiefall/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:47Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7bfef857-0a7f-52a3-b8dc-860676b8c63b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/stadiumworldspeed/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/stadiumworldspeed/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:46Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a55ed6bc-d309-50b5-90e2-2bec174192c0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/weightdukegutter/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/weightdukegutter/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:45Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--16defe67-3e7e-5190-b337-5af397a0ae3b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/webpaladinbless/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/webpaladinbless/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:45Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--50aea683-2cc1-52f9-8a1b-4fa908954524",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/toothdovebay/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/toothdovebay/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:45Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1c0d79d7-0a01-56ef-a7aa-9397bc30b05d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/signdiplomatpraise/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/signdiplomatpraise/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:44Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f9770f92-c703-5a90-b76a-a2e475c93490",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/ultrastationfitting/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/ultrastationfitting/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:43Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--514a8ae6-f150-57d8-843b-342f741aa2e6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/viceswordsmanhide/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/viceswordsmanhide/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:39Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8aef192d-b3df-5bc1-9ae7-711b27e9aa58",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/turquoiseturkeyoven/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/turquoiseturkeyoven/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:39Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--44202a2a-397e-5132-b4a9-c49e2776a051",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/thornbailiffhoe/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/thornbailiffhoe/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:39Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5e5fb845-ee7e-5626-914c-6627b5b74b9f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/laneadvocatedawn/zapretdiscord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/laneadvocatedawn/zapretdiscord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:39Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--655eaaf4-dfdd-5c73-951a-05656f52e30b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/PhotonBladesmanTube/discordzapret/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/PhotonBladesmanTube/discordzapret/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:39Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5c94cdc8-cdc5-5e76-bc9b-daedc6ae574b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/stadiumworldspeed/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/stadiumworldspeed/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:38Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--69a60f21-2010-5f84-a2b2-ce3e88c642b0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/segmentstagevary/DiScOrDZapREt/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/segmentstagevary/DiScOrDZapREt/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:38Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b9436155-00f4-5479-8293-44e4dff35036",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/soundtanagerflex/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/soundtanagerflex/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:37Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cda112eb-e927-599d-8d0a-474972db0777",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/limeropemakerregain/discord-unban/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/limeropemakerregain/discord-unban/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:37Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3f00848f-f63a-52b2-8d42-08abc077421b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/toothdovebay/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/toothdovebay/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:36Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9e613d67-6bf9-5956-8ecd-726d73dc9053",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/stadiumworldspeed/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/stadiumworldspeed/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:36Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a85c3e5a-91ad-59d8-b2c2-02267471989f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/sharesovereignstrut/DiScOrDZapREt/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/sharesovereignstrut/DiScOrDZapREt/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:36Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7a74c59a-2d5d-554c-9351-daf6f1d24583",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/victortraderfold/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/victortraderfold/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:35Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e41eb249-311f-5c24-bece-0aa720540fed",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/victortraderfold/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/victortraderfold/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:33Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1a8a6fd9-d6fe-5161-9de5-80c5f08a4e4b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/laneadvocatedawn/discord-zapret/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/laneadvocatedawn/discord-zapret/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:33Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--40c7c86b-e119-5d50-9a3c-78dbbc251a1d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Giro03k/claude-statistical-analysis-skill/refs/heads/main/references/statistical_analysis_claude_skill_1[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Giro03k/claude-statistical-analysis-skill/refs/heads/main/references/statistical_analysis_claude_skill_1.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:32Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c4b40307-0066-5bfd-af2f-c6457aba4d2d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/stitchphysiciancode/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/stitchphysiciancode/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:32Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a6e022dd-e2f4-5ffa-902a-9a53d71038af",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/taildruidblade36/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/taildruidblade36/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:29Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1da6c9fa-6724-57cd-b7c5-e83b83caeb47",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/HardHyena978/Kitvault/refs/heads/main/backend/middleware/Software-3[.]9-beta[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/HardHyena978/Kitvault/refs/heads/main/backend/middleware/Software-3.9-beta.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c54c0921-5d20-5de6-9498-08338b0a3149",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/stadiumdamseledge/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/stadiumdamseledge/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:28Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--70d9f361-9497-5662-996d-bec0ae1c9fe1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/viceswordsmanhide/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/viceswordsmanhide/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:25Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cb1dacea-be3a-55b7-9ec1-f01dfef161bb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/turquoiseturkeyoven/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/turquoiseturkeyoven/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:25Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a24443c3-bcfd-558b-91b2-1fe1ff5a77f9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/woodpoliticianmind/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/woodpoliticianmind/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:20Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--321e787a-acb1-562b-9653-8e9af4a75ff6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/turquoiseturkeyoven/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/turquoiseturkeyoven/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:20Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2a011b68-1920-5815-acf4-0c237c1e7256",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/turquoiseturkeyoven/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/turquoiseturkeyoven/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:17Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c5db952c-fa54-5973-ac4b-8d1e648fe8e9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/toothdovebay/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/toothdovebay/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:17Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--14a983f1-b882-54ad-adb9-359d6c7a5256",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/ultrastationfitting/DiScOrDZapREt/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/ultrastationfitting/DiScOrDZapREt/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:16Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7bd11890-c31f-5828-93e6-581491bd5a2a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/spiralarchertassel/yOutUbEZapREt/releases/download/1[.]11[.]5/youtube-zapret-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/spiralarchertassel/yOutUbEZapREt/releases/download/1.11.5/youtube-zapret-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:16Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--691eaf7e-8b02-542f-b2c0-6ff2b4b80245",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/sharedivinershroud/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/sharedivinershroud/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:16Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--377e3233-dbbb-5821-a9f0-daa1671bafe2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/victortraderfold/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/victortraderfold/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:15Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a3b79609-20a9-503b-a53d-492933d37aef",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/viceswordsmanhide/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/viceswordsmanhide/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:15Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0548ee01-d78e-5c94-9b4b-3e910c54e681",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/updateseaextol89/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/updateseaextol89/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:14Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--be2e5f2e-b7bc-580f-a655-f72167e10dad",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/stadiumdamseledge/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/stadiumdamseledge/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:14Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d7e5d88b-5b6a-5099-aa59-107df5f21550",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/toothdovebay/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/toothdovebay/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:13Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--73714577-483c-5f30-b4b4-70559e55db61",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/ultrastationfitting/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/ultrastationfitting/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:11Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--965e650d-df76-5f6f-86b2-cea60884f2b6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/taildruidblade36/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/taildruidblade36/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:11Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--223c5a54-1d80-5f18-a5e3-3f0a0fa5eaff",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/snatchmakersmash/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/snatchmakersmash/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:11Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--09d32d6f-e8be-5ad5-8e54-ab79315db6b5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/taildruidblade36/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/taildruidblade36/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:09Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eb03140d-eb8b-5ad2-8c80-b573a426d969",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/tidewalruscall/zapret-discord-youtube/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/tidewalruscall/zapret-discord-youtube/releases/download/2.22.2/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:04Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d263ebd9-213e-5209-a080-a10882d62a7e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/widthpelicancock/DiscordFix/releases/download/3[.]33[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/widthpelicancock/DiscordFix/releases/download/3.33.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:02Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--da000ca9-f8bb-5d85-98c3-363bb340dc78",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/taildruidblade36/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/taildruidblade36/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:01Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--11176be5-fd2e-5776-85a4-040e7d3bdc71",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/stitchphysiciancode/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/stitchphysiciancode/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:01Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4f28b240-1b77-5668-bf10-e1037aca1da9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/smashfireagora/zapret-discord-youtube/releases/download/FixDiscord/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/smashfireagora/zapret-discord-youtube/releases/download/FixDiscord/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:01Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--86366642-ef17-50b8-a2c9-5c498b509237",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/stoplovebirdfold86/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/stoplovebirdfold86/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:00Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1c885320-8e99-53c4-af3f-a10167ab5fb5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/fountainpenguinjack/discordzapret/releases/download/1[.]9[.]9c/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/fountainpenguinjack/discordzapret/releases/download/1.9.9c/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:55:00Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e79e0b5b-21ae-54f9-902a-a40e725db8ad",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/anshulrules/Antigravity2Api/refs/heads/main/src/transform/gemini/Antigravity_Api_2[.]5-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/anshulrules/Antigravity2Api/refs/heads/main/src/transform/gemini/Antigravity_Api_2.5-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:59Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3c56f09a-8754-5bcd-989f-d691e3c8e818",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/smashfireagora/DiscordObhod/releases/download/DiscordObhod/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/smashfireagora/DiscordObhod/releases/download/DiscordObhod/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:58Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cfd60205-69d6-5db7-b126-068bcaba3692",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/widthpelicancock/ZapretDiscord/releases/download/3[.]33[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/widthpelicancock/ZapretDiscord/releases/download/3.33.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:55Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9767eba3-4f94-56ad-bbb7-ca0a75f6bf87",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/thornbailiffhoe/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/thornbailiffhoe/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:55Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f221cac5-605f-56dd-b437-5ee8ae51cd5c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/webpaladinbless/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/webpaladinbless/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:53Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4ed73f28-c556-5ee9-be9d-45ce9e5ac398",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/victortraderfold/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/victortraderfold/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:52Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--99746f82-46c2-5f82-909b-32d08a6e4e95",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/townfiscalspout/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/townfiscalspout/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:52Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b1b982fe-06b1-53da-927d-e7e43d4a8833",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/teracashierwish83/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/teracashierwish83/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:52Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8d623e15-873a-5ddc-bcf7-3206ccdbee4d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/updateseaextol89/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/updateseaextol89/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:50Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--99d36842-88a6-5557-bc06-24d2115b8183",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/tailmartintug/DiscordObhod/releases/download/DiscordObhod/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/tailmartintug/DiscordObhod/releases/download/DiscordObhod/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:50Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--763f9e58-ee1b-5906-a62c-570a00765b6b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/hih24337/tabb2/refs/heads/main/routes/tabb_1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/hih24337/tabb2/refs/heads/main/routes/tabb_1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:48Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--84e9e221-e990-5019-bbd8-dc22c485fc9d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/volumebudgiefall/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/volumebudgiefall/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:48Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3b827d31-0345-51f0-87dd-1b34e4c88607",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/urbanbureaucratclaim/DiscordFix/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/urbanbureaucratclaim/DiscordFix/releases/download/2.22.2/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:48Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3e549abe-2b43-5530-a0c3-dd20ed902afc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/tonemothshout/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/tonemothshout/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:48Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--14720908-34a4-5882-a67a-77970eada825",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/girish6055/girish6055[.]github[.]io/refs/heads/main/phaenantherous/io-github-girish-v2[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/girish6055/girish6055.github.io/refs/heads/main/phaenantherous/io-github-girish-v2.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:46Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--787250bc-e981-5875-b200-4be9eb1be573",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/PhotonBladesmanTube/zapret-discord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/PhotonBladesmanTube/zapret-discord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:46Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6bae1c14-9380-5455-a9c0-93a24ac06f17",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/FaceAccountant73/zapretdiscord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/FaceAccountant73/zapretdiscord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:46Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--64cdd470-90be-58f3-8322-5cfc2ccc9f49",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/girish6055/girish6055[.]github[.]io/refs/heads/main/phaenantherous/io_girish_github_2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/girish6055/girish6055.github.io/refs/heads/main/phaenantherous/io_girish_github_2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--900328f5-a3f9-5710-bc09-e3d4dbeb9807",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/HungChoo/Autoswap-plumeV2/refs/heads/main/preconcede/plume_Autoswap_2[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/HungChoo/Autoswap-plumeV2/refs/heads/main/preconcede/plume_Autoswap_2.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:44Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--50d3f95d-90b4-53e6-8da1-73d7e7618131",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/victortraderfold/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/victortraderfold/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:44Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8a124549-b52a-5a73-90e5-462adbe4e3f0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/tierriverprogress/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/tierriverprogress/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:43Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e460afda-57b7-586e-9ed9-1edcee61ce79",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/tailmartintug/ZapretDiscord/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/tailmartintug/ZapretDiscord/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:43Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4983f0aa-4a75-5074-bf94-e1027df6769d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/stopmonktempo74/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/stopmonktempo74/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:43Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ff3b26a8-7471-5236-b727-7d329850a459",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/taginvestorserver/YoUTuBE-ZapreT/releases/download/1[.]12[.]1/youtube-zapret-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/taginvestorserver/YoUTuBE-ZapreT/releases/download/1.12.1/youtube-zapret-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:42Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b7ad22cb-b293-5712-bcbe-f4dfa3ba5110",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/stopmonktempo74/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/stopmonktempo74/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:41Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4a263c29-93a3-5456-9445-5bb6d5fe57b1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/soundtanagerflex/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/soundtanagerflex/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:39Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a47e8f85-9487-548b-8d21-fdec2fd466d0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/thornbailiffhoe/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/thornbailiffhoe/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:37Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--92df7e87-9d38-58e8-bf3f-ba8a83a31bac",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/tailmartintug/DiscordObhod/releases/download/DiscordObhod/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/tailmartintug/DiscordObhod/releases/download/DiscordObhod/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:37Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--651b3440-84a9-5e8b-9892-2f75e54333a6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/sharesovereignstrut/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/sharesovereignstrut/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:37Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1a182194-8bc9-5bea-b194-fb569b6ff91d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/widthpelicancock/ZapretDiscord/releases/download/3[.]33[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/widthpelicancock/ZapretDiscord/releases/download/3.33.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:36Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--54c409d4-5fb6-57f2-a530-3809decaa0d6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/webpaladinbless/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/webpaladinbless/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:36Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0113f16f-c1be-5901-8645-6ac76f7d1730",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/stoplovebirdfold86/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/stoplovebirdfold86/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:36Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--70947372-8c02-5ca4-a2a7-4e44a8cc04ce",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/LeonardusOvan06/Free-API/refs/heads/main/Images/API_Free_v3[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/LeonardusOvan06/Free-API/refs/heads/main/Images/API_Free_v3.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:34Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--31bc255b-c08d-5ee9-857e-05ab8d14742d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/victortraderfold/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/victortraderfold/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:33Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dbbc413e-38d8-5ac3-8c95-2b56d779622f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/teracashierwish83/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/teracashierwish83/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:33Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c841c303-6d00-5e08-9b09-b4e6bf0a275e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/woodpoliticianmind/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/woodpoliticianmind/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:32Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5fb38dd3-e27f-5105-9c0f-0c00e7bdb975",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/victortraderfold/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/victortraderfold/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:32Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--27b4cf80-b76a-589f-a8e0-c2ceb2842bd4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/tonemothshout/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/tonemothshout/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:32Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--afd6203b-ba54-5c6c-81a9-3fea98f74db6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/SplendorAblePincers/zapretdiscord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/SplendorAblePincers/zapretdiscord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:31Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bf0d9d21-9ee0-5637-9e39-f54e5e087c74",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/wici123/awesome-edu-deals/refs/heads/main/Christmasy/edu_deals_awesome_v3[.]6[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/wici123/awesome-edu-deals/refs/heads/main/Christmasy/edu_deals_awesome_v3.6.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--73486f42-02a0-562b-bfda-0f604dd03a3e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/townfiscalspout/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/townfiscalspout/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:30Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9a906b46-22d9-5656-9cd7-baf54430071d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/widthpelicancock/DiscordZapret/releases/download/3[.]33[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/widthpelicancock/DiscordZapret/releases/download/3.33.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:29Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--063531bb-51c2-5093-af49-98483b109b30",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/updateseaextol89/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/updateseaextol89/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:29Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c465f1a1-c748-54bc-9e67-2c6bf008dfd4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/HUGO9K/spec-gen/refs/heads/main/examples/openspec-cli/openspec/specs/validation/gen-spec-v3[.]2-alpha[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/HUGO9K/spec-gen/refs/heads/main/examples/openspec-cli/openspec/specs/validation/gen-spec-v3.2-alpha.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1fc8b582-9969-5b0b-9a26-d56062f71a89",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/tonemothshout/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/tonemothshout/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:28Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4a692e83-b6ac-560f-bf15-5594c26069f2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/tierriverprogress/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/tierriverprogress/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:26Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ad62a4a2-6a65-55e9-b5ce-8e17286e880d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/tidewalruscall/ZapretDiscord/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/tidewalruscall/ZapretDiscord/releases/download/2.22.2/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:26Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c9593e35-bf3f-52ae-9f71-6f87558d4dbd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/townscholarcloak/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/townscholarcloak/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:25Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e8c706ef-3897-5ff6-877b-a96786bf52a5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/sharesovereignstrut/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/sharesovereignstrut/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:25Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f8d7dcd1-279c-578c-8e39-bf51802e8a7a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/speedguardianlabel/DiScOrDZapREt/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/speedguardianlabel/DiScOrDZapREt/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:24Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c2efff3e-4796-549a-ae4e-5b5c7e4d7155",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/sharesovereignstrut/DiScOrDZapREt/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/sharesovereignstrut/DiScOrDZapREt/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:23Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d44b2faa-ebff-5acb-b186-cece580debdc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/winnerhaulervalley47/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/winnerhaulervalley47/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:22Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8695ad11-2ab7-5477-8e77-5e9283811c3e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/webpaladinbless/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/webpaladinbless/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:22Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6136fcaf-9b5d-59c1-9704-f86e7d956aa2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/townscholarcloak/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/townscholarcloak/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:22Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c07ddc27-cf14-5277-a11c-916eafa536df",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/smashfireagora/ObhodDiscord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/smashfireagora/ObhodDiscord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:22Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--daced6dc-d509-5e22-967f-1ddd873c58c3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/volumenewtday/DIScORDZaPRET/releases/download/1[.]16[.]6/discord-zapret-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/volumenewtday/DIScORDZaPRET/releases/download/1.16.6/discord-zapret-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:21Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4ee118e6-6e86-50f4-8efb-ed914b00e5cb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/tierriverprogress/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/tierriverprogress/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:21Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bb85bf0b-7629-5481-beba-6fddac2b489a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/teracashierwish83/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/teracashierwish83/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:21Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--daedf3c8-e442-555b-9099-f08060d391d7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/stitchphysiciancode/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/stitchphysiciancode/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:21Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9b5a9131-4915-511f-87ce-360fff4c1598",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/webpaladinbless/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/webpaladinbless/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:19Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0946b474-87d2-5c7b-9814-6db3805c27ec",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/townscholarcloak/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/townscholarcloak/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:19Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f1420eab-595b-5b9e-b2f6-cb9a58f2fa31",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/tidewalruscall/DiscordZapret/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/tidewalruscall/DiscordZapret/releases/download/2.22.2/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:15Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--247007a4-8fbb-5649-bc6a-b36190eb7e52",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/PhotonBladesmanTube/discord-zapret/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/PhotonBladesmanTube/discord-zapret/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:15Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--afa0ea8c-6375-5396-8296-af0bfb32da42",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/uploadduelistmode/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/uploadduelistmode/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:14Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--883b9e02-ebb6-5395-80a0-227cde8269f1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/Karimchgara/Wolaita_Sodo_Telecom_Analysis/refs/heads/main/nosogeography/Wolaita_Sodo_Telecom_Analysis-1[.]8[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/Karimchgara/Wolaita_Sodo_Telecom_Analysis/refs/heads/main/nosogeography/Wolaita_Sodo_Telecom_Analysis-1.8.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:13Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b839ff13-3c33-5bf2-be42-e1ebe27ad98c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/elianozzz/m/refs/heads/main/exiguous/Software_3[.]9[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/elianozzz/m/refs/heads/main/exiguous/Software_3.9.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:12Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c40ee6ce-8a0b-5848-9fcb-1f1206f4a4c7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/woodpoliticianmind/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/woodpoliticianmind/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:10Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d5f352db-0a41-5b3b-abba-eaa2d9355750",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/weightdukegutter/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/weightdukegutter/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:10Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2d85c785-977c-5a09-bf15-3c4d90f47588",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/volumenewtday/YOutUBeZapReT/releases/download/1[.]17[.]0/youtube-zapret-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/volumenewtday/YOutUBeZapReT/releases/download/1.17.0/youtube-zapret-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:10Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--32e8d977-dc5c-5595-aa50-b8e76013b862",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/ultrastationfitting/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/ultrastationfitting/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:09Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a74dfd57-bb45-5a6b-a234-b9fb64219247",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/HUANGcvs/MeiGen-AI-Design-MCP/refs/heads/main/plugin/skills/Design-Mei-MCP-Gen-A-v3[.]4[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/HUANGcvs/MeiGen-AI-Design-MCP/refs/heads/main/plugin/skills/Design-Mei-MCP-Gen-A-v3.4.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:54:06Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--39b3f421-f0a9-5ba8-a714-da79291665f5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:49ca3c99f15ae026938fec0fae18173a8a77976e0cd5f7f2e22b9ff7ef261bbc",
      "pattern": "[file:hashes.'SHA-256' = '49ca3c99f15ae026938fec0fae18173a8a77976e0cd5f7f2e22b9ff7ef261bbc']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:50:35Z",
      "confidence": 80,
      "labels": [
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f6c17176-9e7e-5201-84c1-c71e496fbc82",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:08906e5c2a385132f3eb69000ecf18fd126ec4bb252e005f1e48ab0df144fc16",
      "pattern": "[file:hashes.'SHA-256' = '08906e5c2a385132f3eb69000ecf18fd126ec4bb252e005f1e48ab0df144fc16']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:47:21Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "forge",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--83797051-664b-5daf-b825-aae06c3fa631",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:93[.]233[.]116[.]44",
      "pattern": "[ipv4-addr:value = '93.233.116.44']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:45:44Z",
      "confidence": 80,
      "labels": [
        "RAT",
        "asyncrat",
        "drb-ra",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--261159ef-9cd1-5e38-a71f-ac1ccd397df1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:92[.]171[.]20[.]51",
      "pattern": "[ipv4-addr:value = '92.171.20.51']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:45:43Z",
      "confidence": 80,
      "labels": [
        "CHAOS",
        "drb-ra",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b590660c-9259-53f5-a700-c6c9c7bc56b2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:91[.]215[.]85[.]182",
      "pattern": "[ipv4-addr:value = '91.215.85.182']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:45:40Z",
      "confidence": 80,
      "labels": [
        "AdaptixC2",
        "drb-ra",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--baf4d412-b8d9-5ec6-99ff-9aad68ff659e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:46[.]246[.]12[.]22",
      "pattern": "[ipv4-addr:value = '46.246.12.22']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:45:18Z",
      "confidence": 80,
      "labels": [
        "RAT",
        "asyncrat",
        "drb-ra",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c5c04ef8-52f3-5156-921b-3eea68fb186d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:34[.]122[.]196[.]254",
      "pattern": "[ipv4-addr:value = '34.122.196.254']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:44:55Z",
      "confidence": 80,
      "labels": [
        "Mythic",
        "drb-ra",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e42fbbf2-dfb9-5d36-b666-d173e32029fe",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:23[.]102[.]109[.]4",
      "pattern": "[ipv4-addr:value = '23.102.109.4']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:44:46Z",
      "confidence": 80,
      "labels": [
        "AdaptixC2",
        "drb-ra",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c66dc734-ed5c-5fdb-87c2-e3784121a143",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:peterhopkin[.]co[.]uk",
      "pattern": "[domain-name:value = 'peterhopkin.co.uk']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:44:40Z",
      "confidence": 80,
      "labels": [
        "StrelaStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--59bc266c-5ee9-564e-bf6c-47f36c957994",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:4b4cc689cfe36df958c1d91b15b91dfd495ddfced34a14feec2e6dc626bd9bcb",
      "pattern": "[file:hashes.'SHA-256' = '4b4cc689cfe36df958c1d91b15b91dfd495ddfced34a14feec2e6dc626bd9bcb']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:44:37Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "boost",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--629fca19-b63a-5b68-bd83-7c047c3d9196",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:45[.]141[.]148[.]134",
      "pattern": "[ipv4-addr:value = '45.141.148.134']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:44:26Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2cd0ad97-93d3-58bd-b963-ec79aa11cedd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:207[.]56[.]30[.]42",
      "pattern": "[ipv4-addr:value = '207.56.30.42']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:44:21Z",
      "confidence": 80,
      "labels": [
        "PureHVNC",
        "PureRAT",
        "RAT",
        "drb-ra",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3e40cca7-5ec6-5503-b392-201b75b5933c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:202[.]146[.]222[.]48",
      "pattern": "[ipv4-addr:value = '202.146.222.48']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:44:18Z",
      "confidence": 80,
      "labels": [
        "PureHVNC",
        "PureRAT",
        "RAT",
        "drb-ra",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1906ed03-0a02-54cf-8442-72933235c392",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:202[.]146[.]222[.]229",
      "pattern": "[ipv4-addr:value = '202.146.222.229']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:44:18Z",
      "confidence": 80,
      "labels": [
        "PureHVNC",
        "PureRAT",
        "RAT",
        "drb-ra",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--930b1698-c0e9-58ce-9376-a901e5cb5602",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:197[.]147[.]44[.]160",
      "pattern": "[ipv4-addr:value = '197.147.44.160']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:44:14Z",
      "confidence": 80,
      "labels": [
        "PureHVNC",
        "PureRAT",
        "RAT",
        "drb-ra",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cec59552-abae-5cfd-969c-3bf41fbcd328",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:196[.]251[.]122[.]100",
      "pattern": "[ipv4-addr:value = '196.251.122.100']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:44:13Z",
      "confidence": 80,
      "labels": [
        "RAT",
        "asyncrat",
        "drb-ra",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7f7e1197-b785-55e8-95b9-53beb07c3466",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:192[.]253[.]229[.]14",
      "pattern": "[ipv4-addr:value = '192.253.229.14']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:44:09Z",
      "confidence": 80,
      "labels": [
        "PureHVNC",
        "PureRAT",
        "RAT",
        "drb-ra",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1757a0a4-2f46-5d7b-9176-86014f44f2c1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:191[.]107[.]91[.]119",
      "pattern": "[ipv4-addr:value = '191.107.91.119']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:44:06Z",
      "confidence": 80,
      "labels": [
        "RAT",
        "asyncrat",
        "drb-ra",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d4dd3618-ea49-570d-a317-ffd2d07f58bc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:176[.]65[.]139[.]36",
      "pattern": "[ipv4-addr:value = '176.65.139.36']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:43:56Z",
      "confidence": 80,
      "labels": [
        "Mirai",
        "drb-ra",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--09672096-99d9-5d7b-8bed-8b2ee7186e5b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:162[.]35[.]9[.]54",
      "pattern": "[ipv4-addr:value = '162.35.9.54']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:43:49Z",
      "confidence": 80,
      "labels": [
        "EvilGinx",
        "EvilGoPhish",
        "drb-ra",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5ef74313-eabd-51e4-96ab-c5757d9ead50",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:elchapodonpablo[.]duckdns[.]org",
      "pattern": "[domain-name:value = 'elchapodonpablo.duckdns.org']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:43:45Z",
      "confidence": 80,
      "labels": [
        "PureLogsStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d8bc2093-fe49-5bc4-8033-2251603c07ff",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:102[.]220[.]163[.]236",
      "pattern": "[ipv4-addr:value = '102.220.163.236']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:43:45Z",
      "confidence": 80,
      "labels": [
        "PureLogsStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f21556bf-36b2-5598-8550-2c4fa9725eca",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:129[.]21[.]21[.]81",
      "pattern": "[ipv4-addr:value = '129.21.21.81']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:43:21Z",
      "confidence": 80,
      "labels": [
        "Mythic",
        "drb-ra",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2305c6a2-9d89-5387-99a9-c07770fef000",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:128[.]90[.]108[.]138",
      "pattern": "[ipv4-addr:value = '128.90.108.138']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:43:20Z",
      "confidence": 80,
      "labels": [
        "RAT",
        "dcrat",
        "drb-ra",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bf610b94-06e9-5240-b256-d19d78e4d58f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:128[.]90[.]105[.]65",
      "pattern": "[ipv4-addr:value = '128.90.105.65']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:43:20Z",
      "confidence": 80,
      "labels": [
        "PureHVNC",
        "PureRAT",
        "RAT",
        "drb-ra",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--75681d55-33d4-540d-86cf-0d5f8e84f344",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:128[.]90[.]105[.]221",
      "pattern": "[ipv4-addr:value = '128.90.105.221']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:43:20Z",
      "confidence": 80,
      "labels": [
        "RAT",
        "asyncrat",
        "drb-ra",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8fd9e7aa-d3ce-52cf-903d-fdbdaa4c9b8a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:109[.]110[.]184[.]18",
      "pattern": "[ipv4-addr:value = '109.110.184.18']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:43:16Z",
      "confidence": 80,
      "labels": [
        "PureHVNC",
        "PureRAT",
        "RAT",
        "drb-ra",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0de18455-2391-5527-8762-eaa3a8c09c02",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:102[.]117[.]170[.]124",
      "pattern": "[ipv4-addr:value = '102.117.170.124']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:43:04Z",
      "confidence": 80,
      "labels": [
        "Mythic",
        "drb-ra",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--949cd7d7-f927-500d-8038-40b43318d2fc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/snatchmakersmash/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/snatchmakersmash/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:42:28Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--35fdaf22-7be5-58d8-ab08-b183412045de",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/powerchrysalisdash/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/powerchrysalisdash/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:42:23Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e3180c70-f7fc-549a-88e1-7bd4adb37d17",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/platoonpheasantswell/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/platoonpheasantswell/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:42:20Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--55e36c05-d2c0-56bf-b19e-f57361ec8f88",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/pureperfumername/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/pureperfumername/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:42:16Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0260072b-0ff0-584d-9509-9edb3b690d70",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/rapidsalbatrossstar/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/rapidsalbatrossstar/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:42:14Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4afcfae2-b4b8-5df5-856d-b389b2360497",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/segmentstagevary/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/segmentstagevary/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:42:13Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cd312515-7716-5c2b-9e9f-0b8cdd677a39",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/portalpoemroof/DiScOrDZapREt/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/portalpoemroof/DiScOrDZapREt/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:42:10Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--055b6c2c-961f-52bf-85b7-8d454150e3b8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/pooldivinerdawn71/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/pooldivinerdawn71/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:42:10Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1c48a756-15f4-530e-90a3-415890feb155",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/pauseloopbolt/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/pauseloopbolt/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:42:10Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--96905a71-ccbb-5cb4-8b86-4d94450c6871",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/sourcesnaillimit/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/sourcesnaillimit/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:42:06Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--77431072-058d-569b-9d19-2b8ca856d196",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/sideshadecompact/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/sideshadecompact/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:42:03Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--464f9886-0adb-5809-9432-4aea9289e8ff",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/smartbeemesmerize/zapret-discord-youtube/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/smartbeemesmerize/zapret-discord-youtube/releases/download/2.22.2/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:41:55Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3d704319-fc8a-57dc-8815-06792d39d2a6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:1d32753359c4f69d692f319fb16c2aabcb940fb7e7aa5ddabc78403e47795ea5",
      "pattern": "[file:hashes.'SHA-256' = '1d32753359c4f69d692f319fb16c2aabcb940fb7e7aa5ddabc78403e47795ea5']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:41:52Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "macOS",
        "stratos",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0f502876-ea57-5f03-a0a6-31280876aa9d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/pyramidchemistraid91/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/pyramidchemistraid91/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:41:50Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--51194b06-50d5-5007-8309-c2ef8540fae3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/sphereswannurse/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/sphereswannurse/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:41:42Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a303df9c-e312-5e28-87a3-63faccd38cf7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/spacerankcoil/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/spacerankcoil/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:41:42Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8bb75e8e-5d77-5418-9e13-e5c1e16b0bae",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/secretprincipalcrypt/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/secretprincipalcrypt/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:41:42Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4285bc0f-a977-5f9f-9830-81d3ec7305b4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/regimentstylistrob/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/regimentstylistrob/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:41:42Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cd8f9b55-8547-50a1-8054-f438d0ebf7b7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/quartzfiscaljam/ZapretDiscord/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/quartzfiscaljam/ZapretDiscord/releases/download/2.22.2/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:41:42Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e1d0df54-ba33-5c60-95be-7ce77d55bcc4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/snaremizukageencoder/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/snaremizukageencoder/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:41:41Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f329196a-f32a-57cc-af42-d8099a4973de",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/snaremizukageencoder/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/snaremizukageencoder/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:41:41Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a1097b8d-2297-5621-b364-361bd0f02c0c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/shellparakeetgrab/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/shellparakeetgrab/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:41:41Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8a8c2676-dbac-5f91-b36a-e327c5b246a2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/pooldivinerdawn71/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/pooldivinerdawn71/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:41:41Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--105a9c3b-4a07-5b88-bbcb-ce6cf1d40444",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/pauseloopbolt/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/pauseloopbolt/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:41:41Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8e8848e4-9508-5537-9e7b-acdeca54c3b4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/snaremizukageencoder/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/snaremizukageencoder/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:41:39Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c072bcf3-0b63-51ce-a113-a730f62f9638",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/pulverizehokagespire/ZapretDiscord/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/pulverizehokagespire/ZapretDiscord/releases/download/2.22.2/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:41:39Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--165b5e4f-4b80-5687-9332-9d4ede917d35",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/secretprincipalcrypt/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/secretprincipalcrypt/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:41:34Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a54d0c2b-0cae-5959-84be-acce2dc315e9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/scarletnoviceadze/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/scarletnoviceadze/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:41:30Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--66c70aed-b8b8-5998-89e2-3d551a0ba62a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/splendorpremierrod/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/splendorpremierrod/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:41:28Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fe51b15c-f99e-5543-8494-c57985a2b972",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/shackleturtlebearing/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/shackleturtlebearing/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:41:27Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2f8efcc7-8610-50fc-8f58-719cb93d3b7b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/portalpoemroof/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/portalpoemroof/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:41:26Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--224f6299-677d-527f-9c94-e8e09ff65684",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/pooldivinerdawn71/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/pooldivinerdawn71/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:41:26Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b863fb99-acd0-53a9-a381-01eb2d6f5dbf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/swifttannerrear90/ZapretDiscord/releases/download/3[.]33[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/swifttannerrear90/ZapretDiscord/releases/download/3.33.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:41:24Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2939fdeb-9452-5da8-91dc-be1c10f74929",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/shellparakeetgrab/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/shellparakeetgrab/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:41:24Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--faa7e0ca-0a02-565e-9112-eddc2ed04ee4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/rubycrewmantier/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/rubycrewmantier/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:41:24Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5aa792b8-4ac4-5bf9-8416-b0ad39aeb097",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/rubycrewmantier/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/rubycrewmantier/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:41:24Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e413911f-7ba3-5808-861a-f3bce9d6e721",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/platoonpheasantswell/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/platoonpheasantswell/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:41:24Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2ed3c959-f166-5463-962c-aa132884996d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/swifttannerrear90/ZapretDiscord/releases/download/3[.]33[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/swifttannerrear90/ZapretDiscord/releases/download/3.33.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:41:23Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d5b9617d-741a-573b-b3c0-7d73244b23e1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/platoonpheasantswell/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/platoonpheasantswell/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:41:23Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d3cadafc-cbfd-5379-a978-4f23f3367c69",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/silentassassinplaza/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/silentassassinplaza/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:41:21Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3be637f7-66ce-518e-b9e3-5bb79093994c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/snatchmakersmash/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/snatchmakersmash/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:41:19Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d2d3a787-32a6-5615-8867-85e6fbc4318c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/swifttannerrear90/DiscordFix/releases/download/3[.]33[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/swifttannerrear90/DiscordFix/releases/download/3.33.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:41:18Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dc119828-3836-5825-bee0-1ed0af042c56",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/splendorpremierrod/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/splendorpremierrod/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:41:18Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7b98926f-8650-5b87-a129-e06510d7ed6b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/powerchrysalisdash/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/powerchrysalisdash/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:41:18Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a62645a1-625d-54c4-bc3f-a86fc7564837",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/portalpoemroof/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/portalpoemroof/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:41:16Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e9b8ddac-6ffe-5a9f-ad81-4371112d91b9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/storagebuilderhem/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/storagebuilderhem/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:41:14Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fc8215ca-bf57-53e8-aab2-0c4c0184e58d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/snaremizukageencoder/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/snaremizukageencoder/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:41:12Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--903ece72-3e4d-58b0-ab6a-02ae7182bd23",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/silentassassinplaza/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/silentassassinplaza/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:41:12Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fc1fb985-7592-51cb-a10c-974f8f85a3e3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/roninbisondeem/DiScOrDZapREt/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/roninbisondeem/DiScOrDZapREt/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:41:12Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5d44bd05-cb6d-5582-aef4-9a5b4c3c7829",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/sphereswannurse/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/sphereswannurse/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:41:10Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f8c5c648-f2de-5660-ab17-4371968afc13",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/spacerankcoil/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/spacerankcoil/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:41:09Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b0fce76c-594c-5356-86e6-9743c8398571",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/smartbeemesmerize/FixDiscord/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/smartbeemesmerize/FixDiscord/releases/download/2.22.2/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:41:09Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--633b2d0b-52a7-5303-99c2-8aa705b91939",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/sourcesnaillimit/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/sourcesnaillimit/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:41:08Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ab2f70d8-fbce-591f-919d-493b0d30f204",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/roninbisondeem/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/roninbisondeem/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:41:08Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5ccd6c78-27da-532d-b957-c575c924f730",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/quartzfiscaljam/ZapretDiscord/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/quartzfiscaljam/ZapretDiscord/releases/download/2.22.2/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:41:08Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--57dd367e-530c-52a9-9905-ff0166603224",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/pyramidchemistraid91/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/pyramidchemistraid91/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:41:08Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ccc7bd42-cfd7-51c7-8812-79a907b116dc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/pulverizehokagespire/FixDiscord/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/pulverizehokagespire/FixDiscord/releases/download/2.22.2/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:41:08Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6e3aed92-45be-5ce0-9282-d9de7a9fca36",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/scarletnoviceadze/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/scarletnoviceadze/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:41:04Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e8ab0206-79e8-5c0a-b8d9-0add3e443d8c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/pitsluggutter/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/pitsluggutter/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:41:03Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f29c9676-3df9-58a4-8b01-561b2cb8a25e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/sphereswannurse/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/sphereswannurse/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:41:01Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d9bb28ea-79f4-5e80-ae11-88f851fdf9e5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/pyramidchemistraid91/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/pyramidchemistraid91/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:41:00Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--355fdfaa-e70e-5c2c-95b4-53a9460e00fc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/splendorpremierrod/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/splendorpremierrod/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:59Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8a46903d-cee6-54e6-81d8-3aef46c42da3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/secretprincipalcrypt/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/secretprincipalcrypt/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:59Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c96a8dae-dbf7-5f60-b496-b81fde1fb0a7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/splendorpremierrod/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/splendorpremierrod/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:57Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--38cefa4c-ff17-511e-8407-e0e35df2bc01",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/separatecouriertube/DiScOrDZapREt/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/separatecouriertube/DiScOrDZapREt/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:56Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cd88a661-a13d-54db-bdf6-5a4a9c0f9e97",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/IvanIvan09/Lua-Spatial-Farm-Assistant/archive/refs/heads/main[.]zip",
      "pattern": "[url:value = 'https://github.com/IvanIvan09/Lua-Spatial-Farm-Assistant/archive/refs/heads/main.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:56Z",
      "confidence": 80,
      "labels": [
        "SVG",
        "malware",
        "malware_download",
        "stealer"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e00fcf60-33a5-580d-98f6-6d24d6e39901",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/roninbisondeem/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/roninbisondeem/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:55Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--29ea76e5-468c-5961-bc86-6ef5f4020e0c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/smartbeemesmerize/DiscordZapret/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/smartbeemesmerize/DiscordZapret/releases/download/2.22.2/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:54Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f6f3458c-d71f-5b1f-bbd9-baa6d65135a8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/pulverizehokagespire/DiscordZapret/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/pulverizehokagespire/DiscordZapret/releases/download/2.22.2/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:54Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a3938e96-b7c7-515b-9150-a6aaa03f1892",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/regimentstylistrob/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/regimentstylistrob/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:53Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c767b04a-4c7f-57b5-bd5e-aebb4e4a81d1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/pureperfumername/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/pureperfumername/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:53Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e2956ba1-e6aa-5fdc-9d9d-a786cb9ba4a8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/pitsluggutter/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/pitsluggutter/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:53Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--afcdbb3f-24de-5aa3-a588-2f072602f11b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/snaremizukageencoder/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/snaremizukageencoder/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:50Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--377dc293-1800-5080-9338-aa9a34b3e9c8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/snaremizukageencoder/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/snaremizukageencoder/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:50Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ec226f75-d070-54ea-b2be-c435f5d566d0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/shellparakeetgrab/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/shellparakeetgrab/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:50Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e3598e12-c0e4-5811-9e47-7e6ec16072b7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/quartzfiscaljam/zapret-discord-youtube/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/quartzfiscaljam/zapret-discord-youtube/releases/download/2.22.2/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:50Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--234e31fe-ee7f-5d41-95c8-ea99b6ae8348",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/sourcesnaillimit/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/sourcesnaillimit/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:47Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ef37a140-a7ee-506d-b36d-1fa8a51066a1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/scarletnoviceadze/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/scarletnoviceadze/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:47Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b66373ef-dadb-50e4-ba2a-9d8169129715",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/scalarcentersquare/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/scalarcentersquare/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:47Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e3277e85-49ab-5234-b7dc-c78b6d449fcb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/shellparakeetgrab/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/shellparakeetgrab/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:46Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eb94b94b-8b96-51a3-9b27-7328e19d2e50",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/platoonpheasantswell/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/platoonpheasantswell/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:46Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2785d24f-2429-5dd7-9d41-d5d0abc092a6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/sphereswannurse/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/sphereswannurse/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:45Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cf7a8d56-2b37-523b-bab5-f26fcbdbd526",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/raysultanprime/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/raysultanprime/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:45Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2c22df42-5f51-5925-9a7f-e34efdf7571a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/silentassassinplaza/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/silentassassinplaza/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:42Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6eda6ef7-c397-5922-9a75-bf74f7fefa18",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/smartbeemesmerize/zapret-discord-youtube/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/smartbeemesmerize/zapret-discord-youtube/releases/download/2.22.2/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:41Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bcb13e84-405b-5fc2-9308-ffedd311547b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/rapidsalbatrossstar/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/rapidsalbatrossstar/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:41Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d06c369c-0d52-58a1-9da7-92ee41cb4484",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/quartzfiscaljam/FixDiscord/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/quartzfiscaljam/FixDiscord/releases/download/2.22.2/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:41Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--893d3e23-f60f-547a-bcb1-f4871070e6d4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/raysultanprime/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/raysultanprime/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:40Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7105c9ff-bb79-5d2c-8d5b-dc6adfa19a75",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/scarletnoviceadze/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/scarletnoviceadze/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:37Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1f0c53b6-01c7-50f0-9264-65736ea17942",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/rubycrewmantier/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/rubycrewmantier/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:37Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--025be3ae-5d6b-5fa7-9b99-9cdc70ff928e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/rimportaldefine/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/rimportaldefine/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:37Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b2890dae-0717-5218-bef9-51ad71199352",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/portalpoemroof/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/portalpoemroof/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:37Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--162890ba-0e14-5d98-9877-834da37e6ff9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/legendarybisonstring/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/legendarybisonstring/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:36Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7cb69dd5-4209-558d-bec7-0cbb7aa2c9f5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://60[.]23[.]74[.]239:58315/bin[.]sh",
      "pattern": "[url:value = 'http://60.23.74.239:58315/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:36Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "None"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c278500e-db8a-5d7a-85a6-ab7d2e9f7a51",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/secretprincipalcrypt/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/secretprincipalcrypt/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:34Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e35013a9-f6f3-5357-bf75-2f66d120929d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/rubycrewmantier/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/rubycrewmantier/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:33Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cf577ad6-0244-5974-b8f0-5b0611a0d3a6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/rubycrewmantier/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/rubycrewmantier/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:33Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--12b14d19-d37f-5ca1-bf87-0ac1065362f9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/arif-staple/ark-survival-evolved-enhancer-pack/archive/refs/heads/master[.]zip",
      "pattern": "[url:value = 'https://github.com/arif-staple/ark-survival-evolved-enhancer-pack/archive/refs/heads/master.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:33Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "stealer"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a78e23fd-5f23-55a5-be37-626cc2d0e90d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/shellparakeetgrab/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/shellparakeetgrab/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:32Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--719a5a7a-8133-597f-8199-d3d528324410",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/separatecouriertube/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/separatecouriertube/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:32Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--426fd7f1-2673-5a67-8600-b948a22ce130",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/quartzfiscaljam/DiscordFix/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/quartzfiscaljam/DiscordFix/releases/download/2.22.2/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:32Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e49cf79d-8db7-5b58-8927-fc2e93b59eba",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/sideshadecompact/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/sideshadecompact/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:28Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e39d21f6-9f6d-56cc-a70f-ade04095f99c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/shackleturtlebearing/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/shackleturtlebearing/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:28Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e98b70ce-3bfb-56ec-acc2-fc589e1dcb13",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/sphereswannurse/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/sphereswannurse/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:27Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7269084e-df47-5f64-908c-e9f51de0f408",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/signalduelistcast/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/signalduelistcast/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:27Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f04693a2-653d-57cf-9344-e9548ee06d21",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/shackleturtlebearing/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/shackleturtlebearing/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:27Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1864b6cf-99f1-5aad-9af1-a4d76f129df9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/powerchrysalisdash/DiScOrDZapREt/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/powerchrysalisdash/DiScOrDZapREt/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:27Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f502ffa1-cfa4-5db9-98af-a160fb2afe25",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/pyramidchemistraid91/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/pyramidchemistraid91/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:26Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2cba2e79-f1e2-5978-b5b7-eb7c74e5a32b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/signalduelistcast/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/signalduelistcast/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:24Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ca9b2d18-976f-5cf8-9e42-7b8f002ec0bd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/pauseloopbolt/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/pauseloopbolt/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:24Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eb540d13-8c22-50ef-843d-5758958dc4f4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/sourcesnaillimit/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/sourcesnaillimit/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:22Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8a47bd9c-83bd-5ac9-afde-cac295445c03",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/sideshadecompact/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/sideshadecompact/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:22Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bfab4448-571f-5c68-94d3-be2773d90028",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/sphereswannurse/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/sphereswannurse/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:20Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--97d93f87-8886-5a9c-8c4d-4ec18927b012",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/shackleturtlebearing/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/shackleturtlebearing/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:20Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5f270c38-d127-5718-9c70-82842b0b5137",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/powerchrysalisdash/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/powerchrysalisdash/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:20Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dddaf4d3-2a95-5162-9466-d988aae94550",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/storagebuilderhem/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/storagebuilderhem/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:19Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7988954b-6c61-5565-a031-bcf3e2a4a618",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/rimportaldefine/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/rimportaldefine/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:19Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aadac2e5-66ca-50e0-8707-3c6c1ef976f4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/raysultanprime/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/raysultanprime/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:19Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4d1fc8aa-5fd3-5d26-a252-b29dd843649a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/powerchrysalisdash/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/powerchrysalisdash/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:18Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--983cdc7d-1634-5c9c-9bf2-667a449ed06e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/separatecouriertube/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/separatecouriertube/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:17Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a24c47c1-88a1-59f9-9558-c050a8592739",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/pulverizehokagespire/DiscordZapret/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/pulverizehokagespire/DiscordZapret/releases/download/2.22.2/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:17Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d6258287-9e2b-5078-a334-b1190b5e1dcf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/shellparakeetgrab/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/shellparakeetgrab/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:16Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cb22efd4-b5ef-5018-9626-874fd41d70f5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/scalarcentersquare/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/scalarcentersquare/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:16Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--123e3b6d-fe31-50a7-8f99-3785b90b32c9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/sourcesnaillimit/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/sourcesnaillimit/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:13Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8c4c8af4-9a72-507c-aef5-24faccb6ebb8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/silentassassinplaza/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/silentassassinplaza/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:13Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1d0da2e9-b24b-5892-9ffa-c389a82767cd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/quartzfiscaljam/zapret-discord-youtube/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/quartzfiscaljam/zapret-discord-youtube/releases/download/2.22.2/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:12Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7afee29f-e2a6-5bee-9818-b006e8dce048",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/splendorpremierrod/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/splendorpremierrod/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:11Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--552f0971-4c6a-5680-8293-2a8908d34f7d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/spacerankcoil/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/spacerankcoil/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:11Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f34560c2-523f-5853-bb1c-09deecf9c040",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/smartbeemesmerize/FixDiscord/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/smartbeemesmerize/FixDiscord/releases/download/2.22.2/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:11Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7c9fe7b7-06ae-5c4b-84b7-26c2834654ed",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/secretprincipalcrypt/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/secretprincipalcrypt/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:11Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c65e62b9-551e-5880-8803-8c42c862bd29",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/silentassassinplaza/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/silentassassinplaza/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:08Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9c8a840a-e74f-5ca8-b68a-6e1d7c7890f8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/signalduelistcast/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/signalduelistcast/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:08Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--62add8ec-cca8-5c8c-a13a-7e89440772fd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/swifttannerrear90/FixDiscord/releases/download/3[.]33[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/swifttannerrear90/FixDiscord/releases/download/3.33.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:05Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--14894c5a-f6be-57f5-a2d9-b6106565e050",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/storagebuilderhem/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/storagebuilderhem/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:05Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e211eb1d-02ed-5297-ae2f-14fc225fa089",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/sideshadecompact/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/sideshadecompact/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:05Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--39c7a651-b888-58c3-a937-0bd247f63377",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/segmentstagevary/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/segmentstagevary/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:05Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4150a226-7962-5904-9b42-cf86fd566616",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/scarletnoviceadze/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/scarletnoviceadze/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:05Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e4b966f3-eeb1-55c2-b294-657927dd9d4f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/prideapothecarytie/DiscordFix/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/prideapothecarytie/DiscordFix/releases/download/2.22.2/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:05Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4e316176-ad26-5ab7-abbe-61c1c4b61ce2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/portalpoemroof/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/portalpoemroof/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:40:05Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e364e0fd-7438-5e00-927a-935805e66f1d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/swifttannerrear90/FixDiscord/releases/download/3[.]33[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/swifttannerrear90/FixDiscord/releases/download/3.33.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:58Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5359f5f4-3b5b-50a3-bd76-b11f685deba9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/spacerankcoil/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/spacerankcoil/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:58Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fed6e605-eeb1-5d3d-a57f-0b73750b14f2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/pauseloopbolt/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/pauseloopbolt/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:58Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--90aa0f82-dc69-5747-a5ea-c273fc405de4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/splendorpremierrod/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/splendorpremierrod/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:57Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e07d709c-39d4-5bd4-b54d-abdca2683202",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/sphereswannurse/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/sphereswannurse/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:57Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7826fa2c-834c-5c68-b7f0-1c628a5184a4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/signalduelistcast/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/signalduelistcast/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:57Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c9cc9d4d-29f8-5ab5-926f-91ff8524edc0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/rubycrewmantier/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/rubycrewmantier/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:57Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c3ca5085-6ce2-5498-ad6d-4f4a4011dbb9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/smartbeemesmerize/DiscordFix/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/smartbeemesmerize/DiscordFix/releases/download/2.22.2/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:53Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1ab62d5d-3a64-5160-8b39-0292a016f890",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/shackleturtlebearing/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/shackleturtlebearing/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:53Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--40823027-3ca0-5149-959b-fb24df31c465",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/separatecouriertube/DiScOrDZapREt/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/separatecouriertube/DiScOrDZapREt/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:53Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7c866807-fd8a-594c-ae3c-2c0920bb44f7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/snaremizukageencoder/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/snaremizukageencoder/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:52Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--408de0ff-82c9-5b13-a17a-f31a6fee8d51",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/rimportaldefine/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/rimportaldefine/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:52Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0ca3c5c6-5954-5860-b231-efff82333f69",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/swifttannerrear90/DiscordZapret/releases/download/3[.]33[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/swifttannerrear90/DiscordZapret/releases/download/3.33.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:50Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--55f50929-f7e2-5635-9694-2cc2abc01bdf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/splendorpremierrod/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/splendorpremierrod/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:50Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bed7908b-567c-5e24-8daf-6e57a0588770",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/smartbeemesmerize/ZapretDiscord/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/smartbeemesmerize/ZapretDiscord/releases/download/2.22.2/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:50Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c588b966-67ff-54bc-b009-5e4af45d24da",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/raysultanprime/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/raysultanprime/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:49Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d2f9b246-67c6-5122-8b68-4e4bf528ec40",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/portalpoemroof/DiScOrDZapREt/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/portalpoemroof/DiScOrDZapREt/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:49Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--80641814-46d4-5fbf-8878-7848784551da",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://182[.]124[.]21[.]54:36743/i",
      "pattern": "[url:value = 'http://182.124.21.54:36743/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:49Z",
      "confidence": 80,
      "labels": [
        "Mozi",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5b37f226-6db3-593d-b9a4-d7b5a184e72f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/secretprincipalcrypt/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/secretprincipalcrypt/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:47Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f3eb3c9b-919a-5f14-8484-b5a2e468d1ba",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/silentassassinplaza/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/silentassassinplaza/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:45Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--db02e6be-3cb3-58b5-b106-2345ee26f0bc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/signalduelistcast/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/signalduelistcast/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:45Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b86b4a36-f042-53df-871c-4abad4a99597",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/signalduelistcast/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/signalduelistcast/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:45Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--42c859e2-a019-54bd-9aba-881f31801866",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/secretprincipalcrypt/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/secretprincipalcrypt/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:45Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e994ddad-551d-5aba-9ed7-7dc9192b22da",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/pooldivinerdawn71/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/pooldivinerdawn71/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:45Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dbcc5c36-e559-52fa-bb30-0f9291d7f757",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/pauseloopbolt/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/pauseloopbolt/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:45Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--58d8f7be-3221-53da-926b-74643dcc3050",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/silentassassinplaza/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/silentassassinplaza/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:44Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--165d6d2b-9cfc-5b41-978a-a7716558a5d1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/silentassassinplaza/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/silentassassinplaza/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:43Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4db06b8e-223b-56af-ad73-09334a81510a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/sideshadecompact/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/sideshadecompact/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:43Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1939ba6d-b1c0-5871-a69b-e34416ec10bc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/regimentstylistrob/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/regimentstylistrob/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:43Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e9a2faa9-4abe-5a19-8706-42b9b9a2ab8f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/roninbisondeem/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/roninbisondeem/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:42Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0cc28da1-71bc-52b5-9fbe-6db7d50938df",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/secretprincipalcrypt/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/secretprincipalcrypt/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:40Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--69c20367-2da2-5d37-9dd9-8c12c68dcfd4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/segmentstagevary/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/segmentstagevary/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:39Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--20e97f03-8a81-5942-bab6-31ae028be6b7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/platoonpheasantswell/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/platoonpheasantswell/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:39Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d457e5fa-e501-5778-84ae-063a42e10cfe",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/spacerankcoil/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/spacerankcoil/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:38Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1c378e0d-6a18-51ab-9e68-8c47e9bfb540",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/shackleturtlebearing/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/shackleturtlebearing/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:38Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5ada8de1-5276-5b59-b686-2b6e659c67ad",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/scarletnoviceadze/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/scarletnoviceadze/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:36Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--38e2a84f-2734-5e74-9fac-220ea48ed52f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/quartzfiscaljam/DiscordZapret/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/quartzfiscaljam/DiscordZapret/releases/download/2.22.2/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:35Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0dead1b2-d6eb-5332-b7e6-3e85e50b9743",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/pyramidchemistraid91/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/pyramidchemistraid91/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:35Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1d72f614-e40a-5e92-91e1-22890b560669",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/pitsluggutter/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/pitsluggutter/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:35Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a875a5e0-7a57-5b97-9216-6f4038cb5804",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/pauseloopbolt/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/pauseloopbolt/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:34Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--980f4f67-9563-55b5-b645-9031b8eef081",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/secretprincipalcrypt/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/secretprincipalcrypt/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:32Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b925ab67-e084-55a3-ae51-72dffe3ca3ca",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/shackleturtlebearing/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/shackleturtlebearing/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:31Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b914db7b-afd9-5f13-8736-c3a047c9aa37",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/separatecouriertube/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/separatecouriertube/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:31Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2e4b6bf5-0305-50df-ba1b-21d137261d83",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/scalarcentersquare/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/scalarcentersquare/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:31Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5fcff190-c0b1-5d4a-8693-c7c0e2c9ad7b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/segmentstagevary/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/segmentstagevary/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:29Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--345094fa-ee3b-5728-8578-1653d951e57d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://38[.]43[.]193[.]232:54493/bin[.]sh",
      "pattern": "[url:value = 'http://38.43.193.232:54493/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:29Z",
      "confidence": 80,
      "labels": [
        "Mozi",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c419a5f4-c6cb-5d41-adee-6ce87d11b73e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/shackleturtlebearing/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/shackleturtlebearing/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:28Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--99cad861-2c30-5554-ab19-785b63e21719",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/separatecouriertube/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/separatecouriertube/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:27Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fb8f70bf-a026-53e0-ab56-bc8732595e16",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/raysultanprime/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/raysultanprime/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:27Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--11746168-56fa-5cca-ba5f-a30f6b58fa55",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/sourcesnaillimit/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/sourcesnaillimit/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:26Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f5ccc2e5-7e2c-5f1a-bdbf-003fc72f3567",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/rimportaldefine/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/rimportaldefine/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:26Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--85d7b878-a5e2-5d4c-a5db-c7caa51181dd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/rapidsalbatrossstar/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/rapidsalbatrossstar/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:25Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--49363e40-a19b-5deb-9288-4a6b4550af13",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/shackleturtlebearing/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/shackleturtlebearing/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:23Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4487916c-1f98-542c-96e2-532d8942b60f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/shackleturtlebearing/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/shackleturtlebearing/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:23Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--06952e94-e551-5d92-bfd3-aea42fa4f5c8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/shellparakeetgrab/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/shellparakeetgrab/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:22Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d86e6b52-0443-56db-a13e-60c9b3e21fa0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/sourcesnaillimit/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/sourcesnaillimit/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:20Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b4c855af-0cd0-5053-a8cf-6500f8dff7b3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/smartbeemesmerize/DiscordFix/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/smartbeemesmerize/DiscordFix/releases/download/2.22.2/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:20Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5a1ceace-2ce2-56e8-bf14-25c6e5062524",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/pyramidchemistraid91/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/pyramidchemistraid91/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:20Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a021fc43-66c5-59ca-bd2a-1c8804ef1a5f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://59[.]97[.]249[.]112:46105/bin[.]sh",
      "pattern": "[url:value = 'http://59.97.249.112:46105/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:20Z",
      "confidence": 80,
      "labels": [
        "Mozi",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--13108176-2070-5d4c-acd0-8a6740269765",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/sideshadecompact/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/sideshadecompact/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:19Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7915a0e9-403a-5132-b518-ddc040a7debc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/separatecouriertube/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/separatecouriertube/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:19Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--06c722a9-3b2e-56c8-9497-0477d7bdd5ae",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/roninbisondeem/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/roninbisondeem/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:19Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f326d47a-3f85-5d96-a54e-dfe0fa8b642f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/quartzfiscaljam/DiscordZapret/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/quartzfiscaljam/DiscordZapret/releases/download/2.22.2/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:19Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--716342b4-1133-51e9-99a0-da02b775a5a4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/pureperfumername/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/pureperfumername/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:19Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e55c86be-e965-5a91-a4be-c3ca035713ab",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/rapidsalbatrossstar/DiScOrDZapREt/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/rapidsalbatrossstar/DiScOrDZapREt/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:15Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c896bbc6-1f64-5aa7-b61b-a768dc664f63",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/powerchrysalisdash/DiScOrDZapREt/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/powerchrysalisdash/DiScOrDZapREt/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:15Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--df848810-a621-5ec8-8cc3-9db7df41f1a1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/scarletnoviceadze/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/scarletnoviceadze/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:14Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e84a502a-f697-5123-a819-de857601e078",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/scalarcentersquare/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/scalarcentersquare/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:14Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--084dc4e6-dfe4-50d9-9520-1102c74f406f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/snaremizukageencoder/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/snaremizukageencoder/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:13Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3e449e7a-03d7-5b7d-8724-cc73de9ab469",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/scalarcentersquare/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/scalarcentersquare/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:13Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0a66d2bd-93d7-57fc-9c4f-89b7a429fda3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/pitsluggutter/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/pitsluggutter/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:13Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--80cc0220-4f10-5332-a441-7450105e34cb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/rapidsalbatrossstar/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/rapidsalbatrossstar/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:12Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ddd879a3-1d32-5787-bd3f-0da13eb98d83",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/quartzfiscaljam/FixDiscord/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/quartzfiscaljam/FixDiscord/releases/download/2.22.2/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:11Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c72b2f1b-616d-53ce-8a58-b36438ebef62",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/pulverizehokagespire/FixDiscord/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/pulverizehokagespire/FixDiscord/releases/download/2.22.2/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:11Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--de481b64-35d5-53e0-a123-3e10caa02296",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/roninbisondeem/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/roninbisondeem/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:10Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eebb5f8b-785b-5244-b033-0f93a43151d4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/raysultanprime/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/raysultanprime/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:09Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2c812c2d-a8c5-58cc-85e8-1bfbc141ac40",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/raysultanprime/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/raysultanprime/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:09Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--99421624-f896-553a-9423-572c8d788a0f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/snatchmakersmash/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/snatchmakersmash/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:08Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7427d0fe-ddd9-5e4f-a862-f0abc8583724",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/sphereswannurse/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/sphereswannurse/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:07Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3f5c1075-448c-5a2a-beae-725d0d32cb0d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/storagebuilderhem/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/storagebuilderhem/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:05Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9c98facb-4b06-5730-97ae-a3b0f0f4266e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/solderlinkmesh/DiscordZapret/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/solderlinkmesh/DiscordZapret/releases/download/2.22.2/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:05Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cffbfa49-b0d9-5aa5-8b32-4baf9028aaf8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/rubycrewmantier/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/rubycrewmantier/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:05Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1ca00f09-2fe2-5e69-99a5-e84159df1ac0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/rapidsalbatrossstar/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/rapidsalbatrossstar/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:05Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--38e7c7db-7792-52a4-81b7-723571f9c810",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/portalpoemroof/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/portalpoemroof/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:05Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2ea78b8f-a60a-591c-aab4-e03779e0ad78",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/prideapothecarytie/DiscordZapret/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/prideapothecarytie/DiscordZapret/releases/download/2.22.2/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:03Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c6803624-cac8-5300-9e0d-bd32886dcab5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/serversanaa/XDP-eBPF-Anti-DDoS-Firewall/refs/heads/main/inveracious/e_Anti_D_Do_XD_Firewall_BP_1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/serversanaa/XDP-eBPF-Anti-DDoS-Firewall/refs/heads/main/inveracious/e_Anti_D_Do_XD_Firewall_BP_1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:00Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cf721e11-1333-5b1f-9ecc-b4a8822c5596",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/powerchrysalisdash/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/powerchrysalisdash/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:00Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e0dcd689-1ea6-5020-b15c-36ea79d98d57",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/pauseloopbolt/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/pauseloopbolt/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:39:00Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c280bc10-62e5-53cd-82e5-c5899e5e7778",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/roninbisondeem/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/roninbisondeem/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:59Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b9b9d438-d385-54e2-af5f-713a3f5a15fc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/rapidsalbatrossstar/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/rapidsalbatrossstar/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:59Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--18caf54b-4f83-5877-ab9d-6b4c3738486d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/pulverizehokagespire/DiscordFix/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/pulverizehokagespire/DiscordFix/releases/download/2.22.2/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:59Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9c89f2fb-5f26-5d07-a8f8-0438afabde0c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/portalpoemroof/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/portalpoemroof/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:59Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5aeab504-a226-5898-971d-eaa905f32a7f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://42[.]235[.]82[.]254:44062/i",
      "pattern": "[url:value = 'http://42.235.82.254:44062/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:59Z",
      "confidence": 80,
      "labels": [
        "32-bit",
        "Mozi",
        "elf",
        "malware",
        "malware_download",
        "mips"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9d24c104-342b-5257-9a58-7f49e14aeaee",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/storagebuilderhem/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/storagebuilderhem/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:58Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b8a9565f-b556-581a-bb5e-aefcaebda522",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/pureperfumername/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/pureperfumername/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:58Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e179dff1-696d-5459-8e5d-b23fd5c2c8fb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/wantdaimyoroof22/multi/archive/refs/heads/main[.]zip",
      "pattern": "[url:value = 'https://github.com/wantdaimyoroof22/multi/archive/refs/heads/main.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:57Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "stealer"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--09f5d551-a8ee-597c-a0ae-46ce14587741",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/signalduelistcast/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/signalduelistcast/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:54Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3a27ae74-5d5f-5b3b-924d-a3ffdfb0813f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/pitsluggutter/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/pitsluggutter/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:54Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6e8ba289-14d5-52c8-a1db-9f8e78ee2b54",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/solderlinkmesh/DiscordFix/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/solderlinkmesh/DiscordFix/releases/download/2.22.2/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:53Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--395ee777-2a34-505a-9dfe-95a071650016",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/sideshadecompact/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/sideshadecompact/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:53Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0c5926da-fa1e-5ae7-b0c2-62906fdf0da3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/shellparakeetgrab/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/shellparakeetgrab/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:53Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c60626d7-545f-50d4-8b98-6e6236ddb1b7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/rubycrewmantier/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/rubycrewmantier/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:53Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--afab2538-4def-5124-8734-afcf96e180e4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/pitsluggutter/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/pitsluggutter/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:53Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c15b063d-8626-5b59-9a05-60b6fd88780d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/splendorpremierrod/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/splendorpremierrod/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:52Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--362067d2-68a6-5c4f-b366-331a4a13dfaf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/shellparakeetgrab/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/shellparakeetgrab/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:52Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d10daef0-1eb2-5ea8-9e86-5de4c0361b17",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/regimentstylistrob/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/regimentstylistrob/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:52Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c8a19510-b75c-5173-8f35-1500c783ac25",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/quartzfiscaljam/DiscordFix/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/quartzfiscaljam/DiscordFix/releases/download/2.22.2/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:51Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fddac7da-3524-5521-9acb-c65e78f9e931",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/signalduelistcast/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/signalduelistcast/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:50Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c0fbbe42-e0b1-5c20-83fb-3778d3ed2968",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/pitsluggutter/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/pitsluggutter/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:49Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7e5ef13e-1e50-524c-beff-256eca02bee0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/solderlinkmesh/DiscordZapret/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/solderlinkmesh/DiscordZapret/releases/download/2.22.2/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:48Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a1b44d7f-2245-5730-9f6d-4f9b6f7b5586",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/scarletnoviceadze/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/scarletnoviceadze/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:47Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fdb2ab71-8f2f-58e4-aaba-e1a50033e63d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/scarletnoviceadze/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/scarletnoviceadze/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:47Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--392d8fc2-cd58-57f4-a980-1174a85c5449",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/rubycrewmantier/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/rubycrewmantier/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:47Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--eba59745-16f6-5878-a3a1-f0c3fb09a434",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/pulverizehokagespire/DiscordFix/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/pulverizehokagespire/DiscordFix/releases/download/2.22.2/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:47Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f8c95b96-fabf-57be-a895-c9f806c527ba",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/regimentstylistrob/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/regimentstylistrob/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:45Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0bd21b8f-94c4-5b52-9ba1-9fe8cdf8371f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/spacerankcoil/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/spacerankcoil/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:44Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b17f97cc-c4f4-50b1-86f0-dade075320a3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/swifttannerrear90/DiscordFix/releases/download/3[.]33[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/swifttannerrear90/DiscordFix/releases/download/3.33.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:43Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9303ef53-c3c2-5f88-bd8c-188971588556",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/rimportaldefine/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/rimportaldefine/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:43Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e6c433be-0b14-595a-95de-71ef08921cc4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/storagebuilderhem/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/storagebuilderhem/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:42Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b85139a7-7207-5b17-8a7d-0f9b30c7fe38",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/solderlinkmesh/DiscordFix/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/solderlinkmesh/DiscordFix/releases/download/2.22.2/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:42Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0a260024-790b-5f14-9047-480d43951662",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/pitsluggutter/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/pitsluggutter/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:42Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2932d774-4a00-5c61-bd12-5660a12ef94b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/pauseloopbolt/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/pauseloopbolt/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:42Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1dfc5d5b-2010-5d7d-aadf-500a27e7bdda",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/raysultanprime/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/raysultanprime/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:40Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b3209b04-9873-573b-afb3-0733887d0b23",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/spacerankcoil/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/spacerankcoil/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:39Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--78f7396b-f4b8-57ef-a7e3-b2b5effc3d4c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/rubycrewmantier/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/rubycrewmantier/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:39Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c5ffe518-b637-5f09-a429-255bef4ceef6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/pulverizehokagespire/ZapretDiscord/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/pulverizehokagespire/ZapretDiscord/releases/download/2.22.2/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:39Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5e2eba23-378f-5191-b664-ef413b27d3e8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/snaremizukageencoder/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/snaremizukageencoder/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:38Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6e544a6c-25ff-51be-b91b-4b2e6fc951dd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/scalarcentersquare/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/scalarcentersquare/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:38Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b4988f19-45a2-54d1-8180-52b9428c57f3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/roninbisondeem/DiScOrDZapREt/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/roninbisondeem/DiScOrDZapREt/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:38Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--01b16bec-de42-5bfb-9c5c-1cbab71fe919",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/sideshadecompact/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/sideshadecompact/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:36Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--527e4595-157f-56a1-891d-41b630dcbb8b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/scarletnoviceadze/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/scarletnoviceadze/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:35Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dcd66483-0756-57ee-a6e4-9e069abeb67e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/splendorpremierrod/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/splendorpremierrod/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:34Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7a77c8bf-68ee-5d34-8c3f-84c35102e82d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/sideshadecompact/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/sideshadecompact/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:34Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--54b6d348-c8dd-5c97-b5e8-ddf2c61145f1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/pooldivinerdawn71/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/pooldivinerdawn71/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:34Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5e698569-1dc5-5ec4-9b7b-6bbf424f166b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/spacerankcoil/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/spacerankcoil/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:33Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--118e6a1d-330e-5c82-bc20-548712fe51c8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/snatchmakersmash/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/snatchmakersmash/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:33Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a1ef0faa-e811-50eb-b20d-8512d379aa9f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/snaremizukageencoder/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/snaremizukageencoder/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:33Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ef3a455f-1156-5161-9db0-84ca77d39276",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/shellparakeetgrab/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/shellparakeetgrab/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:33Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--13bb836e-07d6-540f-940c-84e8bee2c3fe",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/prideapothecarytie/DiscordZapret/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/prideapothecarytie/DiscordZapret/releases/download/2.22.2/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:33Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f28e332f-48f6-58e8-ba90-c0dd77c48328",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/pitsluggutter/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/pitsluggutter/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:33Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6ef0fb47-d0c2-5370-a9ba-477c164da235",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/silentassassinplaza/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/silentassassinplaza/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:32Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6c736581-a47a-5903-bfea-465db1285360",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/powerchrysalisdash/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/powerchrysalisdash/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:32Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8091094f-781a-5fa6-a1ad-c713a6b4be53",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/sourcesnaillimit/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/sourcesnaillimit/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:30Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8d34c49b-3a32-5fd0-b2d1-d2eb759b4c07",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/sourcesnaillimit/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/sourcesnaillimit/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:28Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--876f0bd9-05fd-52e7-b273-d6f90073e500",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/sideshadecompact/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/sideshadecompact/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:26Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e1e60051-38e3-58b6-b8d7-a2c2b2109cc5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/spacerankcoil/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/spacerankcoil/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:25Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f2e80dd9-a6f2-5041-a490-95afe0129a2d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/scalarcentersquare/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/scalarcentersquare/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:25Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--09dc2052-ee07-5221-ae4e-a8fc8f42f5a6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/regimentstylistrob/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/regimentstylistrob/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:25Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--52237f53-c3b4-530d-a7f8-6dd76cf9ee62",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/scalarcentersquare/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/scalarcentersquare/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:24Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4266b4cd-8c6c-531d-b9ec-13e7b28712f3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/sourcesnaillimit/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/sourcesnaillimit/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:23Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bbb58b2c-35e2-51c5-8d73-b45f42183d25",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/pureperfumername/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/pureperfumername/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:23Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b5177082-f6f1-5294-9a92-f07d653a7bc4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/prideapothecarytie/DiscordFix/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/prideapothecarytie/DiscordFix/releases/download/2.22.2/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:23Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--708d5dbb-877c-5dfb-967b-8b81e8a22e9b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/spacerankcoil/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/spacerankcoil/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:22Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9f6afead-28f4-5449-9b26-0972e66bd3f3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/scalarcentersquare/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/scalarcentersquare/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:22Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e2087742-bbf2-5a43-af43-45dbb834ec5a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/raysultanprime/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/raysultanprime/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:22Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1d610146-6af9-5ab5-945d-499e2afaef04",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/pureperfumername/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/pureperfumername/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:22Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bd18789f-2dd7-57d9-b10f-28fd89067087",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/secretprincipalcrypt/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/secretprincipalcrypt/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:20Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--14675a47-a3ad-5b91-9d7d-eb9bf918af62",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/swifttannerrear90/DiscordZapret/releases/download/3[.]33[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/swifttannerrear90/DiscordZapret/releases/download/3.33.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:19Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ee05cea8-32d7-5820-8559-b9a0d55890ba",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/raysultanprime/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/raysultanprime/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:19Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f93c7ab2-b900-566a-98e6-fd755f525f4b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/pooldivinerdawn71/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/pooldivinerdawn71/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:18Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--faaf17bc-fa64-557b-88a7-72a8a0550a39",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/platoonpheasantswell/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/platoonpheasantswell/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:18Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--232cfc49-da71-5287-9ee5-35e78a74f2fd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/storagebuilderhem/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/storagebuilderhem/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:17Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d3b60e64-a19b-5a56-ba97-d4c9f6da9353",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/rimportaldefine/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/rimportaldefine/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:17Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ed1e2dfd-cd07-5252-9ac5-6de0a652b627",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/sphereswannurse/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/sphereswannurse/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:16Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7ca1474d-35ec-51fc-ac40-dccab9a458c7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/smartbeemesmerize/ZapretDiscord/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/smartbeemesmerize/ZapretDiscord/releases/download/2.22.2/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:16Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6101a29b-acb0-51d2-8cb6-f6f89432677c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/silentassassinplaza/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/silentassassinplaza/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:15Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--502c721a-77b5-5aa2-b3d7-18c72379e224",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:27dc0bbc7335f1905aaf00289bb9710dd31816a446303bf2fa02efea2f11a935",
      "pattern": "[file:hashes.'SHA-256' = '27dc0bbc7335f1905aaf00289bb9710dd31816a446303bf2fa02efea2f11a935']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:14Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "grove",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e927a584-dd8b-54cc-9692-6c5d37f4f610",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/storagebuilderhem/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/storagebuilderhem/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:13Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a549fc09-7d26-5ff2-bad9-a1ca61c7bafb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/splendorpremierrod/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/splendorpremierrod/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:13Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--731bb8d1-6b25-5305-a957-148e8f1e155e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/sphereswannurse/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/sphereswannurse/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:13Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--03925336-3ab4-5aa0-99ee-8a919f3aa7b1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/separatecouriertube/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/separatecouriertube/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:13Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8c0a4b24-3b41-54f4-ac7f-daf3529a511d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/pauseloopbolt/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/pauseloopbolt/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:13Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--663bb6b6-4038-5a84-9186-13f083f9122c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/pauseloopbolt/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/pauseloopbolt/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:13Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3220d95c-b832-5c95-910c-0950d959b201",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/pitsluggutter/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/pitsluggutter/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:11Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8b78fece-10ea-5d67-9199-6ceb2dcfc0f4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/shadankaifi/NovaRadio/refs/heads/main/dj/Radio_Nova_v1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/shadankaifi/NovaRadio/refs/heads/main/dj/Radio_Nova_v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:09Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ccecc22b-a4a8-55a3-841c-4a0d31f92732",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/smartbeemesmerize/DiscordZapret/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/smartbeemesmerize/DiscordZapret/releases/download/2.22.2/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:38:09Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e4218b94-ce18-52e5-b516-8217e28f7a9f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:100[.]75[.]200[.]41",
      "pattern": "[ipv4-addr:value = '100.75.200.41']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:37:10Z",
      "confidence": 80,
      "labels": [
        "RAT",
        "spicerat",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8a462e8b-65ce-5c4f-91f5-d2164a7b8a2b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:2fae1eafc2dfacc820bfb46c8ce1d7cef08d61d4503f75463c27b8ef7d5d310e",
      "pattern": "[file:hashes.'SHA-256' = '2fae1eafc2dfacc820bfb46c8ce1d7cef08d61d4503f75463c27b8ef7d5d310e']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:35:26Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "frame97",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f2267ce6-d7f5-5990-bb1e-4d702f834e72",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:36b6a570b1f108534ef81f106c8bd9dd62994b61670aec231bf02bda06780739",
      "pattern": "[file:hashes.'SHA-256' = '36b6a570b1f108534ef81f106c8bd9dd62994b61670aec231bf02bda06780739']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:32:42Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "frame",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--47c8598b-06db-58e7-bae6-5c8666a61dc5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:872d71ecc9f655549696ced22bd437163f4eb66e3bd3cd877c984591b6e5b100",
      "pattern": "[file:hashes.'SHA-256' = '872d71ecc9f655549696ced22bd437163f4eb66e3bd3cd877c984591b6e5b100']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:29:59Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "macOS",
        "nova",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0c5a1d15-0d8d-5f6b-99f2-505260c6d53b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:194[.]226[.]99[.]166",
      "pattern": "[ipv4-addr:value = '194.226.99.166']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:29:30Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9c088bf6-c849-56b5-8bd8-682a6fbc4488",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:2f92eb2728a385f2cd0780e6104cc8b4c909339d69d90a0d6af1dedf71586eb5",
      "pattern": "[file:hashes.'SHA-256' = '2f92eb2728a385f2cd0780e6104cc8b4c909339d69d90a0d6af1dedf71586eb5']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:28:35Z",
      "confidence": 80,
      "labels": [
        "Mirai",
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--290948a5-45af-5026-9fcd-8878c5070c11",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:0a32163de2cae86e0658281591ce6e1f44ca75d34a66faedea29cd11c517e4f8",
      "pattern": "[file:hashes.'SHA-256' = '0a32163de2cae86e0658281591ce6e1f44ca75d34a66faedea29cd11c517e4f8']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:27:11Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "haven",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b02cc406-0e67-567e-b0df-01f2e7da741f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:2192c93a115a2e207bb1357ad2a1221a7c9f2c09772aa4ff37840fc60356774e",
      "pattern": "[file:hashes.'SHA-256' = '2192c93a115a2e207bb1357ad2a1221a7c9f2c09772aa4ff37840fc60356774e']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:25:04Z",
      "confidence": 80,
      "labels": [
        "RustyStealer",
        "malware",
        "threatfox"
      ],
      "x_swiftioc_source": "malwarebazaar_recent,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--90856cc2-c161-5692-86e1-df4221b3d8c7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/rateportalcrucible/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/rateportalcrucible/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:53Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bf50a211-14e0-53c0-aef6-91f15bb04734",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/opentreasurerjump/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/opentreasurerjump/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:53Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e7e0292f-7b59-5613-bb20-a4a6223894f4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/oceanstonemasonlimit/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/oceanstonemasonlimit/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:53Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ba241887-8ca2-5a82-bdc2-e5fbba1cd050",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/noblefreighterreduce/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/noblefreighterreduce/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:53Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--46d0bacc-5c72-58dd-81af-df5de15d9a9c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/miniskinktend/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/miniskinktend/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:53Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d492f0e7-8fca-5d5e-a794-503bfe03e928",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/magentacasterscrew56/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/magentacasterscrew56/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:53Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--be2d21e7-1320-5bda-98fd-35807971a455",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/peltcashierrepresent/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/peltcashierrepresent/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:52Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a6701a10-e333-5b64-ac7f-445ae361e40d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/patrolthundercastle/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/patrolthundercastle/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:52Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--485a2019-4d72-5aef-91c5-02261022816e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/matrixswallowcalm45/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/matrixswallowcalm45/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:52Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--012e6531-2497-5482-a186-1fa3956ecaa5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://31[.]129[.]7[.]150:57413/i",
      "pattern": "[url:value = 'http://31.129.7.150:57413/i']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:51Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "mirai"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--30159aeb-6a3b-5f16-ab0e-3687fa3254ff",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/midnightcrownquest58/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/midnightcrownquest58/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:50Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--88f23bd4-e0ad-5726-adc9-3b0c88d84723",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/magentacasterscrew56/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/magentacasterscrew56/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:50Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a546f160-3551-5ef7-8bbf-6d5924c66991",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/rateportalcrucible/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/rateportalcrucible/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:48Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b94be98e-b067-5d55-b413-cf695b5c00dc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/legendarybisonstring/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/legendarybisonstring/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:48Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--07753e21-8c10-511a-9f60-dd5a215f3e8b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/lairpupashake/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/lairpupashake/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:48Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a8659984-b293-5d9b-b8f6-43490fc6225b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sayed116/house-physio/refs/heads/main/heater/house_physio_v1[.]0[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sayed116/house-physio/refs/heads/main/heater/house_physio_v1.0.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:47Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--07173742-ac10-5aba-9cf6-6f2b8feb8cfd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/mixedtypepick/ZapretDiscord/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/mixedtypepick/ZapretDiscord/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:47Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--005fbf8b-b35e-5208-b814-8c487cf71999",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/minitannertent/DiScOrDZapREt/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/minitannertent/DiScOrDZapREt/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:47Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--77910b0c-9d72-5a95-b9b2-3b7e3268e4ba",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/portalchemistagitate/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/portalchemistagitate/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:46Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--38d3801a-beb6-5ed3-9a51-256a590f7cc2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/portalchemistagitate/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/portalchemistagitate/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:46Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3baf0e7c-4f0d-53dc-9dec-153e0f24de3b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/nestboxerfence45/DiscordFix/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/nestboxerfence45/DiscordFix/releases/download/2.22.2/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:46Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--178f47a2-2e85-5413-b2b5-583ed1db2035",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/mortalcobraspike/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/mortalcobraspike/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:46Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7bb5746d-55e2-5de9-9970-5c50f6339a70",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/rateportalcrucible/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/rateportalcrucible/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:45Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--39588b9e-be74-5c3a-ac71-417d62737c63",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/operativeboxerstart/DiScOrDZapREt/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/operativeboxerstart/DiScOrDZapREt/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:45Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a7071452-65f8-58e6-ba17-3a5a7f75ce2c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/lunardataemancipate/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/lunardataemancipate/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:45Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--441aa888-c4a4-5b29-8c55-2b6c784ba923",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://60[.]18[.]68[.]15:50608/bin[.]sh",
      "pattern": "[url:value = 'http://60.18.68.15:50608/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:44Z",
      "confidence": 80,
      "labels": [
        "None",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a3cd7e46-870c-5760-a23a-5741f604e188",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/portalchemistagitate/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/portalchemistagitate/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:43Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5d05a312-4c14-5fba-b0ea-96ef7d0c5803",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/outsidebitgirder/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/outsidebitgirder/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:43Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8cc4c8fb-6754-5dd7-a45d-a9fa2b10c1e5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/matrixswallowcalm45/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/matrixswallowcalm45/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:42Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6e8b8a6a-ec0a-5af4-b3ee-c9176c695311",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/patrolthundercastle/DiScOrDZapREt/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/patrolthundercastle/DiScOrDZapREt/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:41Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6e4b6b51-c70f-5bb9-8c28-b4151262df6f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/magentacasterscrew56/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/magentacasterscrew56/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:41Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1545b7d4-5134-5374-86c6-c6057f21ae08",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/outsidebitgirder/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/outsidebitgirder/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:39Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b831dcec-048f-5b7b-a296-9fc802bf4e88",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/outsidebitgirder/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/outsidebitgirder/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:38Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--082661ca-d7e8-5262-b118-c9d6bf428925",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/nodeguruboutique/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/nodeguruboutique/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:38Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--144135aa-e854-52e9-a54b-47b07c76ba4a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/noblefreighterreduce/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/noblefreighterreduce/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:38Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--25ca3dee-eb08-5480-a574-6832215929a0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/naturalcobblertower/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/naturalcobblertower/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:38Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--670f7f26-c7d0-536d-9e50-fd8f584465ef",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/nestboxerfence45/FixDiscord/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/nestboxerfence45/FixDiscord/releases/download/2.22.2/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:36Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8f5966f5-efe8-5aea-9fc6-dfe39f03ba85",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/legendarybisonstring/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/legendarybisonstring/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:36Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e519253e-db3e-59ca-9a9d-4f42b472b535",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/outsidebitgirder/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/outsidebitgirder/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:35Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6386c91b-9934-5bea-9621-48aefed4967a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/minitannertent/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/minitannertent/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:35Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e8be8454-ce1e-5bf3-a8fd-6a986b08236b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/paintroadpath/DiScOrDZapREt/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/paintroadpath/DiScOrDZapREt/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:34Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f02c1671-48f0-54cd-ba68-b3491d63de7c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/portalchemistagitate/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/portalchemistagitate/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:33Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6ba68f53-76d3-5102-a798-47b45dbfdd7b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/miniskinktend/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/miniskinktend/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:33Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f8e139c6-3d51-50c3-97db-028a629c56b3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/matrixswallowcalm45/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/matrixswallowcalm45/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:33Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--81d34a79-89e5-5eca-90f1-a09d6023a794",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/lairdictatorport/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/lairdictatorport/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:33Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b9213237-6280-5410-9d65-4d800e87a6a3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/octagonairpull/zapret-discord-youtube/releases/download/FixDiscord/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/octagonairpull/zapret-discord-youtube/releases/download/FixDiscord/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:32Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--57012aea-fb52-5328-9b89-685ee164e83e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/grandeurdiplomatbond/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/grandeurdiplomatbond/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:32Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--327985ce-d1c2-56af-8283-a78ab633f2bc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/noblefreighterreduce/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/noblefreighterreduce/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:29Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6d6c6f1b-ce05-536c-ad14-2c91e9b04d63",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/lairpupashake/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/lairpupashake/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:29Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--495171d3-20fd-5cec-a171-88189573f70e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/noblefreighterreduce/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/noblefreighterreduce/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:28Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6e84818f-937f-52fe-81b0-831a4144fc57",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/octagonairpull/ZapretDiscord/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/octagonairpull/ZapretDiscord/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:27Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0ffe927b-d577-5bfd-8a04-41cd643861f8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:aae8a8166b332ec6aa266a74c4c279b11c053a9d362b5aa07d88e72a2cbd617d",
      "pattern": "[file:hashes.'SHA-256' = 'aae8a8166b332ec6aa266a74c4c279b11c053a9d362b5aa07d88e72a2cbd617d']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:27Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "chant",
        "macOS",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--06878717-8d27-5df8-9143-b6e66299928c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/rateportalcrucible/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/rateportalcrucible/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:25Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fe85f454-495e-5d75-9bf5-fc3283938220",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/patrolthundercastle/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/patrolthundercastle/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:25Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a8205f8c-442f-534e-9250-c6e8e51af3f7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/midnightcrownquest58/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/midnightcrownquest58/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:25Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3f691352-d4b6-504d-b5fb-60d8b2e090ec",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/oceanstonemasonlimit/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/oceanstonemasonlimit/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:24Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fcdc301a-1e28-51a2-b005-d80718b51675",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/mortalcobraspike/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/mortalcobraspike/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:24Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b8187ff0-4c17-5a3e-b17a-1a7e2cda784f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/patrolthundercastle/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/patrolthundercastle/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:23Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--129e7c1e-8ce0-5fc3-af42-05ad8a96100d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/mortalcobraspike/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/mortalcobraspike/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:23Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f3172000-649f-576d-b493-86918ccb4cc9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/patrolthundercastle/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/patrolthundercastle/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:21Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a8b7b7cd-499f-54ad-b813-2b72085617a7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/octagongeckovise/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/octagongeckovise/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:21Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9a4b0de3-352a-5aab-94f3-a435697dc22b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/noblefreighterreduce/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/noblefreighterreduce/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:20Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d2525c3a-16d3-5186-9c03-c2f746fe32b3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/nestboxerfence45/DiscordZapret/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/nestboxerfence45/DiscordZapret/releases/download/2.22.2/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:19Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--24036886-cfda-5b28-841a-5599a1f1784d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/mapdestroyersteal/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/mapdestroyersteal/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:19Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d890f4a1-64ae-5353-8316-b370b8251f99",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/mapdestroyersteal/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/mapdestroyersteal/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:19Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6b2ec0bd-b55a-53ca-af2b-d765d1fd45ca",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/nodeguruboutique/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/nodeguruboutique/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:18Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--43419f22-8a4c-598f-81cf-247604ad26c2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/lunardataemancipate/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/lunardataemancipate/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:18Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d8280631-29a7-5307-b308-a3985a6e4cc9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/peltcashierrepresent/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/peltcashierrepresent/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:17Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0d6c3b85-f743-5be7-9f2c-1677caf13444",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/netotokagestorm/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/netotokagestorm/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:17Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--66b30aaa-b6ad-52b4-ac46-5aba1c262612",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/opentreasurerjump/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/opentreasurerjump/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:16Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--108fd629-cfd9-56bc-b79b-7b0b306dc19f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/oceanstonemasonlimit/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/oceanstonemasonlimit/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:16Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b5a5308b-4a99-5877-8293-e3be75bb7133",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/minitannertent/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/minitannertent/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:13Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5b508c86-3553-505e-8093-684e82923a12",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/lairpupashake/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/lairpupashake/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:13Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1143c4d5-f8ac-5505-bdd8-d3ab0588552e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/opentreasurerjump/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/opentreasurerjump/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:12Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bdfa4cee-ef7c-5925-b989-8990c4ce43c3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/naturalcobblertower/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/naturalcobblertower/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:12Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0cae0bba-53e9-52df-b062-d1310e609d40",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/marahman30104/binance-scalping/refs/heads/main/chrysaniline/scalping-binance-v2[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/marahman30104/binance-scalping/refs/heads/main/chrysaniline/scalping-binance-v2.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:11Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--85fa547a-e254-56bc-b08e-23eedb58affd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/patrolthundercastle/DiScOrDZapREt/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/patrolthundercastle/DiScOrDZapREt/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:10Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1956c661-f581-5abe-a695-dab72af31357",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/minitannertent/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/minitannertent/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:10Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3b112b99-e765-5f69-9d9b-55cf86c788c3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/lusterlordrepel/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/lusterlordrepel/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:10Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c681e0d9-4ba3-58f7-9ab0-b75a47f744ba",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/noblefreighterreduce/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/noblefreighterreduce/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:09Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7bc991b1-a46e-5660-990f-4248df262a2b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/lunardataemancipate/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/lunardataemancipate/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:09Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5d086a8c-095c-54d1-8a01-14db60735a32",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/miniskinktend/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/miniskinktend/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:08Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fd9f2142-043f-5f88-ad14-73ca1c222b27",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/oceanstonemasonlimit/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/oceanstonemasonlimit/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:07Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--45bf3559-82a4-5d9c-910d-6956432105d9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxp://123[.]11[.]72[.]143:41884/bin[.]sh",
      "pattern": "[url:value = 'http://123.11.72.143:41884/bin.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:07Z",
      "confidence": 80,
      "labels": [
        "elf",
        "malware",
        "malware_download"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--86f2c0a6-4e75-5c70-8aa3-d41e8fe08e6d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/operativeboxerstart/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/operativeboxerstart/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:06Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--593a8f77-b15c-5777-a869-fb98853a06a3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/miniskinktend/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/miniskinktend/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:06Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3fd26faf-eb8a-57fb-a594-8aa763353b6c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/noblefreighterreduce/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/noblefreighterreduce/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:05Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e9d00ec1-1468-5efe-94fb-5cc5d234455b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/matrixswallowcalm45/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/matrixswallowcalm45/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:04Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bf7a9cc4-17f6-51ce-951b-628005bba8f7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/operativeboxerstart/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/operativeboxerstart/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:02Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--33dcc9e9-cf94-53cb-ba15-c19bf826b61c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/mortalcobraspike/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/mortalcobraspike/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:02Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f7a8b6be-a64f-59e8-951d-546b6210514e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/lusterlordrepel/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/lusterlordrepel/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:02Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7c937186-430d-58da-9b91-ad88b22df913",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/matrixswallowcalm45/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/matrixswallowcalm45/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:01Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b7aa139b-a565-521e-9774-b99f372c6710",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/portalchemistagitate/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/portalchemistagitate/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:00Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--27881745-aeb4-507e-b8c4-98c7ec33bdb5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/mortalcobraspike/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/mortalcobraspike/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:24:00Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8f02c5bf-5532-50c7-9c5c-0244202df122",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/rateportalcrucible/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/rateportalcrucible/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:59Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--82da9964-60c5-5a72-a595-b4688be719d4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/operativeboxerstart/DiScOrDZapREt/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/operativeboxerstart/DiScOrDZapREt/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:59Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5f03d9c9-d634-5d84-8d3c-8a05eb3b6c63",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/octagonairpull/ObhodDiscord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/octagonairpull/ObhodDiscord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:58Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f031eb1a-3756-5544-8b84-30213241d3e0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/netotokagestorm/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/netotokagestorm/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:58Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--06bee48e-69e3-544d-b1e5-4489f5982a3b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/miniskinktend/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/miniskinktend/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:58Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c56907ac-03f1-50e7-b760-2136221f84f2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/lairdictatorport/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/lairdictatorport/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:57Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--edc41711-b45c-5744-b0fb-9248e9fb1b90",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/octagongeckovise/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/octagongeckovise/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:56Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e0eaabbf-d103-5446-bab9-fff9a71a77c8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/octagonairpull/DiscordObhod/releases/download/DiscordObhod/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/octagonairpull/DiscordObhod/releases/download/DiscordObhod/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:56Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7d276ae8-7703-5d1c-99b4-5ef9c146e683",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/oceanstonemasonlimit/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/oceanstonemasonlimit/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:55Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--540d224d-fe66-58dd-8275-6e14a408a690",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/outsidebitgirder/DiScOrDZapREt/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/outsidebitgirder/DiScOrDZapREt/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:54Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--af8bb3c0-3f5f-5080-b914-ad9f515762de",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/portalchemistagitate/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/portalchemistagitate/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:52Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--724aeb4c-5b4a-5077-b74e-0a1184850250",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/paintroadpath/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/paintroadpath/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:52Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2bc0b0a6-295e-5a97-bcb2-0eba24993d50",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/naturalcobblertower/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/naturalcobblertower/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:52Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c50a0b7d-7fb0-5f7c-990f-4096e7978fc0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/mortalcobraspike/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/mortalcobraspike/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:52Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--97fb1edb-816e-55fd-bdfd-72ad4318cfc4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/lairpupashake/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/lairpupashake/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:52Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ebc224dc-2735-525f-b37d-a769b0120175",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/MechanicStir69/discordzapret/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/MechanicStir69/discordzapret/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:51Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7eb73845-66cf-54e9-8cbc-14ff8e5c21de",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/rateportalcrucible/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/rateportalcrucible/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:50Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e56617c4-de07-55ce-bcd5-40db51557a55",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/naturalcobblertower/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/naturalcobblertower/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:50Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c817841b-f83a-5d62-9108-4c9231a21360",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/lairpupashake/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/lairpupashake/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:50Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--757753e4-9929-5650-b7ba-238311ac398b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/magentacasterscrew56/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/magentacasterscrew56/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:47Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--390a1473-2b76-5146-953f-c9afe4ae9926",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/knottyrantcast/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/knottyrantcast/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:45Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a09f908b-c2dd-56b6-a4b9-b842d09e2060",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/paintroadpath/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/paintroadpath/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:44Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5d4dad86-9458-53cb-b516-8531d7cfc573",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/midnightcrownquest58/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/midnightcrownquest58/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:44Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--21875264-b46e-5c73-90e5-e1019e503d93",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/peltcashierrepresent/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/peltcashierrepresent/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:42Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b8ab045b-4060-5f67-86fc-96c9b684277c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/nestboxerfence45/zapret-discord-youtube/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/nestboxerfence45/zapret-discord-youtube/releases/download/2.22.2/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:42Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ecc7f9f9-96fa-5b7e-801b-6a5708a4f1aa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/nestboxerfence45/zapret-discord-youtube/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/nestboxerfence45/zapret-discord-youtube/releases/download/2.22.2/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:42Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--49b613a9-68b6-571b-bb80-52c26b53fd67",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/mixedtypepick/DiscordObhod/releases/download/DiscordObhod/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/mixedtypepick/DiscordObhod/releases/download/DiscordObhod/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:42Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ba610557-d654-574c-9603-4ab20b12c26f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/mixedtypepick/DiscordObhod/releases/download/DiscordObhod/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/mixedtypepick/DiscordObhod/releases/download/DiscordObhod/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:42Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ee2c6bb6-10b4-5093-a7a7-5b5534bd8056",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/mastergullshed/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/mastergullshed/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:42Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0d76bee4-08bc-5e17-9db2-f370a70945c1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/mapdestroyersteal/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/mapdestroyersteal/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:42Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2aa21a78-bf44-5b64-b001-c9b80a1df5f2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/knottyrantcast/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/knottyrantcast/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:42Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6568add8-f8fe-55f9-bd20-ae15531eba1f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/oceanstonemasonlimit/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/oceanstonemasonlimit/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:37Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--19f2ad7d-1702-5c13-8481-01ca4eb8e403",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/nestboxerfence45/ZapretDiscord/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/nestboxerfence45/ZapretDiscord/releases/download/2.22.2/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:37Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a25de60a-c095-5baf-9cab-8365be01e1cc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/knottyrantcast/DiScOrDZapREt/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/knottyrantcast/DiScOrDZapREt/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:37Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--626f7aba-4879-5d95-8627-95489a53fc0e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/mixedtypepick/ObhodDiscord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/mixedtypepick/ObhodDiscord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:36Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8adbd67f-2abb-52cd-b328-ce72419add52",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/lusterlordrepel/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/lusterlordrepel/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:36Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9aff18ea-bd3f-5ff3-a3a3-2401cfb83464",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/knottyrantcast/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/knottyrantcast/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:35Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6f045747-ee62-51cc-bc87-037ddbbaf98a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/miniskinktend/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/miniskinktend/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:34Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--abd67a15-76a5-5956-be48-717a7bbc5d67",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/octagonairpull/ZapretDiscord/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/octagonairpull/ZapretDiscord/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:33Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f0a2b4e5-3a62-5f33-bc29-75e1d0af51a6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/knottyrantcast/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/knottyrantcast/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:32Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--675a6ea1-eea2-5101-bb10-c6dd12dd2e5e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/opentreasurerjump/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/opentreasurerjump/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:31Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f47e432b-011a-58b6-be05-93341bbbdbff",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/oceanstonemasonlimit/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/oceanstonemasonlimit/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:30Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e493a956-1b8e-5e4b-b657-0dcaf4994ca2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/rashedzx/DuckDB[.]ExtensionKit/refs/heads/main/DuckDB[.]ExtensionKit/Extensions/Extension_D_Kit_Duck_v2[.]1-beta[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/rashedzx/DuckDB.ExtensionKit/refs/heads/main/DuckDB.ExtensionKit/Extensions/Extension_D_Kit_Duck_v2.1-beta.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:28Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--561143fc-5a4c-5fd5-b87c-576bcb12146a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/noblefreighterreduce/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/noblefreighterreduce/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:28Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f600cff5-cff9-52cf-b7e3-65271c5684b9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/midnightcrownquest58/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/midnightcrownquest58/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:28Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ac4ab70d-1426-5ae4-afb1-25f5c0566cf1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/outsidebitgirder/DiScOrDZapREt/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/outsidebitgirder/DiScOrDZapREt/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:27Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--17e93da4-a3ad-55c4-a554-d9e6beccd5e5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/portalchemistagitate/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/portalchemistagitate/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:26Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fb56a801-f283-5364-91db-ad37fb2e277e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/octagonairpull/zapret-discord-youtube/releases/download/FixDiscord/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/octagonairpull/zapret-discord-youtube/releases/download/FixDiscord/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:26Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8ef3a1a0-6dfa-541c-916e-a77db8d92ac6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/octagonairpull/ObhodDiscord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/octagonairpull/ObhodDiscord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:26Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--55b01abb-7378-5302-8e55-ec7dff38830b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/noblefreighterreduce/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/noblefreighterreduce/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:26Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1e906e5d-84d6-57a5-8eeb-e60e1c777d9d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/mortalcobraspike/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/mortalcobraspike/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:26Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5e01acd9-fb59-5314-b4df-d59602608c78",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/peltcashierrepresent/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/peltcashierrepresent/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:25Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--84a0f5e1-66db-518e-8d49-8633df8911eb",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/nestboxerfence45/ZapretDiscord/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/nestboxerfence45/ZapretDiscord/releases/download/2.22.2/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:25Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7e05a799-9ca0-59ee-9651-134fbeb05cb2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/nestboxerfence45/FixDiscord/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/nestboxerfence45/FixDiscord/releases/download/2.22.2/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:25Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1ae377c5-de47-5997-8019-41b0cb7bfd71",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/mixedtypepick/ZapretDiscord/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/mixedtypepick/ZapretDiscord/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:25Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bf50f5ab-7269-59db-abbf-60bb4d5e45ca",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/minitannertent/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/minitannertent/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:25Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a1848e4a-1990-5610-9616-dc16a4f66d15",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/outsidebitgirder/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/outsidebitgirder/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:24Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--18089fbc-e04f-58d7-904b-a6fdf340501e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/operativeboxerstart/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/operativeboxerstart/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:23Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9d7dac40-9c26-5cf0-81c6-8dcd463f0763",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/minitannertent/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/minitannertent/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:23Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c3292910-614d-53e6-8800-7a0fb9b79268",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/netotokagestorm/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/netotokagestorm/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:22Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c20a23ab-7ad3-5e96-9613-5371f97210f8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/netotokagestorm/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/netotokagestorm/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:22Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8d9e0261-72b6-5dc5-a79c-b36e89007861",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/naturalcobblertower/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/naturalcobblertower/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:22Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bc090435-8aa6-59db-bde4-4a0ac89332aa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/peltcashierrepresent/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/peltcashierrepresent/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:19Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--72b1b4b5-8ee8-5f68-bd98-da019fae4d0c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/operativeboxerstart/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/operativeboxerstart/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:19Z",
      "confidence": 80,
      "labels": [
        "malware",
        "malware_download",
        "github",
        "SalatStealer",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--95c7ee26-f49c-56ca-973f-2a6813821c36",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/naturalcobblertower/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/naturalcobblertower/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:19Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--384169ec-ab12-5e13-b76f-1f4554115f22",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/miniskinktend/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/miniskinktend/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:19Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--76fedc03-4b4e-52ac-bcf9-e6fe7e94ee2a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/peltcashierrepresent/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/peltcashierrepresent/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:17Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aa4cd5c8-06a4-5857-8d77-b4a8f4eb9ba1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/nodeguruboutique/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/nodeguruboutique/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:17Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a3fb6d0f-042b-5f44-9cc2-6453d32ca52a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/mastergullshed/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/mastergullshed/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:17Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c58aa711-8286-5a83-8180-743f615baf4a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/sausri1/laravel-API-basic-shop/refs/heads/main/project/tests/AP-basic-laravel-shop-3[.]2[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/sausri1/laravel-API-basic-shop/refs/heads/main/project/tests/AP-basic-laravel-shop-3.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:16Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0274c3bf-0c3c-5ca2-96be-f3b0d3eca1f9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/octagongeckovise/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/octagongeckovise/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:16Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f6b8abeb-3df5-5e35-b389-735113584fb0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/peltcashierrepresent/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/peltcashierrepresent/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:13Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b1090927-b8f9-5751-a50d-f63e8a7200ae",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/opentreasurerjump/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/opentreasurerjump/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:13Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--847c9245-c624-5240-aeab-0bb3924e7456",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/netotokagestorm/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/netotokagestorm/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:13Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d52ffa42-c5c8-5b94-a56f-7ff19ba3c94a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/portalchemistagitate/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/portalchemistagitate/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:11Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--44aac0e8-6563-58c2-ad39-46338b974547",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/nodeguruboutique/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/nodeguruboutique/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:10Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7bfb4f96-9367-5904-a035-e76813ad0624",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/minitannertent/DiScOrDZapREt/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/minitannertent/DiScOrDZapREt/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:10Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0715d557-def6-5e76-9632-f7f35a7d787e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/knottyrantcast/DiScOrDZapREt/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/knottyrantcast/DiScOrDZapREt/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:10Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2388b32b-ed1e-5be6-8de7-794f870b537c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/octagongeckovise/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/octagongeckovise/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:09Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c986d36c-2fea-5ab0-84cf-56f83fc285aa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/portalchemistagitate/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/portalchemistagitate/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:08Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e593c99c-806d-5e95-900a-6da48d27ec6c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/portalchemistagitate/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/portalchemistagitate/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:08Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--27f81716-0af5-57f7-887c-9f6ef257354b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/nestboxerfence45/DiscordFix/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/nestboxerfence45/DiscordFix/releases/download/2.22.2/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:08Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c3e0ddc4-03df-5d25-88ac-f306751a7458",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/opentreasurerjump/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/opentreasurerjump/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:07Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7d49260f-bf6a-54fc-aecd-682fbb1b47ef",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/rateportalcrucible/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/rateportalcrucible/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:05Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fcef41c7-9e41-5b22-b361-aa5dc4d823bf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/octagonairpull/DiscordObhod/releases/download/DiscordObhod/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/octagonairpull/DiscordObhod/releases/download/DiscordObhod/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:04Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e4b09346-eddf-5a94-affe-00194b5c7934",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/mapdestroyersteal/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/mapdestroyersteal/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:04Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--81194efc-7a68-5f50-898d-b1e78f773faa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/octagongeckovise/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/octagongeckovise/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:03Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--20194a92-7c47-5e5f-9c8a-0c368160021f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/netotokagestorm/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/netotokagestorm/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:03Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5ad5fa13-9c02-5390-9b0f-3ed335900d96",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/magentacasterscrew56/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/magentacasterscrew56/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:03Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--58fff2cd-5185-5882-b55d-b68cc4b32ee2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/patrolthundercastle/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/patrolthundercastle/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:02Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--09cc7fe7-74e0-531c-a7e1-f59460b70e1c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/paintroadpath/DiScOrDZapREt/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/paintroadpath/DiScOrDZapREt/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:02Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4c94518b-8950-57f6-b900-f403017a9f32",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/magentacasterscrew56/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/magentacasterscrew56/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:23:01Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fce58ab4-8ee1-5a05-9dbc-8c78f6ce4cc9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/paintroadpath/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/paintroadpath/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:59Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--579d3f04-099c-5442-8d42-40be00c11e20",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/operativeboxerstart/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/operativeboxerstart/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:59Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--967f5d29-9cd6-5aa0-b25e-f1ab89264248",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/peltcashierrepresent/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/peltcashierrepresent/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:57Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--77f6d5bb-4e84-5a20-88ce-d53e0cdb752d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/mastergullshed/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/mastergullshed/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:57Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f3c09b43-4420-5420-90f4-eb9175b32a42",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/lusterlordrepel/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/lusterlordrepel/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:57Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4aab08f5-9c79-53b3-bab1-8fa8eaf8a963",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/peltcashierrepresent/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/peltcashierrepresent/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:56Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8abfdbb6-e7e5-5096-8433-02b4f91f3147",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/rateportalcrucible/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/rateportalcrucible/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:55Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--db5b0df0-f6f6-56c6-91aa-8fd8abf43d49",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/lusterlordrepel/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/lusterlordrepel/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:55Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0ffca945-ba6f-5206-9732-0fc0edfeb205",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/mortalcobraspike/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/mortalcobraspike/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:54Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--55952a5e-de8d-5efc-9b1b-14e9dbd25286",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/lunardataemancipate/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/lunardataemancipate/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:54Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--34f6034b-59ec-564f-9d3a-c125891c66b0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/lunardataemancipate/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/lunardataemancipate/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:54Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c726a8d4-51fd-56bd-b4d2-7e03cda573a2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/naturalcobblertower/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/naturalcobblertower/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:53Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a645204b-1ac0-506d-bd13-cc661ec0eaf7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/mixedtypepick/zapret-discord-youtube/releases/download/FixDiscord/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/mixedtypepick/zapret-discord-youtube/releases/download/FixDiscord/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:53Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f2dfe5ad-3355-5f45-a8f8-15bc463a9022",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/opentreasurerjump/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/opentreasurerjump/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:52Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--144dc59f-44b6-52ba-8289-b8e90e00cb2f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/nestboxerfence45/DiscordZapret/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/nestboxerfence45/DiscordZapret/releases/download/2.22.2/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:52Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--43d29c6a-8e22-5a2f-8faa-2d7f08882f40",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:2df7b49b9987822e437f1b88efedd9fbe58a7f524ec02974034c6188f6e39c35",
      "pattern": "[file:hashes.'SHA-256' = '2df7b49b9987822e437f1b88efedd9fbe58a7f524ec02974034c6188f6e39c35']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:52Z",
      "confidence": 80,
      "labels": [
        "AMOS",
        "Amos",
        "ClickFix",
        "Foxveil",
        "macOS",
        "malware",
        "threatfox"
      ],
      "x_swiftioc_source": "malwarebazaar_recent,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6ae46a94-8ca0-5f30-9775-8e05db1c036f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/paintroadpath/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/paintroadpath/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:51Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c7789a6e-e1d6-53f8-b2f0-f3f2f312e27d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/lunardataemancipate/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/lunardataemancipate/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:51Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--70f1ee28-5efc-5e72-ac3b-bdc5b76f27e3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/oceanstonemasonlimit/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/oceanstonemasonlimit/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:50Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f28a279d-3e70-5798-8380-40fa00898e62",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/opentreasurerjump/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/opentreasurerjump/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:49Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b55206a1-126b-5c3c-803b-75133d32253e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/midnightcrownquest58/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/midnightcrownquest58/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:49Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9b089457-5dd5-548a-a877-0fc450ef7729",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/midnightcrownquest58/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/midnightcrownquest58/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:48Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aafce3ee-4577-55bf-9d92-d48892ac13dc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/mapdestroyersteal/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/mapdestroyersteal/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:48Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8c72b194-e4e9-5b86-9275-b8a84df0b0bd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/nodeguruboutique/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/nodeguruboutique/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:47Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3c2b9605-80e4-51cb-868a-3c989d49ac97",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/ramilafuinte/openphron-backend/refs/heads/main/src/contract/services/openphron_backend_v3[.]3-beta[.]3[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/ramilafuinte/openphron-backend/refs/heads/main/src/contract/services/openphron_backend_v3.3-beta.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:45Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--277176ca-3845-5c33-a57c-2c6b34237f87",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/nodeguruboutique/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/nodeguruboutique/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:45Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5714a7f2-6bfa-51d3-b2f2-ddaf9b1589b5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/netotokagestorm/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/netotokagestorm/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:45Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b849b2f7-4863-5e82-97ce-fdfdce916467",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/patrolthundercastle/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/patrolthundercastle/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:44Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3147f710-2942-5e38-8fbd-0985752fea08",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/netotokagestorm/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/netotokagestorm/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:43Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1f48312a-f180-58f1-98a2-0af51f8a6419",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/mortalcobraspike/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/mortalcobraspike/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:43Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9d349840-833a-5e0b-92fc-3d3b18e04b2d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/knottyrantcast/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/knottyrantcast/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:43Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c9320d7a-7145-5c0a-a5ba-ed14b43371cc",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/netotokagestorm/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/netotokagestorm/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:41Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6981dd5a-b8a4-580f-8319-967c8c692f9d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/lairdictatorport/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/lairdictatorport/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:41Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2ec16617-0d94-5cfe-8cc5-abc18611fa7e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/scalarcentersquare/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/scalarcentersquare/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:40Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0d474307-c3fe-56fa-8e40-07b3e86cc002",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/mastergullshed/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/mastergullshed/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:40Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ab053e2f-99d3-5bc1-9329-3c9fe42f89a2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/opentreasurerjump/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/opentreasurerjump/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:36Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--660f3041-f4f4-5f7e-b858-d3d6c825dc91",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/mortalcobraspike/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/mortalcobraspike/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:36Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6c36850c-1c37-513c-bd3c-0c5cd8de261c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/rateportalcrucible/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/rateportalcrucible/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:35Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9f882498-fba7-575c-a1c1-97ccb5e58f39",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/paintroadpath/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/paintroadpath/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:35Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b4962454-b4cf-58bb-83eb-6dd6fc16d191",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/outsidebitgirder/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/outsidebitgirder/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:35Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e4d8547c-90f6-5b0b-809a-e5fb455b21c2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/mixedtypepick/ObhodDiscord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/mixedtypepick/ObhodDiscord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:35Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9ba2d01d-91b5-5ca2-8253-3d225e3d94ff",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/miniskinktend/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/miniskinktend/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:35Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d5ad3d23-2f9b-5eb9-bc21-f33cc454fbd8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/mastergullshed/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/mastergullshed/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:35Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ade35c3f-fe29-5694-8573-41890f543d15",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/mastergullshed/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/mastergullshed/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:35Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0a566af5-985c-5dac-a06a-b87e68ae87f8",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/mastergullshed/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/mastergullshed/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:35Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7677391b-e008-5823-ae25-e56ecf1cccd2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/lairdictatorport/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/lairdictatorport/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:35Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9208a825-e2de-5223-b269-ec199ee05c7d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/lairdictatorport/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/lairdictatorport/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:35Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5d23937b-eb9a-555a-98e0-3408d5c2ad8b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/mapdestroyersteal/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/mapdestroyersteal/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:34Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--41f33c12-f060-5f29-9c6a-f12e9d1f3349",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/lusterlordrepel/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/lusterlordrepel/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:33Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a50cecc7-9a01-594c-9956-48f8c620b8f3",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/lunardataemancipate/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/lunardataemancipate/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:32Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--253dd511-d323-526f-a882-5434d2096f67",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/lairpupashake/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/lairpupashake/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:30Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--720aec94-0fab-5dfa-9030-3ff66392197f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/musyra/ComfyUI_RH_Qwen-Image/refs/heads/main/predilect/Qwen_U_R_Image_Comfy_v1[.]2-alpha[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/musyra/ComfyUI_RH_Qwen-Image/refs/heads/main/predilect/Qwen_U_R_Image_Comfy_v1.2-alpha.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:29Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6e9cfe0a-ebf3-5e8d-b8f9-45fef19b38c7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/mixedtypepick/zapret-discord-youtube/releases/download/FixDiscord/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/mixedtypepick/zapret-discord-youtube/releases/download/FixDiscord/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:29Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ae751d8a-753f-5518-8299-2d71059e7caa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/matrixswallowcalm45/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/matrixswallowcalm45/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:29Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--13534447-ff78-5308-8452-c4a855bb8004",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/magentacasterscrew56/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/magentacasterscrew56/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:28Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f2e105e5-d287-5d96-96e3-e40e741eb2b4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/rateportalcrucible/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/rateportalcrucible/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:27Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--bc138474-747b-5601-8748-893d8467a182",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/naturalcobblertower/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/naturalcobblertower/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:27Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d5bdac8c-16f6-5ac5-8e1b-5bc283351710",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/octagongeckovise/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/octagongeckovise/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:26Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1280f32c-4d24-5ca0-849b-02d8f7fa717e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/naturalcobblertower/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/naturalcobblertower/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:26Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0479e450-ac99-5054-9783-6b49440569ee",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/magentacasterscrew56/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/magentacasterscrew56/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:26Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--77b9e13a-f42f-5fcc-990d-9f8dffde0e5e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/mastergullshed/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/mastergullshed/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:24Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3ea0a140-b477-58f2-976e-fc371b22591e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/lunardataemancipate/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/lunardataemancipate/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:24Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--1047ee4b-6cbd-56d6-9e13-a923cba86c36",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/lunardataemancipate/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/lunardataemancipate/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:24Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f45d2b5f-ac0a-5372-9936-592d880de153",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/netotokagestorm/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/netotokagestorm/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:23Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d3a7fa2d-fb85-566e-85b8-fd996523cb14",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/mastergullshed/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/mastergullshed/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:23Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b5cd7473-ca77-5491-9d48-789568ac010f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/minitannertent/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/minitannertent/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:22Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--39429a51-94b2-5874-b40b-6923bcdb9816",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/magentacasterscrew56/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/magentacasterscrew56/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:22Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--40aefe48-c5eb-56bc-9458-30bcb0ceae3a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/midnightcrownquest58/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/midnightcrownquest58/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:21Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f6e4585d-fb2f-51f2-8cbd-9ab5156636a7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/mastergullshed/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/mastergullshed/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:21Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b0d67a94-b0e4-5435-b4e0-04a2f0a910b9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/legendarybisonstring/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/legendarybisonstring/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:21Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--87a019fb-61a6-5084-ab77-590f2c29083f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/lairdictatorport/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/lairdictatorport/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:21Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--45698d76-c624-5009-8ae6-2cbecb32cef6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/paintroadpath/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/paintroadpath/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:19Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b4cb9fe3-d793-5a49-957e-0a408aefc806",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/knottyrantcast/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/knottyrantcast/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:19Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2e21f977-de5c-5817-af69-2c5be5a65eb7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/operativeboxerstart/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/operativeboxerstart/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:15Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--06af754a-9cce-5702-a081-af0c591cdffd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/peltcashierrepresent/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/peltcashierrepresent/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:14Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5a20e467-b0db-59bf-9221-eda0548770c7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/opentreasurerjump/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/opentreasurerjump/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:14Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5e210b02-df38-58a5-b92f-41ec1bbeae27",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/oceanstonemasonlimit/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/oceanstonemasonlimit/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:14Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f2e999ac-78ac-5eda-801f-42b6e9745344",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/oceanstonemasonlimit/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/oceanstonemasonlimit/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:14Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--75475320-aa6d-56f7-bdf7-0a0bfe1e4a0e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/noblefreighterreduce/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/noblefreighterreduce/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:14Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--09b5b98b-6b15-5048-bca1-53c8548e7fe5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/naturalcobblertower/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/naturalcobblertower/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:14Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a02e40a2-1e86-5e48-9c91-fdd56fc3143b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/magentacasterscrew56/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/magentacasterscrew56/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:14Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e25e2713-6d89-5f19-8e03-8bb0c2e207ab",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/lunardataemancipate/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/lunardataemancipate/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:14Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b5987019-b3d5-50a6-8c23-2dd6bce25000",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/SawmFawker/reflex/refs/heads/main/tests/units/components/markdown/Software-v1[.]5[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/SawmFawker/reflex/refs/heads/main/tests/units/components/markdown/Software-v1.5.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:08Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ecb1a04e-651b-5d1f-ae75-e58055fb8890",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/midnightcrownquest58/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/midnightcrownquest58/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:08Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c721fd45-c284-5be2-8f01-a67c06fbdbaa",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/PATRON2222/Drone_Web_Interface_909/refs/heads/main/components/Web_Drone_Interface_v2[.]7[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/PATRON2222/Drone_Web_Interface_909/refs/heads/main/components/Web_Drone_Interface_v2.7.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:22:07Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fe5cb98e-bf3f-54b9-ae2e-5efb83111863",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:0e8fe946202cc568e7849117762483031f2f20c74676ed41b2f890175f71abe6",
      "pattern": "[file:hashes.'SHA-256' = '0e8fe946202cc568e7849117762483031f2f20c74676ed41b2f890175f71abe6']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:21:38Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "macOS",
        "threatfox",
        "willow"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ceafc835-d1fa-59f6-9ca0-715467281540",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "ipv4:37[.]114[.]55[.]227",
      "pattern": "[ipv4-addr:value = '37.114.55.227']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:21:01Z",
      "confidence": 80,
      "labels": [
        "RAT",
        "spicerat",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8add58cf-6ccf-59ae-ae1b-7d3c5ae2973f",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "domain:cdn[.]decadenza[.]me",
      "pattern": "[domain-name:value = 'cdn.decadenza.me']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:20:59Z",
      "confidence": 80,
      "labels": [
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b60b71ea-b22d-5744-be94-83d53c216736",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:15ad5ded80d667fde36461bc9a4d30301c1257af539346e43a5303d2d456d2d3",
      "pattern": "[file:hashes.'SHA-256' = '15ad5ded80d667fde36461bc9a4d30301c1257af539346e43a5303d2d456d2d3']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:19:27Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "malware",
        "threatfox"
      ],
      "x_swiftioc_source": "malwarebazaar_recent,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--082d00a2-098b-57e6-8263-278b1e3f2eb9",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:0a791980df9222daab6931e9579986a2ece1961cadbf462e1d418f772dc6c529",
      "pattern": "[file:hashes.'SHA-256' = '0a791980df9222daab6931e9579986a2ece1961cadbf462e1d418f772dc6c529']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:19:09Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "malware",
        "threatfox"
      ],
      "x_swiftioc_source": "malwarebazaar_recent,threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c3c564a5-57de-5941-a8fd-4a93c61c0a13",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:8cc709b87edda51197f3202f7101fe6608d673678a72279d01a8c4fa1c3002a9",
      "pattern": "[file:hashes.'SHA-256' = '8cc709b87edda51197f3202f7101fe6608d673678a72279d01a8c4fa1c3002a9']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:18:53Z",
      "confidence": 80,
      "labels": [
        "Amos",
        "ClickFix",
        "Foxveil",
        "macOS",
        "quill",
        "threatfox"
      ],
      "x_swiftioc_source": "threatfox_export_json",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://threatfox.abuse.ch/browse/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3b5d080a-8b25-55bc-a406-e19dabf3ff8b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "sha256:08b18fda398fa48936c67919bd28715738849bb76ff44731acf86e8563c14754",
      "pattern": "[file:hashes.'SHA-256' = '08b18fda398fa48936c67919bd28715738849bb76ff44731acf86e8563c14754']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:14:34Z",
      "confidence": 80,
      "labels": [
        "Mirai",
        "malware"
      ],
      "x_swiftioc_source": "malwarebazaar_recent",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://bazaar.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--554b9056-9e72-5678-a1d6-d3a70f427f7c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/limitloopkink97/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/limitloopkink97/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:10:39Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--269b3878-c5de-56e5-b1b1-fc62547a8ae0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/gulfgeckocultivate/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/gulfgeckocultivate/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:10:39Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--558c2505-e001-52b1-b23d-db1605f322e6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/ViceroyGorge/discordzapret/releases/download/1[.]9[.]9c/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/ViceroyGorge/discordzapret/releases/download/1.9.9c/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:10:39Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2c39760a-d12d-5a2d-84c6-fa47364f2a13",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/SteamPinpoint/disCORdobHOD/releases/download/1[.]9[.]9c/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/SteamPinpoint/disCORdobHOD/releases/download/1.9.9c/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:10:39Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a989f2c7-5f94-5e01-95a0-b9c33ee51aab",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Solderdrorecognize/dIsCORDZApReT/releases/download/1[.]11[.]5/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/Solderdrorecognize/dIsCORDZApReT/releases/download/1.11.5/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:10:39Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2944d81f-6c8d-58e4-baae-851f7bb9d4fd",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/MythicGeomancerWave/diScORdZAPRet/releases/download/1[.]12[.]5/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/MythicGeomancerWave/diScORdZAPRet/releases/download/1.12.5/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:10:39Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e5770ce3-217f-52bb-896b-62afbf3ec720",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/RegimentIceSing/disCord-ZApRet/releases/download/1[.]10[.]9/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/RegimentIceSing/disCord-ZApRet/releases/download/1.10.9/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:10:38Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--8abc2a10-fb0d-5728-b363-3527451cad42",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/herdrobinnet/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/herdrobinnet/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:10:37Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a673c687-1cd4-51f0-879b-e949a7fb8283",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/fragmentjuniorcare/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/fragmentjuniorcare/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:10:37Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--35d24f39-7ac0-511a-999b-1657ffc9a4a2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/innerpuffinenliven94/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/innerpuffinenliven94/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:10:36Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--3293a2bb-cd97-5bdc-be1f-a6d71669f8e1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/inletheadhunt/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/inletheadhunt/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:10:36Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--403fabc9-1b4c-5761-84a8-590c0e75b5a5",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/grandeurdiplomatbond/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/grandeurdiplomatbond/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:10:36Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--30305303-5387-5de7-94c3-36d8771ea46e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/SensationFiscalTally/discordzapret/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/SensationFiscalTally/discordzapret/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:10:36Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--37b40de0-f666-5cbb-862b-7674066a2dfe",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/kamikazewinner/odoomap/refs/heads/main/src/data/odoo_18/Software-2[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/kamikazewinner/odoomap/refs/heads/main/src/data/odoo_18/Software-2.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:10:30Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ae61b387-6994-5dc4-ba3e-afb11a09adf1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/lacquerwolfbridge/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/lacquerwolfbridge/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:10:30Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d47509d3-4f11-50cd-a4a9-ea54720224ed",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/hornanemoneretreat/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/hornanemoneretreat/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:10:30Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9caf6db0-4bd2-58a6-b70e-79002a5d4cf4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/legionturkeyglorify/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/legionturkeyglorify/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:10:29Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--16d112c4-8d0b-53d6-bf06-7e83e2a34746",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/hyperlionidolize/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/hyperlionidolize/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:10:29Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d807aace-109e-575b-86ce-fc2f22e815b6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/gulfgeckocultivate/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/gulfgeckocultivate/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:10:28Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--2e98b96b-7cd5-556e-ac9e-a8fce41045cf",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/gradehornbillbrace/ZapretDiscord/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/gradehornbillbrace/ZapretDiscord/releases/download/2.22.2/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:10:28Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--21ad3652-b0cd-51a6-b0dc-b8bfeeb91342",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/PhotonBladesmanTube/discord-unban/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/PhotonBladesmanTube/discord-unban/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:10:28Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--30ed0680-5da3-59a4-b4a8-e735ed1f2b79",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/levelkhantrail/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/levelkhantrail/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:10:27Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c7ddbb45-3f0f-50f4-9e74-a92853344b9c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/holddirectorpraise/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/holddirectorpraise/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:10:27Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--64c1ad1a-9916-502a-85b3-a70c07f7b69b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/levelkhantrail/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/levelkhantrail/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:10:25Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cad37ac3-31ce-508c-af77-e0e22fc40007",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/SteamPinpoint/disCORdobHOD/releases/download/1[.]9[.]9c/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/SteamPinpoint/disCORdobHOD/releases/download/1.9.9c/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:10:25Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--baa86b8f-0132-5014-bc3e-39f0527e7683",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/RetroServant34/discordzapret/releases/download/1[.]9[.]9c/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/RetroServant34/discordzapret/releases/download/1.9.9c/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:10:25Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--720beda0-8a4c-5a63-a201-7ae21f64c672",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/MortarShade93/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/MortarShade93/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:10:25Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--19bf7f59-142a-51c1-b745-bf5a8668c4d2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://raw[.]githubusercontent[.]com/adamthapa21/Honeybot/refs/heads/main/habile/Software_v2[.]4-beta[.]1[.]zip",
      "pattern": "[url:value = 'https://raw.githubusercontent.com/adamthapa21/Honeybot/refs/heads/main/habile/Software_v2.4-beta.1.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:10:24Z",
      "confidence": 80,
      "labels": [
        "SmartLoader",
        "github",
        "malware",
        "malware_download",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5908a72d-d6c8-5fdd-b890-e1aa1d665ee1",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/innertigerrepel/DiScOrDZapREt/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/innertigerrepel/DiScOrDZapREt/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:10:24Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--02644f75-1286-5b9a-b88f-331c827253f4",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/herdrobinnet/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/herdrobinnet/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:10:24Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--df9763c8-5056-5e25-96ef-1b7c23551021",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/gulfgeckocultivate/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/gulfgeckocultivate/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:10:24Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a4c52c28-6029-5fe8-9ab4-32660f850716",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/grounddugongequip/DiscordZapret/releases/download/3[.]33[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/grounddugongequip/DiscordZapret/releases/download/3.33.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:10:24Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d54078ec-6d79-5d76-b7ad-ca0228d8f2af",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/hertzvolunteermind/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/hertzvolunteermind/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:10:23Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--dbcc329c-ea32-57b6-aa53-9df9ac3e8eef",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/gradehornbillbrace/FixDiscord/releases/download/2[.]22[.]2/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/gradehornbillbrace/FixDiscord/releases/download/2.22.2/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:10:23Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e4cfddb0-ff21-534f-9886-c7076e6c7d83",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/OrangeDuelist/zaPret_discOrd_1[.]10[.]3/releases/download/1[.]10[.]4/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/OrangeDuelist/zaPret_discOrd_1.10.3/releases/download/1.10.4/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:10:23Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--569614b9-5699-5622-a544-f73b73810c70",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/hydralobstertape/DiscordZapret/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/hydralobstertape/DiscordZapret/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:10:22Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--86f7c6a9-5f1f-59c3-aa66-fc2d2fc390d2",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/inletheadhunt/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/inletheadhunt/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:10:19Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--fcd8f346-d6c6-5132-95d7-97c86304261a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/limitgiverdress74/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/limitgiverdress74/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:10:18Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0dca3d73-4339-5813-b3ea-c9c13b6ed238",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/RainAutocrat/DiScorDZaPret/releases/download/1[.]12[.]1/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/RainAutocrat/DiScorDZaPret/releases/download/1.12.1/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:10:17Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--04f3ca69-fa77-5674-b51f-bbac1c3e333b",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/herdrobinnet/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/herdrobinnet/ZaPretDIscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:10:16Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--00ce4446-9423-516c-9e29-55570385adf6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/hydrawatchmanmoat/FixDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]rar",
      "pattern": "[url:value = 'https://github.com/hydrawatchmanmoat/FixDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:10:11Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0464a6bb-0044-5360-9284-bac6be089b72",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/gripdistributortape/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/gripdistributortape/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:10:09Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5c151bbc-d76f-5a62-b4fe-c206ee91be1d",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/innerpuffinenliven94/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/innerpuffinenliven94/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:10:07Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b78b6be5-e4a6-5c78-8996-683a6fe1e499",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/WindContemplate/diScOrdzaPRet/releases/download/1[.]13[.]1/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/WindContemplate/diScOrdzaPRet/releases/download/1.13.1/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:10:07Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--401880dc-299b-5346-9310-6689f6b04348",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/MechanicStir69/zapret-discord/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/MechanicStir69/zapret-discord/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:10:06Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--9560112d-93ab-5091-ad0f-cffa4bba9b49",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/hertzvolunteermind/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/hertzvolunteermind/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:10:05Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5f4147c8-87d3-5b75-936a-514d227cbe97",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/gulfgeckocultivate/DiScOrDZapREt/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/gulfgeckocultivate/DiScOrDZapREt/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:10:05Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c817c0d6-c2f5-5455-b8ec-2ee865a34af6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/SheenMillipede/ZApreT-DiScoRD-1[.]10[.]3/releases/download/1[.]12[.]1/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/SheenMillipede/ZApreT-DiScoRD-1.10.3/releases/download/1.12.1/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:10:05Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--02b123c3-6091-5bcc-99ee-fd13f419bc13",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/hurricaneczarcairn62/DiscordObhod/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/hurricaneczarcairn62/DiscordObhod/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:10:02Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--66bf7f53-ab19-511a-8368-0733125855a6",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/herdrobinnet/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/herdrobinnet/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:10:02Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f75c751d-e354-508d-9da2-d60ea8f75aa7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/legionturkeyglorify/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/legionturkeyglorify/ZApRetDiscOrd/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:10:00Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--7b32c9d3-ea37-526e-b86b-e2af13f9d500",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/grandeurdiplomatbond/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/grandeurdiplomatbond/ObhOdDiScOrD/releases/download/ObhodDiscord/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:10:00Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--0428b4bb-2b01-5401-a1af-717c8305bb4a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/legendarybisonstring/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/legendarybisonstring/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:09:55Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--43c5dc99-76a9-5996-9ea2-9ceee83a688c",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/gripdistributortape/DiScOrDZapREt/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/gripdistributortape/DiScOrDZapREt/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:09:55Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--30a61aaf-7725-5ede-a764-3f0cd065bac0",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/fractionwalkerroof/ZapretDiscord/releases/download/3[.]33[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/fractionwalkerroof/ZapretDiscord/releases/download/3.33.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:09:55Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--97bd2805-e5b1-55db-acca-243108ff79a7",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/levelkhantrail/ZapretDiscord/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/levelkhantrail/ZapretDiscord/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:09:54Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--c3da358e-0c25-5263-a6c6-2db2ea79ba0e",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/lastleopardfilter/DiScOrDZapRet/releases/download/zapret-discord-youtube-1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]zip",
      "pattern": "[url:value = 'https://github.com/lastleopardfilter/DiScOrDZapRet/releases/download/zapret-discord-youtube-1.10.2/zapret-discord-youtube-1.10.2.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:09:54Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--4920f8ea-105a-564c-9cf5-7c797174ff57",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/hazekazekagesleeve12/DiscordObhod/releases/download/1[.]10[.]2/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/hazekazekagesleeve12/DiscordObhod/releases/download/1.10.2/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:09:54Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5e9a949d-de64-5c2d-8590-d40f69d046ff",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/groundshadowatone/ZapretDiscord/releases/download/DiscordZapret/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/groundshadowatone/ZapretDiscord/releases/download/DiscordZapret/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:09:54Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--242961df-357a-57a3-984c-1c889d4de126",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/WindContemplate/dIscORd-ZapreT/releases/download/1[.]13[.]2/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/WindContemplate/dIscORd-ZapreT/releases/download/1.13.2/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:09:54Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--199d3322-8599-5d9f-9f9b-d4eb5e38ec6a",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/PlatoonChordMall/ZAPrET-DIScORD_1[.]10[.]3/releases/download/1[.]12[.]5/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/PlatoonChordMall/ZAPrET-DIScORD_1.10.3/releases/download/1.12.5/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:09:54Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e01de82c-aab3-5f43-b369-c5b256ba4470",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/Shogungruregain28/DiSCORDzAPrEt/releases/download/1[.]13[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/Shogungruregain28/DiSCORDzAPrEt/releases/download/1.13.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:09:53Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e75020e6-de75-52a2-a885-b8386f301dbe",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/innertigerrepel/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1[.]10[.]2[.]rar",
      "pattern": "[url:value = 'https://github.com/innertigerrepel/DiScorDObHoD/releases/download/DiscordObhod/zapret-discord-youtube-1.10.2.rar']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:09:52Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e085c271-8b4c-55d4-9723-587e2bef7f12",
      "created": "2026-10-24T22:12:45Z",
      "modified": "2026-10-24T22:12:45Z",
      "created_by_ref": "identity--1ef9b838-54d9-53d4-a6e1-e0c225998274",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "url:hxxps://github[.]com/holddirectorpraise/DiscordFix/releases/download/1[.]10[.]3/zapret-discord-youtube-1[.]10[.]3[.]zip",
      "pattern": "[url:value = 'https://github.com/holddirectorpraise/DiscordFix/releases/download/1.10.3/zapret-discord-youtube-1.10.3.zip']",
      "pattern_type": "stix",
      "valid_from": "2026-10-24T09:09:52Z",
      "confidence": 80,
      "labels": [
        "SalatStealer",
        "github",
        "malware",
        "malware_download",
        "zapret",
        "zip"
      ],
      "x_swiftioc_source": "urlhaus_recent_urls",
      "x_swiftioc_tlp": "CLEAR",
      "x_swiftioc_reference": "https://urlhaus.abuse.ch/"
    }
  ]
}
